Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/a1a3ab19-5cb5-350e-85bc-242757f97592.roa
File:                     a1a3ab19-5cb5-350e-85bc-242757f97592.roa (raw, json)
Hash identifier:          CYXJmkcEe6NjsBYuCly3+uPAitWDeLvT8rb1M3JZ490=
Subject key identifier:   C9:79:7C:D2:13:54:EA:C8:75:7A:0F:D1:97:06:51:41:03:40:AE:29
Certificate issuer:       /CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3
Certificate serial:       010D0C9F43285849194189F29EE0DB2014B230A0
Authority key identifier: BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/a1a3ab19-5cb5-350e-85bc-242757f97592.roa
Signing time:             Thu 06 Mar 2025 14:00:52 +0000
ROA not before:           Thu 06 Mar 2025 14:00:52 +0000
ROA not after:            Wed 04 Jun 2025 13:00:52 +0000
asID:                     22765
IP address blocks:        72.20.194.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:19:41:89:f2:9e:e0:db:20:14:b2:30:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3
        Validity
            Not Before: Mar  6 14:00:52 2025 GMT
            Not After : Jun  4 13:00:52 2025 GMT
        Subject: CN=1ce2d2ae-23de-4dfd-a20b-0c9af8b041b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4f:ce:ea:3c:34:ec:d4:72:d4:5c:33:b8:59:
                    bf:46:f0:8a:d3:2e:4f:50:aa:44:19:9c:d8:0c:2f:
                    2c:11:ac:28:cc:ac:c1:ac:56:44:de:87:b0:9e:49:
                    46:ad:c7:61:67:3f:16:30:40:91:d0:67:51:26:3b:
                    8c:59:2f:17:cb:23:60:52:9f:9b:ac:09:07:3c:be:
                    e9:87:e0:40:0e:64:1d:af:17:ee:dc:c4:07:ed:8c:
                    83:8e:e7:c1:33:aa:c3:fb:5f:2a:ec:61:df:5a:38:
                    c4:74:32:18:8f:86:71:0b:ca:ee:98:21:15:98:c3:
                    07:71:33:83:b9:78:f8:be:e5:ec:d0:a2:b8:11:8b:
                    9d:1b:30:39:ae:02:e7:f4:37:7e:83:2e:88:4a:81:
                    39:1d:c0:17:e4:93:d5:6a:2b:14:ee:e4:57:9c:f9:
                    7e:ac:b3:9d:e6:b3:b0:b0:75:ec:8d:df:81:47:79:
                    0f:81:58:a8:65:0c:6d:e4:e6:a1:d6:33:d1:22:4e:
                    24:23:c1:a2:01:ed:f3:30:e5:27:a8:30:d5:31:c2:
                    e4:df:96:e9:3f:71:2e:51:47:b1:e8:b2:14:2f:e9:
                    5b:18:07:54:ae:35:11:36:fb:85:53:64:66:6f:dc:
                    c6:1c:98:8b:ee:9b:0c:33:a8:da:14:54:13:88:b2:
                    5a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:79:7C:D2:13:54:EA:C8:75:7A:0F:D1:97:06:51:41:03:40:AE:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/a1a3ab19-5cb5-350e-85bc-242757f97592.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl

            X509v3 Authority Key Identifier:
                keyid:BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.20.194.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:9d:33:4d:13:3e:45:4c:a7:9a:29:10:6a:50:e3:c4:43:da:
         b3:83:05:2a:bc:2d:08:72:3d:ff:bd:04:6e:6a:d5:a6:bf:62:
         3b:75:3e:6c:26:cf:99:94:95:24:f7:b6:69:54:28:d5:a8:c1:
         32:ab:d7:78:77:27:4b:27:a5:eb:b8:50:ec:d6:b1:7e:c7:4b:
         c7:fd:2d:ff:85:12:2f:7e:0b:64:9b:73:05:56:66:44:2a:7e:
         3d:b1:5a:77:6b:e4:1c:1a:79:b8:95:12:f0:bd:94:30:11:37:
         82:9c:da:ef:a4:d1:b1:d2:89:67:87:d5:12:95:e3:eb:78:13:
         ca:4f:c2:fa:f5:16:c0:78:1b:31:c7:a9:34:bb:4d:48:5d:75:
         25:2c:34:ee:31:f1:c3:1b:c2:65:11:de:db:98:08:e6:7f:0e:
         e5:3d:ab:00:72:42:79:da:99:9d:16:63:3a:e8:a6:49:43:a7:
         e5:90:f3:8e:0b:0b:8b:d8:7d:0b:5e:8e:e1:83:dc:63:76:3e:
         c7:6d:ce:5a:f2:77:00:c3:86:0b:c8:34:c2:90:5d:a6:db:06:
         8d:0c:af:1c:a3:e2:50:32:0b:12:65:20:32:24:79:ed:15:94:
         28:de:7c:e0:a2:68:92:ee:98:75:15:74:cb:5c:6c:4a:52:a0:
         bc:99:a9:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----