Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc/3d892f3f-5a7a-33b5-8c22-9048fba9c92d.roa
File:                     3d892f3f-5a7a-33b5-8c22-9048fba9c92d.roa (raw, json)
Hash identifier:          FEMBrrZVliC7n+W5AZNWqom0xS5dxMb3d+1Ouc8Hs3k=
Subject key identifier:   CF:5D:15:D3:8D:AB:57:D5:E6:AD:45:16:B5:C1:C7:55:79:5F:03:AC
Certificate issuer:       /CN=2d6a17c2-b155-4b32-933b-3f7043e2cecc
Certificate serial:       010D0C9F4328584713459F52CFD373B2F1D2D020
Authority key identifier: 0B:75:35:AC:19:65:B0:66:0B:65:F7:2F:F2:E3:7F:C4:7A:A3:03:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc/3d892f3f-5a7a-33b5-8c22-9048fba9c92d.roa
Signing time:             Mon 02 Sep 2024 01:00:31 +0000
ROA not before:           Mon 02 Sep 2024 01:00:31 +0000
ROA not after:            Sun 01 Dec 2024 02:00:31 +0000
asID:                     400788
IP address blocks:        69.42.222.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:13:45:9f:52:cf:d3:73:b2:f1:d2:d0:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d6a17c2-b155-4b32-933b-3f7043e2cecc
        Validity
            Not Before: Sep  2 01:00:31 2024 GMT
            Not After : Dec  1 02:00:31 2024 GMT
        Subject: CN=0f77b9b6-f022-4b5b-8ae2-88ffa00b5b69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a7:bd:da:9b:04:6f:3e:2c:28:dd:29:36:1d:
                    3e:f4:a5:7f:10:a1:ae:b1:c8:40:af:cd:2e:8b:6d:
                    41:ea:a7:c7:90:46:02:af:52:08:f9:3f:e9:f6:48:
                    5e:3a:0c:be:a2:c7:27:e5:1d:c6:bf:47:f1:e8:1f:
                    92:51:44:b4:8a:75:a4:13:f0:27:79:45:a8:95:46:
                    58:4f:10:bd:7b:83:8a:ab:0e:8f:0e:91:39:ee:c7:
                    75:40:27:3d:24:23:6d:32:dd:2c:80:1f:10:6b:21:
                    03:0c:5c:51:c2:5d:88:c8:5d:75:3e:87:d0:df:bc:
                    5f:a9:5b:e0:08:1b:14:4e:e9:e2:04:d4:b7:69:5d:
                    52:82:10:da:7a:e3:8d:84:94:b8:35:63:e0:ea:29:
                    1a:1d:01:7a:0a:81:67:bb:48:b4:1d:48:e2:53:48:
                    32:07:5d:cd:75:06:d1:c8:12:fd:f3:a9:6f:70:6b:
                    e8:4f:96:58:cc:09:7c:97:a1:6a:71:99:1f:14:99:
                    96:34:ad:fc:ba:fb:74:7a:f7:79:1f:22:17:d7:e1:
                    ba:19:5e:82:4b:1e:f7:cb:88:bc:f2:4f:56:26:98:
                    af:82:db:7c:4f:ae:ac:40:f9:ec:e0:b6:92:12:6d:
                    e5:c9:13:6c:9e:39:70:1e:c5:c9:d1:a8:67:c3:bc:
                    25:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:5D:15:D3:8D:AB:57:D5:E6:AD:45:16:B5:C1:C7:55:79:5F:03:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc/3d892f3f-5a7a-33b5-8c22-9048fba9c92d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc/2d6a17c2-b155-4b32-933b-3f7043e2cecc.crl

            X509v3 Authority Key Identifier:
                keyid:0B:75:35:AC:19:65:B0:66:0B:65:F7:2F:F2:E3:7F:C4:7A:A3:03:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.42.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:0e:02:53:aa:c4:dc:70:db:2c:48:3f:7f:5e:70:18:5d:0a:
         31:69:d8:35:72:93:c8:65:e9:35:52:d1:49:37:b3:2f:7b:bc:
         22:b3:9c:ad:2d:1c:20:b2:81:db:86:18:9f:9b:ef:81:44:fa:
         7c:10:44:cb:7e:7a:47:8a:3d:13:6a:6b:3d:56:1e:f0:07:80:
         11:f3:45:5d:d7:50:89:34:05:a5:ec:1b:57:49:ba:48:88:28:
         6a:fd:db:57:90:52:47:d9:3c:42:b5:96:7f:4e:96:5a:f2:29:
         4a:a9:44:b7:2d:0e:5c:6a:71:a0:80:1b:09:ea:b6:6e:97:a8:
         18:61:a9:46:0b:aa:c6:9c:17:d6:40:62:fa:34:ce:f6:72:78:
         9f:da:e3:d2:01:82:e1:69:62:ff:b5:46:bf:2b:07:68:25:c8:
         72:b8:bc:f5:03:a0:66:c3:72:97:28:f9:5c:e1:c8:c1:da:57:
         7e:4b:4c:d0:a7:23:8d:fc:55:69:b5:81:23:2f:01:e8:21:84:
         57:5c:72:57:37:2b:c7:08:7c:44:22:8f:fb:6c:a8:a3:09:4d:
         37:af:9b:87:58:61:0c:c0:ae:23:21:55:1c:f4:89:4b:77:aa:
         e0:10:ec:af:75:1a:de:c3:53:46:c7:41:94:e6:f6:59:a6:79:
         47:5c:ab:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----