Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/54d25cbb-7b65-334e-bd13-e7e58b7576e6.roa
File:                     54d25cbb-7b65-334e-bd13-e7e58b7576e6.roa (raw, json)
Hash identifier:          g1TBGssdHXcg7+Rf4/9id/6+N0cv4kn/HRDJ+yZWIzs=
Subject key identifier:   06:06:C5:2B:E5:2A:C0:CE:79:0C:B5:CB:71:54:47:CF:60:E5:5F:EC
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285848E00678D023DF338944F2B100
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/54d25cbb-7b65-334e-bd13-e7e58b7576e6.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     27544
IP address blocks:        209.112.127.31/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:78:d0:23:df:33:89:44:f2:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=f9ddcd38-cf58-4501-bd80-ebc697876d66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:18:e9:9b:a7:42:05:35:74:f3:4e:b6:43:b5:
                    6b:22:2b:15:92:6a:6a:94:dd:bc:13:ad:0c:f7:f7:
                    c2:a2:2b:4a:f9:71:21:94:1c:e1:20:1b:48:c5:0c:
                    01:1d:2c:47:ad:77:f0:47:1f:f0:95:7c:d2:9a:09:
                    bb:59:74:77:86:74:cc:f8:6d:e3:7d:77:4b:2f:58:
                    a9:b9:44:c3:b0:4d:c8:91:01:75:d1:2f:be:12:c1:
                    69:6b:dd:63:09:f4:bf:2b:07:ac:2b:c1:28:b9:9d:
                    44:c6:59:89:25:f5:8f:67:c6:a3:24:df:2a:85:01:
                    35:cd:a5:0c:54:e5:77:91:1d:33:a4:95:18:dd:09:
                    9c:54:f6:b8:55:ef:91:4c:04:4a:79:60:2a:31:31:
                    b6:c0:91:74:94:ed:50:d9:38:74:75:00:45:9c:0c:
                    70:4d:87:ce:d8:d8:66:9e:c3:98:aa:aa:dc:7a:9e:
                    ab:cb:ff:e5:25:54:23:18:a3:25:63:7e:9e:81:f9:
                    6f:fe:ea:25:99:de:49:d1:de:17:a1:c3:38:2e:e8:
                    02:d6:d9:2e:4f:87:e4:63:41:7c:8d:ab:c0:9b:27:
                    d8:5a:5a:5b:49:5c:04:34:c5:e1:8b:ec:6a:a3:4f:
                    15:12:82:21:ec:d2:ed:ec:37:79:78:ab:39:00:bb:
                    02:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:06:C5:2B:E5:2A:C0:CE:79:0C:B5:CB:71:54:47:CF:60:E5:5F:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/54d25cbb-7b65-334e-bd13-e7e58b7576e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.112.127.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:4d:30:72:a1:70:49:b1:2c:b4:07:f6:98:dd:0c:4c:c0:c3:
         17:ea:9a:b2:d9:78:e8:fd:5a:1f:8b:4a:af:3b:f3:cc:ea:ad:
         18:a6:45:17:d7:e5:be:9f:a3:48:67:cf:79:e9:5d:e2:e8:c8:
         18:93:cd:a6:34:62:a5:e0:d0:5e:6d:e8:69:72:d1:74:80:9a:
         b6:87:0a:0a:f1:90:bd:5d:59:4e:ae:f2:33:a3:9a:e0:30:32:
         ff:f0:c1:8c:8b:8e:1d:38:58:83:1a:fe:19:cc:62:b6:f3:0c:
         f7:8a:b3:55:03:b2:aa:e1:7e:9f:bf:70:62:05:e1:0d:35:33:
         30:47:86:fd:0e:b5:70:1a:78:8a:f4:3b:83:14:d7:1c:58:22:
         07:81:94:85:7d:d9:77:e6:9a:00:11:9f:85:77:10:9e:ea:f5:
         d9:7f:e5:df:93:09:f5:37:9a:c0:d0:5b:f3:79:65:29:4b:81:
         81:c4:c8:8b:fb:c1:b5:26:a1:38:c5:ed:3d:d4:6d:b8:9e:7a:
         76:22:78:f5:76:16:3b:45:58:b8:12:9b:4d:d9:d8:82:bd:f2:
         85:82:ab:29:41:66:dd:f2:53:85:f9:d3:d1:e0:a5:c5:27:d2:
         a9:f4:94:dc:5b:73:fc:ad:9d:93:64:8d:d0:62:39:5f:b9:98:
         3e:85:28:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----