Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bedc9df8-596e-4e33-b8ac-6857cf7f56cf/01e5b1f0-5d86-3f06-aef1-563471c3540e.roa
File:                     01e5b1f0-5d86-3f06-aef1-563471c3540e.roa (raw, json)
Hash identifier:          q29pe+AiOVB8K8Cup4nyea9OQz0ek0rHKfSa0PeoUoU=
Subject key identifier:   02:EF:1B:76:74:2E:0C:2D:CE:D3:7D:5B:1B:F6:12:45:B7:F0:10:C9
Certificate issuer:       /CN=bedc9df8-596e-4e33-b8ac-6857cf7f56cf
Certificate serial:       010D0C9F43285848F39064453D995464F6DDD200
Authority key identifier: 82:FF:3A:E8:D5:48:36:54:D3:40:AD:86:77:D4:7E:66:C9:6B:E1:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bedc9df8-596e-4e33-b8ac-6857cf7f56cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bedc9df8-596e-4e33-b8ac-6857cf7f56cf/01e5b1f0-5d86-3f06-aef1-563471c3540e.roa
Signing time:             Fri 21 Feb 2025 01:59:15 +0000
ROA not before:           Fri 21 Feb 2025 01:59:15 +0000
ROA not after:            Thu 22 May 2025 00:59:15 +0000
asID:                     401541
IP address blocks:        23.155.185.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f3:90:64:45:3d:99:54:64:f6:dd:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bedc9df8-596e-4e33-b8ac-6857cf7f56cf
        Validity
            Not Before: Feb 21 01:59:15 2025 GMT
            Not After : May 22 00:59:15 2025 GMT
        Subject: CN=21533dab-c790-4d99-a937-322b56fed94b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:57:c3:46:90:69:8a:54:be:0e:66:e2:01:ed:
                    54:17:f4:a0:7a:00:56:c2:ee:e9:93:78:b0:99:93:
                    ee:91:0b:92:f3:d3:8b:51:a1:9f:10:91:6f:19:45:
                    9b:25:43:1f:d5:7a:0c:08:b4:ac:3a:84:29:54:d8:
                    0c:27:1b:2e:c7:70:d6:d3:f2:20:94:5a:0e:62:58:
                    3c:1e:3e:e2:d3:19:c6:b0:8e:c7:67:9b:b8:6e:ea:
                    7b:c7:f8:f9:c9:3f:82:93:15:29:fc:38:77:9c:d4:
                    75:c8:b4:9e:ca:1c:8b:17:50:b7:9b:6d:03:1d:0b:
                    71:52:f5:cc:3d:51:83:55:c3:3c:23:ee:ab:de:32:
                    91:2f:45:08:d6:f4:1f:46:8f:5d:fc:2c:26:ce:62:
                    f4:e5:38:0d:f2:66:98:71:08:0f:de:fc:f6:4b:41:
                    7c:4b:16:be:66:ec:78:e9:d1:2f:d0:d7:35:7f:ca:
                    0f:9b:72:c3:16:7f:45:8c:6f:e4:eb:bb:9f:f4:6c:
                    6d:83:f6:77:c3:60:9d:2a:d3:8f:b5:a2:f0:71:88:
                    78:7b:29:cf:c2:b6:3b:8e:e1:91:a6:e5:54:2c:ec:
                    17:05:65:87:cb:9c:f0:b3:03:04:bf:e0:7c:86:74:
                    66:46:89:31:ef:32:3f:ce:87:61:64:e4:f4:9c:47:
                    13:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:EF:1B:76:74:2E:0C:2D:CE:D3:7D:5B:1B:F6:12:45:B7:F0:10:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bedc9df8-596e-4e33-b8ac-6857cf7f56cf/01e5b1f0-5d86-3f06-aef1-563471c3540e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bedc9df8-596e-4e33-b8ac-6857cf7f56cf/bedc9df8-596e-4e33-b8ac-6857cf7f56cf.crl

            X509v3 Authority Key Identifier:
                keyid:82:FF:3A:E8:D5:48:36:54:D3:40:AD:86:77:D4:7E:66:C9:6B:E1:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bedc9df8-596e-4e33-b8ac-6857cf7f56cf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.155.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:58:c4:1a:45:44:f4:d8:3e:f6:c1:a8:dd:98:12:d5:b2:28:
         ad:dd:f5:fa:22:2b:c7:3f:72:79:f5:7f:48:96:1d:52:c4:e9:
         bf:35:e1:08:48:83:6f:d4:06:29:60:55:d1:09:02:63:9a:6f:
         d4:48:bc:3c:8f:16:00:67:cc:e3:92:e9:86:09:ed:38:be:bb:
         ba:66:9e:fb:45:6c:bf:61:9d:06:cd:7e:31:da:bb:88:5d:76:
         c9:7d:38:96:16:b2:27:04:b6:f6:fa:a7:53:ee:43:b1:59:d0:
         70:79:3d:4f:b0:ce:e8:1c:c7:57:9c:a5:2a:9d:bc:80:5d:77:
         9f:53:03:59:2b:84:25:d7:41:02:6b:3c:52:1e:c4:2e:2b:ff:
         41:15:e1:3d:8d:e5:01:26:c8:05:8e:b8:8f:28:f7:ca:a3:77:
         48:04:72:59:5c:83:45:24:f2:07:bb:0d:c6:30:7a:c3:78:9d:
         bb:bd:a2:99:ac:6f:6b:f2:f4:e3:78:e7:1b:d6:8d:da:e6:2b:
         51:e2:dd:29:34:b1:1c:99:54:80:48:a7:4d:ad:a2:ee:b4:79:
         aa:b9:e8:01:63:70:2a:23:70:aa:93:d0:ee:ea:0f:12:54:ee:
         41:6f:bd:93:48:d6:a2:7a:ca:bf:1c:a5:63:21:67:d1:88:46:
         a4:2e:fe:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----