Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/bc4b86a7-645a-3d24-8aff-b3f366c5c5f8.roa
File:                     bc4b86a7-645a-3d24-8aff-b3f366c5c5f8.roa (raw, json)
Hash identifier:          +y4ynei0iT/aPzRQL5xyb3tpmrlLSUrMj3amgriGclQ=
Subject key identifier:   7E:61:0B:A0:12:82:B0:88:1C:4F:A4:B8:A3:93:BD:E2:6F:09:1C:C8
Certificate issuer:       /CN=4b81c928-08cc-4234-b15c-0f1a197c6e00
Certificate serial:       010D0C9F4328584953C449415197BDF02D4AB9C0
Authority key identifier: 1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/bc4b86a7-645a-3d24-8aff-b3f366c5c5f8.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     26967
IP address blocks:        199.15.180.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:49:41:51:97:bd:f0:2d:4a:b9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b81c928-08cc-4234-b15c-0f1a197c6e00
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=30e52f03-1e6d-4ff3-a2fa-3544c64b4f96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:9d:32:35:c9:0d:4b:0a:b5:bd:7b:48:fc:37:
                    3f:21:6b:ec:e5:15:89:e2:5e:e8:b3:ee:7f:6e:c7:
                    80:d1:51:01:61:9a:3b:32:f4:5a:c9:7e:13:d9:94:
                    df:7e:b6:7d:65:5f:bb:e6:23:11:50:cc:ff:78:1b:
                    5b:ea:37:2e:63:41:3e:ed:7d:24:8a:43:2f:23:2e:
                    ec:a1:8c:b9:f2:2a:24:c7:2a:a1:43:01:c7:78:03:
                    db:b2:3d:2c:50:a7:d9:f3:7f:1d:55:36:11:ed:ba:
                    13:4d:5e:6b:b2:f0:24:04:7c:67:78:97:7d:6a:7d:
                    3e:96:e9:37:66:c1:7e:32:37:3f:22:83:17:19:95:
                    a7:b6:f7:14:00:73:e7:8a:26:59:3a:fb:1b:bd:53:
                    d1:39:79:be:ef:a8:28:1f:5c:73:22:f7:71:30:23:
                    6e:63:bd:f1:00:24:47:7c:f6:e6:ae:e7:73:06:cd:
                    f8:56:a7:60:a8:18:c7:5d:02:b4:82:92:ed:4d:a8:
                    c7:39:ea:8d:41:c5:a2:ff:77:bb:ef:df:86:93:19:
                    bd:23:c0:f5:95:a3:ab:cf:74:d9:23:7c:5b:2f:3b:
                    93:66:23:35:c8:b9:57:d1:05:2a:cb:56:07:24:c6:
                    fd:00:a6:f6:4d:3c:3e:96:1e:48:b3:4f:f3:93:55:
                    35:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:61:0B:A0:12:82:B0:88:1C:4F:A4:B8:A3:93:BD:E2:6F:09:1C:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/bc4b86a7-645a-3d24-8aff-b3f366c5c5f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl

            X509v3 Authority Key Identifier:
                keyid:1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.15.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:7c:68:da:25:87:17:8c:d8:c1:29:a4:c9:3e:cd:b2:db:3b:
         e0:c3:63:f8:42:24:7f:c3:e8:9d:b9:12:d7:92:8e:00:a5:bf:
         4b:9f:c7:de:b0:95:8b:31:90:87:04:37:73:d2:2c:6c:96:ec:
         63:e5:6b:4c:c4:3c:21:43:d0:83:4f:9b:0b:25:a8:f1:ca:98:
         e0:b4:e6:7c:b1:33:8f:3d:ee:f8:44:d9:2a:0f:c0:5a:6a:52:
         05:d0:11:dc:91:0c:1a:03:87:04:a3:9a:0a:1d:8d:41:b4:b5:
         dc:75:82:2c:54:f7:67:da:18:42:09:b3:81:da:19:af:41:47:
         1d:c2:9e:38:60:71:e6:8f:48:74:87:c5:73:9f:d4:79:ea:f9:
         e4:13:ef:df:d8:df:b5:7a:a9:b0:1b:85:a3:7f:34:b5:b3:fa:
         40:3a:ce:a8:1d:6b:01:2c:d8:c0:f8:0d:48:35:38:9b:9d:28:
         c5:ae:0d:04:69:ae:74:a7:e0:65:76:a7:cd:41:35:3a:ce:2c:
         a1:50:9a:78:5c:a4:23:cc:1d:2b:98:00:b6:e8:ae:fc:8e:39:
         cb:18:31:46:ce:a6:c5:12:ad:a5:76:3c:52:b7:e1:21:c0:1b:
         f9:ce:8a:fd:33:9d:52:52:a8:47:61:38:67:f2:0a:10:51:69:
         ff:f4:e6:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----