Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9b811437-826c-47f8-ad78-fae81aa27cb6/ec5836a7-3d32-32fc-b953-3d8eab9d8a20.roa
File:                     ec5836a7-3d32-32fc-b953-3d8eab9d8a20.roa (raw, json)
Hash identifier:          9Lz3YOG7ZSJwzsdu0FsM1PKlCmeBMLb4aoSnt36PlLE=
Subject key identifier:   E6:7E:3D:36:DB:59:EE:EC:F5:BD:66:FD:EA:C2:34:2F:58:3E:29:5D
Certificate issuer:       /CN=9b811437-826c-47f8-ad78-fae81aa27cb6
Certificate serial:       010D0C9F43285846A7CA5FD562697CEDF034E980
Authority key identifier: 1A:F5:39:0D:12:63:93:43:4B:3A:B2:75:22:61:A9:58:5C:08:55:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9b811437-826c-47f8-ad78-fae81aa27cb6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9b811437-826c-47f8-ad78-fae81aa27cb6/ec5836a7-3d32-32fc-b953-3d8eab9d8a20.roa
Signing time:             Thu 25 Jul 2024 13:00:36 +0000
ROA not before:           Thu 25 Jul 2024 13:00:36 +0000
ROA not after:            Wed 23 Oct 2024 13:00:36 +0000
asID:                     395815
IP address blocks:        23.148.88.0/24 maxlen: 24
                          2607:1540::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:a7:ca:5f:d5:62:69:7c:ed:f0:34:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b811437-826c-47f8-ad78-fae81aa27cb6
        Validity
            Not Before: Jul 25 13:00:36 2024 GMT
            Not After : Oct 23 13:00:36 2024 GMT
        Subject: CN=c962c906-ec59-4971-b748-af8be3710965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:cc:d7:ed:70:ea:56:41:27:a6:93:49:0e:54:
                    b8:16:fd:b3:cc:03:71:2a:bf:28:92:50:67:87:6a:
                    a6:45:4d:27:25:b2:9c:00:c5:67:d1:ad:fa:d2:d1:
                    17:05:e4:ba:bf:b7:fb:67:30:67:09:c6:b6:19:10:
                    b4:aa:29:a7:f9:cc:98:16:19:8f:aa:79:54:8f:cd:
                    96:bf:72:87:39:a3:05:96:8a:81:c0:64:5f:52:f9:
                    c6:99:fd:bd:67:aa:80:44:1b:16:ff:9b:d7:f1:93:
                    ab:a8:3b:4c:28:a5:b3:51:db:68:2e:86:64:b0:e7:
                    b8:84:1a:bf:94:72:84:e2:9a:cd:80:95:53:41:5f:
                    58:cf:52:9e:1b:a1:bc:63:b0:11:96:84:cf:c0:fe:
                    03:04:83:20:96:75:b6:72:d2:c9:27:50:63:ed:e6:
                    f3:33:85:16:2d:e4:ba:cf:ad:fd:e8:dc:b8:ab:76:
                    a8:19:02:37:87:f2:f3:14:1a:af:df:55:c6:ae:0b:
                    a0:62:91:95:61:f4:15:2b:eb:12:a9:80:26:d7:65:
                    6c:ff:9a:e2:76:90:0d:0f:bf:bf:97:d1:bb:fa:1f:
                    b1:4b:05:2a:84:94:df:63:49:2b:ae:c3:ce:74:f6:
                    b0:51:00:da:10:15:99:0b:4a:36:59:b5:9e:7e:10:
                    47:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:7E:3D:36:DB:59:EE:EC:F5:BD:66:FD:EA:C2:34:2F:58:3E:29:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9b811437-826c-47f8-ad78-fae81aa27cb6/ec5836a7-3d32-32fc-b953-3d8eab9d8a20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9b811437-826c-47f8-ad78-fae81aa27cb6/9b811437-826c-47f8-ad78-fae81aa27cb6.crl

            X509v3 Authority Key Identifier:
                keyid:1A:F5:39:0D:12:63:93:43:4B:3A:B2:75:22:61:A9:58:5C:08:55:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9b811437-826c-47f8-ad78-fae81aa27cb6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.148.88.0/24
                IPv6:
                  2607:1540::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:4c:95:2f:bc:35:7f:9c:d2:91:d6:83:dd:d8:c8:e2:e1:b4:
         64:41:6f:d1:5e:16:9f:c8:e6:73:1c:33:77:1c:57:a3:5f:ff:
         4d:09:bb:95:56:c5:f1:2d:ba:bd:89:0c:0c:be:12:83:fc:32:
         c0:33:73:a4:11:7b:6d:5e:e9:99:43:c8:80:9e:0f:26:ed:74:
         8a:9e:1b:28:3c:41:4b:12:f3:cf:33:93:0b:3e:2d:dc:51:a5:
         75:da:56:91:91:b7:64:4f:22:a0:a7:e5:23:30:3b:e1:c6:2b:
         b7:cd:75:f2:fe:fd:1c:20:63:ca:d8:9f:e4:6f:a5:76:d1:3b:
         b2:61:eb:6e:28:6f:ee:af:43:12:23:13:d2:f7:8a:c1:06:6f:
         d8:e3:43:dc:8a:c4:b0:f4:f3:80:8d:1f:03:6f:e3:b6:53:ef:
         3a:66:08:eb:f6:85:4e:48:b9:d8:06:40:d0:69:73:b5:b6:64:
         e3:f3:a0:45:f0:82:05:89:e8:0b:fc:ba:4a:cb:61:6b:82:86:
         bb:07:20:37:4e:1d:66:ca:5b:a8:f6:d8:ed:1a:d4:dd:c7:06:
         9f:a0:d5:14:62:f8:0b:0f:49:88:f0:68:0a:07:56:84:82:51:
         84:2a:ec:c0:18:fb:2b:75:f7:16:d0:ec:32:b2:e1:a6:68:25:
         36:0e:62:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----