Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/1f6da251-413c-3667-8773-4dc6a9dda959.roa
File:                     1f6da251-413c-3667-8773-4dc6a9dda959.roa (raw, json)
Hash identifier:          de7BHuSX6EVE4MZt7JL6dsQrkFjbuzX9UrCZKTanReQ=
Subject key identifier:   1F:87:A6:03:F6:01:1B:2A:9C:B4:83:2A:5A:FE:16:1C:15:B5:A5:C2
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F43285849403944990466B8E653909E40
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/1f6da251-413c-3667-8773-4dc6a9dda959.roa
Signing time:             Thu 20 Mar 2025 13:00:53 +0000
ROA not before:           Thu 20 Mar 2025 13:00:53 +0000
ROA not after:            Wed 18 Jun 2025 13:00:53 +0000
asID:                     29802
IP address blocks:        192.211.48.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:40:39:44:99:04:66:b8:e6:53:90:9e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: Mar 20 13:00:53 2025 GMT
            Not After : Jun 18 13:00:53 2025 GMT
        Subject: CN=1cb99e83-46e4-44fa-800a-c5a51dc42a38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:da:4b:5f:2f:02:50:92:3b:15:dc:ad:e9:38:
                    61:0e:52:ab:9c:8a:bc:8d:22:0b:e3:56:37:48:d4:
                    26:ee:fe:1a:11:7c:75:2b:f9:79:3c:83:85:13:60:
                    6e:f7:8c:3d:6e:21:f8:de:8f:d1:cd:32:e2:fd:89:
                    4e:30:a5:27:fb:e1:85:33:8e:51:6c:bb:16:87:95:
                    04:e0:a2:f6:37:89:3e:93:7f:1e:e9:ac:0d:2c:cb:
                    e9:b1:35:11:bc:db:63:06:ac:6f:db:39:04:71:cd:
                    ae:76:ae:32:45:ac:22:6d:d1:1c:77:d4:f2:2b:c1:
                    48:11:2d:02:5e:86:35:45:e1:ce:cd:aa:c3:15:7f:
                    33:a4:67:95:43:bf:28:05:04:0f:cc:b8:d5:7e:fe:
                    b3:f1:7e:78:27:ec:c2:bb:54:6b:0b:31:62:bb:8a:
                    c9:0c:f6:c8:6b:49:f6:48:7f:f0:30:d6:0c:5b:cb:
                    b2:ae:7c:28:a4:e5:10:51:38:16:f2:9f:64:b4:b9:
                    07:f0:b5:66:a6:18:00:f0:88:a2:72:ab:84:d0:83:
                    af:fd:e9:54:37:05:7d:55:5f:12:cf:a1:28:82:53:
                    d0:bd:b8:16:cc:5c:26:c9:02:4b:4a:d9:ee:f0:77:
                    ba:08:7b:43:ff:b0:0f:37:3c:59:5b:10:1b:b4:1d:
                    1a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:87:A6:03:F6:01:1B:2A:9C:B4:83:2A:5A:FE:16:1C:15:B5:A5:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/1f6da251-413c-3667-8773-4dc6a9dda959.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.211.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:e4:1d:69:56:97:61:d6:13:55:2b:83:7c:49:ba:22:f4:c9:
         cf:41:76:96:44:f8:89:9c:02:d7:fe:86:93:53:e5:d3:f6:bd:
         12:dd:22:95:4c:08:b3:21:05:43:d4:47:cb:5d:d7:51:fd:6e:
         7d:51:1a:11:df:3b:bf:07:27:59:df:8b:f0:a5:06:f1:08:7d:
         72:7a:50:3d:91:e8:79:f0:9a:80:33:51:10:4a:9b:1d:7f:00:
         2d:d3:4e:5b:cb:bc:c5:e2:6c:3b:be:b5:84:d2:a5:69:9b:aa:
         ec:a2:96:6f:69:45:fe:ff:52:71:1b:19:4d:45:62:ee:8f:11:
         a4:e8:87:e6:9a:12:98:bd:d7:67:3e:e0:cf:9d:8a:cf:80:ba:
         13:8d:eb:2e:47:47:2e:19:46:9a:dd:06:61:f4:7b:a5:0b:14:
         ac:92:ad:93:1e:6c:12:44:32:e7:d2:85:b5:1e:63:85:73:9f:
         2c:f2:8a:a9:d9:65:0c:d1:78:1f:f2:58:ab:c6:5c:38:ab:8e:
         a8:dd:45:73:da:c8:71:76:38:96:5a:d1:b4:da:f4:b2:27:d1:
         aa:40:37:40:e7:46:9c:c0:c4:d6:63:d3:a5:0f:84:61:40:88:
         2d:05:3b:8c:8c:62:f1:d0:9a:f4:d4:f3:cc:30:8e:a5:89:ab:
         da:a9:84:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----