Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc/77003eb5-6a4d-39bb-8fab-48ceec6da607.roa
File:                     77003eb5-6a4d-39bb-8fab-48ceec6da607.roa (raw, json)
Hash identifier:          08I11oGMTDYJgS7X4si6I79/iiPlBe5wroPKvrOWgnU=
Subject key identifier:   5D:2F:4D:B5:87:FB:03:2F:91:FC:97:EB:79:29:CF:AD:B6:2A:ED:5C
Certificate issuer:       /CN=2d6a17c2-b155-4b32-933b-3f7043e2cecc
Certificate serial:       010D0C9F43285846DA0AACA6F710414BDC11F7E0
Authority key identifier: 0B:75:35:AC:19:65:B0:66:0B:65:F7:2F:F2:E3:7F:C4:7A:A3:03:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc/77003eb5-6a4d-39bb-8fab-48ceec6da607.roa
Signing time:             Mon 12 Aug 2024 13:00:39 +0000
ROA not before:           Mon 12 Aug 2024 13:00:39 +0000
ROA not after:            Sun 10 Nov 2024 14:00:39 +0000
asID:                     397423
IP address blocks:        69.42.221.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:da:0a:ac:a6:f7:10:41:4b:dc:11:f7:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d6a17c2-b155-4b32-933b-3f7043e2cecc
        Validity
            Not Before: Aug 12 13:00:39 2024 GMT
            Not After : Nov 10 14:00:39 2024 GMT
        Subject: CN=2d1f35be-7997-4c14-8b96-05c67ec84771
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d1:4b:ad:1d:75:d5:19:84:bf:97:60:40:6d:
                    8c:15:dc:7e:c9:a2:b2:31:96:63:4b:a8:43:6f:ae:
                    26:3e:71:a1:9c:d5:94:12:51:c6:66:ca:cf:04:fe:
                    36:8a:50:44:7a:ac:fc:5c:be:a2:20:a8:bc:77:62:
                    a6:04:c6:88:23:78:e9:b8:77:e9:78:85:d0:1f:a4:
                    9a:07:b7:2a:00:85:a3:3f:4b:9e:e1:e4:d8:6a:cc:
                    db:87:f6:8c:89:0a:22:c3:df:c4:fa:77:6d:a8:06:
                    fd:12:c2:72:57:d1:de:5d:6e:7d:1b:c4:23:e0:c9:
                    58:5c:c6:3b:fe:8d:99:75:45:f2:29:33:ef:36:51:
                    c6:72:62:d5:77:2a:35:ce:71:70:73:3f:4f:d2:69:
                    6c:dd:b0:fc:ad:45:a8:37:51:1f:5c:12:eb:8b:fb:
                    de:ff:a8:91:f5:0a:57:49:35:93:42:ea:9f:9b:d2:
                    fc:3e:9d:eb:c8:ab:99:a8:1f:a9:78:d7:91:23:90:
                    7c:f9:1b:b9:5b:54:09:59:92:4c:73:9d:6c:f1:44:
                    b7:cf:db:ed:59:ed:61:d7:2f:99:e2:be:3f:2a:f0:
                    84:31:47:2d:82:d3:81:80:e4:39:fe:07:38:09:d9:
                    b9:b8:c0:c7:07:16:33:2b:41:0b:c8:53:fb:fd:68:
                    38:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:2F:4D:B5:87:FB:03:2F:91:FC:97:EB:79:29:CF:AD:B6:2A:ED:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc/77003eb5-6a4d-39bb-8fab-48ceec6da607.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc/2d6a17c2-b155-4b32-933b-3f7043e2cecc.crl

            X509v3 Authority Key Identifier:
                keyid:0B:75:35:AC:19:65:B0:66:0B:65:F7:2F:F2:E3:7F:C4:7A:A3:03:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.42.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:e4:90:9d:cb:a2:53:d3:a0:d6:ac:5c:19:fb:a5:fe:cd:c2:
         47:71:13:1d:4c:0c:ac:99:6c:9e:00:ed:92:dc:0a:47:81:8e:
         e1:3a:b6:9c:f4:13:bb:4a:7d:29:00:0a:88:05:25:9b:34:7c:
         d3:bc:34:cf:a8:83:ad:0d:e5:bf:72:4b:1d:a9:c6:db:01:b2:
         bb:ba:71:75:bf:6f:99:1c:b4:47:bf:b4:1c:0e:b3:a4:28:b3:
         7f:ad:1f:bf:c7:5d:70:01:39:ec:2a:59:12:5c:ff:e8:77:d1:
         d5:11:f4:5e:58:13:26:0f:56:06:e6:2d:b7:1b:01:bb:80:d2:
         dd:d8:37:7c:26:b5:6d:9a:b4:e3:14:02:a8:b4:24:0b:64:8f:
         ad:b2:26:4b:3b:7a:86:ec:3a:fc:ec:b8:75:9c:4a:83:a0:3f:
         6e:c0:f9:28:5c:74:3a:3b:0f:46:02:e9:4b:48:43:ea:8b:54:
         48:97:7e:7f:02:b4:04:7a:fb:c8:fb:7b:19:07:30:d1:00:2b:
         d1:24:ba:f0:90:47:5e:4e:35:64:27:c1:39:9a:36:68:df:0c:
         5e:d0:e4:ab:9d:46:30:f3:96:55:b9:b3:ab:d5:5b:69:12:38:
         e4:f5:2e:c5:32:61:b4:82:7c:ac:b6:cf:22:e2:89:d8:9a:4f:
         82:90:e9:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----