Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/41ce3a57-621c-3199-b286-48e02942edd2.roa
File:                     41ce3a57-621c-3199-b286-48e02942edd2.roa (raw, json)
Hash identifier:          lmSoNgAPRko0B11dtihnTbTKpi2cexaE53dDO+p0N3U=
Subject key identifier:   57:A7:77:BE:70:58:31:BB:FC:30:7E:02:46:EE:90:63:11:CD:6E:16
Certificate issuer:       /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
Certificate serial:       010D0C9F432858495529552AC469BEE88C2BD3A0
Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/41ce3a57-621c-3199-b286-48e02942edd2.roa
Signing time:             Fri 28 Mar 2025 01:00:41 +0000
ROA not before:           Fri 28 Mar 2025 01:00:41 +0000
ROA not after:            Thu 26 Jun 2025 01:00:41 +0000
asID:                     9009
IP address blocks:        45.59.23.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:55:29:55:2a:c4:69:be:e8:8c:2b:d3:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
        Validity
            Not Before: Mar 28 01:00:41 2025 GMT
            Not After : Jun 26 01:00:41 2025 GMT
        Subject: CN=8121fb7d-0bcf-45a5-a231-73c76ae1fdfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ff:12:62:3d:75:35:ca:44:f3:c0:93:91:bc:
                    79:9e:47:c3:a8:90:51:03:87:44:f8:f5:6f:d4:47:
                    a1:91:c7:9b:7a:ab:d7:c9:0e:05:2a:4a:e8:a7:a7:
                    a5:0f:28:66:1e:d4:21:14:71:ac:9f:a6:49:df:70:
                    3d:4a:7f:56:3a:ba:e0:4b:08:a0:c0:2d:67:f7:75:
                    6a:4d:a3:66:96:38:9e:a2:84:a8:51:26:8a:b8:56:
                    00:5f:9b:17:41:13:a9:8c:0b:8b:aa:d8:62:df:c1:
                    67:6f:c8:88:d6:93:61:db:66:cc:ed:46:94:56:9e:
                    a1:00:f1:ad:dd:27:bb:f6:c6:73:33:e5:12:0c:b1:
                    62:70:fc:56:51:a8:c3:1c:91:9f:2b:aa:ed:17:a6:
                    30:ae:5f:2f:c3:57:5f:28:01:61:26:10:aa:ed:6e:
                    05:2a:f7:81:20:68:4e:7f:bc:63:bb:59:7e:ed:ff:
                    42:94:6c:2d:ce:96:b4:7f:be:17:6f:00:f0:eb:e3:
                    87:d1:62:af:bf:36:dc:83:13:e9:4d:53:9e:8a:77:
                    e0:e6:df:a0:cb:5e:6b:b7:b1:5f:53:8a:a6:96:a0:
                    c2:83:c8:91:59:01:a6:0f:76:7e:e0:19:0f:10:7d:
                    9b:12:20:ce:87:36:32:1e:e4:25:b9:dc:7d:af:98:
                    3f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:A7:77:BE:70:58:31:BB:FC:30:7E:02:46:EE:90:63:11:CD:6E:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/41ce3a57-621c-3199-b286-48e02942edd2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl

            X509v3 Authority Key Identifier:
                keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.59.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:0f:1d:9b:1a:ec:3a:3a:d9:bf:06:0f:ec:57:97:5b:ce:5b:
         43:4d:bf:a8:30:ba:eb:2a:ff:da:f5:15:f9:cb:06:82:e3:cc:
         09:64:af:e0:11:14:15:ac:36:73:aa:fc:0b:25:73:9f:ae:6e:
         cd:7a:e2:bf:7b:aa:63:e5:8e:40:77:2e:56:d0:85:9e:85:12:
         62:78:f6:ea:89:02:b1:d4:32:f5:16:b6:55:96:c2:69:9e:4a:
         94:0b:c9:42:22:e8:15:90:e7:a5:0f:6f:11:5d:27:27:ed:98:
         96:7c:33:4d:2c:13:7e:51:4e:fa:ba:23:4a:02:64:3d:a4:30:
         b7:7c:37:7b:d1:f1:ac:27:d9:23:7f:26:bc:66:1a:90:47:d6:
         f6:81:35:6a:e2:a8:25:bf:b1:c0:ed:3b:66:63:bf:62:24:d7:
         67:76:79:91:34:f2:12:cd:83:5e:c1:4a:d6:97:7d:ed:c8:6d:
         07:ed:fe:33:e8:50:a9:17:8f:9f:53:86:d4:fb:f3:83:c7:5d:
         ed:ad:cc:05:4d:e4:1f:44:20:d2:f2:ba:e4:da:ee:7c:80:63:
         db:69:76:83:7f:3c:3a:51:f2:c5:6f:25:66:28:78:a5:a2:18:
         5f:c1:00:23:d2:e3:3a:79:2b:7a:9b:6c:7e:4f:49:63:0e:e0:
         14:07:66:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----