Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/f5bbe177-db20-3981-a339-c4f34d572e28.roa
File:                     f5bbe177-db20-3981-a339-c4f34d572e28.roa (raw, json)
Hash identifier:          B35wSr0DRIUDqZXS6dn+C4CDlus21SeA9Y4y2ABc4w0=
Subject key identifier:   96:A7:1A:05:CE:C6:B2:D9:75:CB:A7:A7:F8:CB:CE:E5:CC:4F:A0:64
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F4328584957F3F7CD796BB3EDBCE4E4E0
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/f5bbe177-db20-3981-a339-c4f34d572e28.roa
Signing time:             Sat 29 Mar 2025 01:00:39 +0000
ROA not before:           Sat 29 Mar 2025 01:00:39 +0000
ROA not after:            Fri 27 Jun 2025 01:00:39 +0000
asID:                     22781
IP address blocks:        207.204.240.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:57:f3:f7:cd:79:6b:b3:ed:bc:e4:e4:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Mar 29 01:00:39 2025 GMT
            Not After : Jun 27 01:00:39 2025 GMT
        Subject: CN=2e376735-dff3-4fa4-aba9-d66a035d63d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d1:7e:95:92:2f:74:f1:c9:c3:90:89:20:16:
                    c6:b8:bb:2a:c9:af:f2:77:09:92:be:d1:e8:28:b4:
                    c5:95:83:a9:8c:43:7f:12:a3:ea:f5:8e:e0:8c:90:
                    a1:ff:2a:2d:e4:91:41:ff:74:a3:27:b7:95:fb:6c:
                    38:61:df:df:83:1a:e8:23:ca:aa:3d:93:d3:de:a8:
                    f7:f1:54:1b:32:9f:f2:d6:c4:0c:7c:2d:4e:e5:fa:
                    ab:f7:07:e5:29:d0:22:74:65:f4:b4:f1:78:27:72:
                    4d:d5:a3:4a:ec:e2:63:30:cc:3c:67:5e:a3:5d:f2:
                    47:3e:fe:c7:cd:ef:09:38:ab:3a:56:44:34:a4:40:
                    26:cb:10:2f:2c:16:92:8c:93:5f:eb:42:d7:e7:4f:
                    ae:42:d0:65:cf:30:8f:e9:76:a5:dc:32:8d:e1:56:
                    10:12:aa:f4:33:57:90:49:cd:36:f9:eb:87:a9:77:
                    80:32:a9:0b:11:c0:f3:47:e3:ba:ed:11:9b:c1:5b:
                    14:39:3f:e0:de:1f:24:06:b6:ac:37:29:87:5c:19:
                    7d:07:ed:2d:8a:65:39:ff:73:49:c4:af:1d:be:d4:
                    a7:89:37:e3:0e:bb:25:88:0f:b8:0f:54:79:23:b2:
                    80:9f:35:42:13:db:1d:b0:f4:ad:9b:77:75:dd:1b:
                    ca:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:A7:1A:05:CE:C6:B2:D9:75:CB:A7:A7:F8:CB:CE:E5:CC:4F:A0:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/f5bbe177-db20-3981-a339-c4f34d572e28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.204.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:6d:ce:0e:51:bb:a1:5f:42:2a:a0:46:a5:45:06:0d:2a:f7:
         81:7b:c7:eb:ad:73:e4:d0:09:b1:4b:5a:40:36:f0:d8:a8:b7:
         c8:93:f3:2c:4c:f7:8b:08:eb:80:2f:75:d4:e9:7a:af:8e:18:
         7b:99:35:c0:8c:0f:f7:f6:f5:56:f1:c2:84:6e:de:e6:99:10:
         db:d3:7d:d9:3c:e0:0e:82:60:95:a1:cf:2d:38:9e:aa:66:cb:
         a2:df:50:10:17:75:e9:53:dd:98:c7:d7:2e:49:3c:8d:c6:9e:
         73:6b:23:ac:e5:a9:65:db:df:c1:28:1b:70:4a:b3:b9:81:b2:
         78:65:4a:fd:72:46:b5:f1:e6:ab:87:de:f7:39:a7:97:4a:34:
         8a:24:af:24:ed:e0:1c:d0:dd:e3:f4:02:a6:1f:28:73:fe:c4:
         1f:18:82:09:76:f9:30:89:d0:ce:76:28:d0:5a:ec:f0:50:c9:
         29:8f:0b:2a:d0:94:c4:7b:3b:20:8e:84:35:e4:f6:84:36:24:
         5e:26:a0:5e:3b:e0:b1:c1:13:0f:ad:42:1c:34:1f:cf:cb:58:
         64:2a:49:3f:7d:22:14:1b:45:dc:d5:0b:2c:24:c0:26:82:8b:
         7a:83:d7:8f:21:e5:4f:a3:5c:6b:5b:3f:a8:2f:5f:4c:d0:16:
         a3:4f:50:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----