Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4304a9ea-ddad-4442-bdab-8d8916ff78f9/b703bf68-9692-35df-b532-677bb7e7d408.roa
File:                     b703bf68-9692-35df-b532-677bb7e7d408.roa (raw, json)
Hash identifier:          gGn6qkRz01YniLVoLRrXDgpITFi1n112Fsuud5mCNjw=
Subject key identifier:   2D:6E:79:4A:1B:D4:64:53:C5:3A:47:FB:FF:C3:D1:D3:CF:32:EF:F7
Certificate issuer:       /CN=4304a9ea-ddad-4442-bdab-8d8916ff78f9
Certificate serial:       010D0C9F43285845DBFE72BCC57D3C6283CC1680
Authority key identifier: 7E:62:15:02:42:21:A7:BB:9B:3A:C8:99:DA:C2:CB:8E:23:28:B4:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4304a9ea-ddad-4442-bdab-8d8916ff78f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4304a9ea-ddad-4442-bdab-8d8916ff78f9/b703bf68-9692-35df-b532-677bb7e7d408.roa
Signing time:             Mon 13 May 2024 13:00:34 +0000
ROA not before:           Mon 13 May 2024 13:00:34 +0000
ROA not after:            Sun 11 Aug 2024 13:00:34 +0000
asID:                     3477
IP address blocks:        140.208.240.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:db:fe:72:bc:c5:7d:3c:62:83:cc:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4304a9ea-ddad-4442-bdab-8d8916ff78f9
        Validity
            Not Before: May 13 13:00:34 2024 GMT
            Not After : Aug 11 13:00:34 2024 GMT
        Subject: CN=3db0bb03-ecda-4334-9824-b2a4b28b4a4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ce:48:f3:4b:68:d3:8a:b7:59:b0:ee:aa:56:
                    c2:a7:af:b8:5a:ec:46:00:7d:51:bb:39:38:ab:a6:
                    c4:28:64:42:90:12:8c:0b:ab:34:0c:11:09:7d:3f:
                    59:f0:3e:29:e0:91:83:4e:46:d2:7c:48:4e:55:57:
                    cc:35:17:f8:43:18:8e:b0:d8:cb:20:1f:e7:da:2e:
                    ab:e9:b3:be:71:43:b2:3b:d3:d4:91:bd:b6:27:fb:
                    1e:c0:13:0d:8f:9c:f2:0d:0b:7f:f7:9f:3a:69:cd:
                    98:bb:8c:2e:81:5c:15:6e:09:ba:99:1b:be:e6:b4:
                    a0:3b:5b:82:ac:60:4e:e0:3f:98:bf:2a:b9:f1:df:
                    60:d5:84:93:84:82:f4:1f:10:ce:19:ba:84:c6:59:
                    8b:56:4e:f1:51:2a:b4:90:78:cb:9d:bb:ba:54:59:
                    12:77:05:cb:69:8b:a5:0b:55:51:69:fa:ad:d9:75:
                    b1:28:08:42:e2:85:18:75:04:b4:b0:5c:83:15:4e:
                    fd:82:4d:19:19:12:50:da:d3:8f:44:88:c4:0a:87:
                    b2:5b:03:98:99:be:e8:36:3c:f7:08:eb:37:79:7c:
                    20:32:1d:ac:4b:b4:68:5f:50:02:f0:84:7c:44:c8:
                    87:14:d8:77:e9:23:d1:2f:0f:52:24:bd:2e:c0:78:
                    63:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:6E:79:4A:1B:D4:64:53:C5:3A:47:FB:FF:C3:D1:D3:CF:32:EF:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4304a9ea-ddad-4442-bdab-8d8916ff78f9/b703bf68-9692-35df-b532-677bb7e7d408.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4304a9ea-ddad-4442-bdab-8d8916ff78f9/4304a9ea-ddad-4442-bdab-8d8916ff78f9.crl

            X509v3 Authority Key Identifier:
                keyid:7E:62:15:02:42:21:A7:BB:9B:3A:C8:99:DA:C2:CB:8E:23:28:B4:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4304a9ea-ddad-4442-bdab-8d8916ff78f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.208.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:68:ca:34:bd:b1:2f:40:9a:1a:d9:11:69:ac:4a:b2:e0:6f:
         87:61:a2:74:ad:dc:70:91:76:f6:40:e2:a9:e5:e8:dc:6b:7b:
         5f:0b:c1:f1:1b:ec:e2:28:5e:dc:47:fb:c5:74:c1:19:c4:aa:
         f3:74:82:05:05:f5:a9:06:bf:e0:a0:0a:19:75:25:db:16:c5:
         b0:ee:29:e1:ac:9d:35:aa:0a:49:dc:db:e6:f7:2b:90:57:6b:
         83:23:18:d6:92:e5:90:4e:c8:f8:48:3f:b9:5d:9b:5b:dd:5c:
         f7:ee:6f:8f:d2:7b:e8:98:ef:8d:97:f4:59:9c:06:95:89:5a:
         e7:fb:2b:ef:80:c1:e6:ca:a4:66:cd:d2:b5:5b:67:01:c0:6d:
         1d:a7:59:5f:3c:b5:ed:d6:64:8e:54:fd:08:b8:03:e9:d6:07:
         20:2f:c1:9a:91:50:bd:8d:d6:91:fe:b0:72:8b:53:b1:d3:59:
         33:a5:33:ab:d1:7e:8d:0f:96:ad:cc:3e:1a:02:ba:ed:d4:9a:
         bb:00:78:c2:d2:11:92:e1:51:b7:d0:89:3a:a2:db:7a:b7:77:
         b7:ed:41:bf:1e:be:28:cd:8d:a0:8b:cb:5c:83:b8:71:80:62:
         c5:1b:13:8f:a0:bb:b7:c6:3f:dc:66:5f:87:3d:ea:ff:a9:15:
         d1:55:6e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----