Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f8791c17-503c-4afd-9a0b-412c175e957d/af49a621-1be1-3db6-8a53-b42f787b0257.roa
File:                     af49a621-1be1-3db6-8a53-b42f787b0257.roa (raw, json)
Hash identifier:          mFuLOe1SZnUPacKeVSEcsboJGFzSIhDxCemTKThO8Ow=
Subject key identifier:   38:D4:60:E2:0D:0A:80:A4:B1:59:F6:B9:03:9F:C3:8D:0E:AD:FA:15
Certificate issuer:       /CN=f8791c17-503c-4afd-9a0b-412c175e957d
Certificate serial:       010D0C9F43285846B88A8357162A0A119F42BF80
Authority key identifier: 40:E0:29:06:4B:D3:A4:F6:07:8B:63:B4:BC:A6:C7:94:35:DA:A4:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f8791c17-503c-4afd-9a0b-412c175e957d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f8791c17-503c-4afd-9a0b-412c175e957d/af49a621-1be1-3db6-8a53-b42f787b0257.roa
Signing time:             Wed 31 Jul 2024 13:00:38 +0000
ROA not before:           Wed 31 Jul 2024 13:00:38 +0000
ROA not after:            Tue 29 Oct 2024 13:00:38 +0000
asID:                     9009
IP address blocks:        69.168.233.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:b8:8a:83:57:16:2a:0a:11:9f:42:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8791c17-503c-4afd-9a0b-412c175e957d
        Validity
            Not Before: Jul 31 13:00:38 2024 GMT
            Not After : Oct 29 13:00:38 2024 GMT
        Subject: CN=945b125b-6abd-4537-809f-2376c8957c7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:71:69:43:24:63:70:26:de:99:6d:f7:21:c3:
                    8a:8c:42:f5:e1:61:b9:c0:95:58:08:4d:9a:31:38:
                    c9:98:b6:bd:8d:8a:7a:89:c2:5c:8e:2d:46:5a:c2:
                    0e:d2:a9:db:e2:6d:81:12:b8:d7:1e:8e:21:dd:f0:
                    df:a2:f1:12:c0:b3:cf:94:6f:41:44:57:fe:f3:0d:
                    03:18:82:bc:fd:a2:2f:30:b3:1a:e7:cc:58:df:95:
                    b0:17:0f:bb:26:d9:7c:d9:e1:e2:da:cd:e4:1c:2f:
                    77:1c:1b:c1:44:86:79:d8:36:db:a2:73:f4:42:07:
                    52:50:70:93:a3:02:f2:27:44:e9:c1:26:30:9c:55:
                    98:fa:92:0d:8a:67:ae:47:6a:65:a6:30:b7:af:25:
                    87:63:c4:54:ed:19:13:86:3b:f6:5b:95:f3:81:3f:
                    65:54:af:ae:1b:dc:45:4f:e2:9e:a2:62:3f:ab:7c:
                    21:38:ec:92:bc:6c:02:e3:cc:34:f3:8f:ed:e7:d7:
                    ec:d0:54:7e:c6:ab:98:45:cb:bb:c1:1b:ac:58:74:
                    6a:26:72:03:50:1d:4a:ce:ba:ec:8d:38:c4:05:70:
                    bf:89:db:dc:20:6e:8e:71:58:19:da:44:d4:45:5c:
                    7a:c9:e2:aa:54:78:01:53:1f:c6:ab:40:f2:38:74:
                    d9:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:D4:60:E2:0D:0A:80:A4:B1:59:F6:B9:03:9F:C3:8D:0E:AD:FA:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f8791c17-503c-4afd-9a0b-412c175e957d/af49a621-1be1-3db6-8a53-b42f787b0257.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f8791c17-503c-4afd-9a0b-412c175e957d/f8791c17-503c-4afd-9a0b-412c175e957d.crl

            X509v3 Authority Key Identifier:
                keyid:40:E0:29:06:4B:D3:A4:F6:07:8B:63:B4:BC:A6:C7:94:35:DA:A4:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f8791c17-503c-4afd-9a0b-412c175e957d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.168.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:22:cc:3f:f0:f1:8a:3e:9f:17:83:ca:90:db:33:1b:aa:40:
         a4:d3:32:1e:8f:8e:68:c1:5e:bf:3f:f1:ca:2d:eb:28:ce:a9:
         c9:8f:bd:7d:06:b7:26:dc:4b:5e:7c:86:a4:d4:31:c0:75:0c:
         2b:90:eb:10:8c:94:b8:7e:da:ca:e2:7d:24:51:ad:85:c5:44:
         43:e0:ba:ea:25:40:cc:db:b1:12:9c:9e:f1:c8:8f:b4:a9:13:
         15:e4:a5:d9:ce:8f:46:31:df:42:ae:11:fc:35:6f:c7:33:58:
         7b:91:5f:e0:28:ef:50:67:06:11:8e:0c:4a:d9:c3:1b:60:4f:
         71:59:bc:e8:7c:98:d6:8a:85:16:a3:13:26:5e:44:59:be:23:
         cd:7b:55:7a:36:74:65:3b:03:6b:d4:f8:cc:27:fa:22:79:2e:
         3e:65:87:32:ce:a8:7b:0d:db:72:19:c8:51:82:dd:6a:73:1f:
         f1:cc:5f:f8:06:45:e7:d7:89:96:8f:04:21:38:21:50:be:69:
         cf:a9:69:82:0b:1f:15:f5:b5:75:f2:a3:aa:62:8e:e0:fb:b3:
         a2:2c:9b:9b:71:31:91:a6:05:1c:0c:9f:7e:5f:1b:16:86:0a:
         e8:af:c6:3e:fd:ee:fc:f0:49:d7:66:aa:0d:d2:ac:50:7f:0f:
         e2:5a:1f:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----