Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ec9d768e-ef9e-46c9-af25-7b6fa4d09351/9616310b-2764-35ac-b605-7cd62fd01eae.roa
File:                     9616310b-2764-35ac-b605-7cd62fd01eae.roa (raw, json)
Hash identifier:          P+eiMcxMbsbq1RWCQ5W0g/ZGMKqMr4YEMZSQx92sLL0=
Subject key identifier:   C1:F9:43:A9:FC:F0:D8:3D:37:36:26:12:BD:ED:85:48:41:F9:75:E3
Certificate issuer:       /CN=ec9d768e-ef9e-46c9-af25-7b6fa4d09351
Certificate serial:       010D0C9F43285843BA357BDC45E07CF7EAE3F880
Authority key identifier: 43:56:E1:CB:A6:9D:DB:D2:2C:C5:59:31:BA:3B:92:B4:0E:54:2B:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ec9d768e-ef9e-46c9-af25-7b6fa4d09351.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ec9d768e-ef9e-46c9-af25-7b6fa4d09351/9616310b-2764-35ac-b605-7cd62fd01eae.roa
Signing time:             Tue 31 Oct 2023 01:00:15 +0000
ROA not before:           Tue 31 Oct 2023 01:00:15 +0000
ROA not after:            Mon 29 Jan 2024 02:00:15 +0000
asID:                     2495
IP address blocks:        69.77.15.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:ba:35:7b:dc:45:e0:7c:f7:ea:e3:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec9d768e-ef9e-46c9-af25-7b6fa4d09351
        Validity
            Not Before: Oct 31 01:00:15 2023 GMT
            Not After : Jan 29 02:00:15 2024 GMT
        Subject: CN=3dbdc8ec-4a91-4001-96a9-937d340f9f03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:d9:a0:7d:8c:60:13:03:98:09:4c:c6:a6:b0:
                    e7:9f:c3:ff:0d:2a:ae:be:7f:82:a4:9e:43:d7:8d:
                    3c:4e:50:83:3d:28:18:d2:66:9b:aa:31:ff:77:6d:
                    8e:76:8b:bb:dd:d3:1a:00:e9:3d:65:c7:76:94:0f:
                    50:46:52:06:4f:42:67:92:be:d7:f6:a9:d8:b9:cd:
                    b0:78:bf:48:96:65:aa:d7:a4:ff:87:ff:8b:dd:99:
                    10:a8:17:3a:14:c5:a2:2a:a4:7c:f1:79:ac:01:1a:
                    71:eb:fb:ca:86:b8:1d:c7:d9:57:c7:04:cf:60:f4:
                    5e:0a:c9:fb:c2:63:8c:29:9d:c1:6c:c7:a7:e4:2e:
                    da:1d:8e:e3:e4:0d:9b:da:75:ba:df:1f:3f:69:69:
                    b0:7a:9e:83:8b:8b:83:56:be:2b:96:8c:eb:6a:97:
                    54:10:84:11:ca:c5:7a:0e:ea:c4:5a:3b:3d:87:08:
                    1e:73:b9:c7:73:79:74:ac:e7:8b:0a:cd:74:d4:9d:
                    af:b0:39:6d:60:97:cf:84:07:e7:9c:9c:67:3e:53:
                    9e:2f:8c:ab:06:d9:89:93:c7:2e:5a:cf:07:51:44:
                    40:21:d7:a8:3c:c1:f5:b6:70:d1:ca:46:b9:02:0c:
                    3e:83:33:3e:9e:79:a9:b8:53:fc:38:00:4b:d1:fb:
                    22:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:F9:43:A9:FC:F0:D8:3D:37:36:26:12:BD:ED:85:48:41:F9:75:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ec9d768e-ef9e-46c9-af25-7b6fa4d09351/9616310b-2764-35ac-b605-7cd62fd01eae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ec9d768e-ef9e-46c9-af25-7b6fa4d09351/ec9d768e-ef9e-46c9-af25-7b6fa4d09351.crl

            X509v3 Authority Key Identifier:
                keyid:43:56:E1:CB:A6:9D:DB:D2:2C:C5:59:31:BA:3B:92:B4:0E:54:2B:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ec9d768e-ef9e-46c9-af25-7b6fa4d09351.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.77.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:ab:20:8a:e6:d1:e5:2d:bf:b7:96:bf:5d:91:58:56:2d:0c:
         06:c2:c9:c6:50:a4:3b:69:c7:11:67:3b:f2:e2:05:7e:b3:00:
         a0:2f:42:17:23:4e:98:f9:ab:2e:b6:dc:94:a6:31:14:f9:28:
         af:8b:bd:45:5c:68:f8:23:bf:40:14:df:b7:87:1d:24:ee:01:
         4b:cf:e8:2d:a1:c1:35:9a:0a:b7:a1:df:2b:6b:23:95:9a:43:
         77:0b:29:76:19:bf:73:78:0a:e6:3f:f4:64:66:58:1e:a9:6f:
         a3:b4:11:47:b5:ef:6d:75:b3:48:db:23:cc:bf:10:68:e1:57:
         4b:a8:8f:6d:f8:9b:49:80:4b:1d:46:d6:61:ee:3a:ee:28:a2:
         c3:69:40:e9:46:73:54:61:32:a0:24:f3:98:92:70:61:d3:ef:
         d4:b7:5d:10:0f:a8:48:ba:0e:66:f3:05:51:cc:c2:be:4f:7b:
         66:a7:3a:31:c5:e7:2d:4e:b5:6f:e5:f7:80:74:9b:df:5e:22:
         48:d8:0f:3e:c2:69:6e:a8:ab:6c:4c:75:43:14:10:04:fc:bb:
         d1:e8:ad:37:71:85:73:e9:e9:b1:f6:9e:e5:4a:ec:73:a4:cb:
         33:73:7c:fa:2e:a1:8c:01:46:8f:df:20:95:59:fd:14:32:d0:
         39:87:db:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----