Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/22aa1c2f-1bcb-4a02-88fc-3fcbf174e172/d738f803-5be8-3f07-926b-e01744b41e73.roa
File:                     d738f803-5be8-3f07-926b-e01744b41e73.roa (raw, json)
Hash identifier:          gPCn9tqdJEcjwcg0jIiQUE689iNfA1SfL7EpEkUsTBE=
Subject key identifier:   F3:68:39:A7:11:E5:ED:6E:C8:AF:AA:58:1D:C6:CB:C6:18:52:26:84
Certificate issuer:       /CN=22aa1c2f-1bcb-4a02-88fc-3fcbf174e172
Certificate serial:       010D0C9F4328583FD47F803A237292A55D444C80
Authority key identifier: 82:2F:3C:DC:1F:34:07:07:3D:91:83:84:A4:5D:65:99:7B:9F:CD:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/22aa1c2f-1bcb-4a02-88fc-3fcbf174e172.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/22aa1c2f-1bcb-4a02-88fc-3fcbf174e172/d738f803-5be8-3f07-926b-e01744b41e73.roa
Signing time:             Mon 28 Mar 2022 20:46:11 +0000
ROA not before:           Mon 28 Mar 2022 20:46:11 +0000
ROA not after:            Sun 09 Feb 2025 05:00:00 +0000
asID:                     55154
IP address blocks:        204.69.217.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:d4:7f:80:3a:23:72:92:a5:5d:44:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22aa1c2f-1bcb-4a02-88fc-3fcbf174e172
        Validity
            Not Before: Mar 28 20:46:11 2022 GMT
            Not After : Feb  9 05:00:00 2025 GMT
        Subject: CN=c893a104-6dcf-4168-ab58-a09a524212a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f8:61:da:64:21:d9:6d:cf:9f:dd:fd:17:0f:
                    cf:c7:b4:4e:50:f1:02:1f:97:79:31:79:fb:51:b9:
                    13:1d:3f:10:18:fe:a2:63:dc:fc:b3:d4:5f:3f:a2:
                    8d:cc:1a:d2:3b:aa:f1:b5:c8:a4:de:9e:d4:3e:fa:
                    e9:cb:d0:da:2d:96:05:67:81:1a:88:75:37:69:ad:
                    68:4b:8a:35:e0:d1:ce:58:84:42:c3:0b:ab:c7:90:
                    c6:aa:2b:db:9f:c9:64:4c:8f:37:c1:3d:90:14:dd:
                    40:1e:56:b1:ef:96:3d:e6:1e:fe:61:68:26:83:77:
                    9c:59:bf:da:d5:89:fa:a9:12:9a:5e:7a:ab:43:ac:
                    c2:c6:ba:cd:a1:c7:07:49:c9:20:23:36:90:a1:72:
                    e3:c8:2a:51:92:64:50:1f:8c:32:66:31:89:fd:ee:
                    74:ce:55:57:ab:10:9e:c7:94:98:db:58:57:6c:6c:
                    ee:6a:8b:c0:83:f5:0d:2d:43:98:72:be:86:4a:ba:
                    24:62:7b:c9:52:27:f5:54:73:81:d9:f8:0d:cb:2e:
                    3f:76:a2:c2:9b:c1:40:c6:b8:44:ba:f1:dd:f4:6a:
                    05:58:b9:36:91:8b:d7:b4:96:eb:ef:7f:e8:9e:3a:
                    aa:32:5e:40:ae:68:89:70:0f:16:40:77:16:af:dd:
                    51:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:68:39:A7:11:E5:ED:6E:C8:AF:AA:58:1D:C6:CB:C6:18:52:26:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/22aa1c2f-1bcb-4a02-88fc-3fcbf174e172/d738f803-5be8-3f07-926b-e01744b41e73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/22aa1c2f-1bcb-4a02-88fc-3fcbf174e172/22aa1c2f-1bcb-4a02-88fc-3fcbf174e172.crl

            X509v3 Authority Key Identifier:
                keyid:82:2F:3C:DC:1F:34:07:07:3D:91:83:84:A4:5D:65:99:7B:9F:CD:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/22aa1c2f-1bcb-4a02-88fc-3fcbf174e172.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.69.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:98:a7:e7:c4:50:e6:06:84:fe:2a:96:89:11:cf:ba:b6:4e:
         e0:05:e0:85:93:da:f1:d6:be:67:1e:76:f2:fc:02:2f:7d:89:
         91:3a:26:dc:c4:f7:44:59:c7:35:0e:8f:9b:16:01:67:2a:0a:
         0e:c1:2a:40:f4:88:ba:c9:db:77:80:9b:4b:0b:bb:d7:e8:9e:
         e7:fe:db:5f:d2:41:57:1c:55:fa:ae:df:d5:75:17:47:cf:81:
         49:7e:f0:13:e9:b4:f4:bf:e1:97:64:8d:e7:97:48:32:fc:6e:
         11:48:6e:1b:e1:72:df:64:11:4d:ac:4a:5a:3a:46:94:cd:0d:
         2d:76:d2:70:34:3e:5f:b5:65:e9:73:c2:54:7f:eb:3a:bb:3b:
         94:89:38:26:0c:03:d0:20:df:fa:0d:b7:2b:7b:ea:1c:a0:31:
         f9:af:30:3b:7b:38:ed:aa:79:71:cd:c9:78:75:a5:ff:39:2e:
         fb:f2:40:38:b8:5e:78:57:4f:10:f5:bc:ef:88:8e:59:99:b5:
         04:ed:37:4b:61:7a:25:5a:bb:0c:d2:9a:17:a6:8f:5a:78:51:
         ac:a4:48:a6:d7:21:57:d0:16:86:d9:25:35:42:0e:3a:8f:1c:
         e8:af:cd:8b:34:37:5b:80:4a:a1:dd:d2:dc:16:0e:f6:a1:8c:
         45:ed:1a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----