Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/80f6305c-cf5c-3164-b462-95743d262e6b.roa
File:                     80f6305c-cf5c-3164-b462-95743d262e6b.roa (raw, json)
Hash identifier:          Ue6zWqqkU9B+Wzw5aJ9ddmCmfG48bhU3Z7EP6WAoqyE=
Subject key identifier:   EB:AE:5E:CA:6B:64:D4:07:95:51:BF:E8:2C:51:20:9C:03:29:43:FE
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F43285849F9DFCB4CFD2BAF03DBB61D40
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/80f6305c-cf5c-3164-b462-95743d262e6b.roa
Signing time:             Mon 26 May 2025 01:00:50 +0000
ROA not before:           Mon 26 May 2025 01:00:50 +0000
ROA not after:            Sun 24 Aug 2025 01:00:50 +0000
asID:                     18563
IP address blocks:        207.245.13.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f9:df:cb:4c:fd:2b:af:03:db:b6:1d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: May 26 01:00:50 2025 GMT
            Not After : Aug 24 01:00:50 2025 GMT
        Subject: CN=a8eba2a0-6527-441d-8349-93fdf72052c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:15:4f:88:fd:d3:4a:74:7b:57:0e:e7:48:ea:
                    d8:71:30:86:69:64:ac:05:5c:50:90:ab:60:4b:24:
                    64:f1:0a:55:7a:d2:85:9a:74:69:f6:38:9a:96:0f:
                    5b:24:4a:02:d0:40:56:84:cf:0e:fc:5e:b4:af:cc:
                    89:24:73:a4:6f:58:fa:d0:10:04:0f:67:a3:ed:d8:
                    c3:10:59:f7:b6:02:c3:a5:0f:73:37:29:61:20:eb:
                    fe:d0:19:ef:d8:5b:35:94:d7:c3:d3:ab:ed:b5:7d:
                    e6:ca:4b:d5:a0:ac:0e:44:c8:01:37:77:f3:3d:af:
                    69:c3:e4:f1:b2:c1:1f:1e:91:fb:f3:d7:aa:01:e4:
                    6a:e2:96:de:b9:65:11:d3:0d:95:87:2a:f9:ae:c9:
                    c4:03:a8:d5:56:16:3e:8a:74:96:1e:a9:c4:7d:28:
                    9e:5b:2f:a2:a9:fc:01:79:ff:6a:18:d6:ea:fa:48:
                    2e:2e:39:a6:6b:f8:14:5c:75:d8:61:34:3c:0b:02:
                    af:82:bd:1d:2a:f2:a9:53:36:82:33:ab:d9:b2:da:
                    47:5c:80:cc:c1:7e:f6:93:73:9c:4b:77:58:ea:c7:
                    3f:d6:54:9f:c4:1e:27:e7:78:35:fb:67:d5:ea:8b:
                    2d:5b:2c:32:cc:6a:21:2c:4c:e6:59:f1:86:31:3b:
                    f5:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:AE:5E:CA:6B:64:D4:07:95:51:BF:E8:2C:51:20:9C:03:29:43:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/80f6305c-cf5c-3164-b462-95743d262e6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.245.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:0d:6b:b5:8f:fa:e7:a8:e6:97:28:32:4d:10:c3:a9:05:da:
         bc:42:bd:be:66:72:b2:8a:45:a6:2d:bc:9f:b1:8f:fa:54:fe:
         6c:6f:90:b1:d0:8b:68:7a:7d:fe:ad:e5:24:0b:f9:2d:df:ea:
         db:31:59:ca:c6:ee:73:49:03:37:89:d3:56:5e:b3:5f:f5:dd:
         d4:4c:e0:ed:4d:50:1d:7c:de:4d:17:78:02:cf:0c:c6:de:01:
         7d:ed:8b:c2:a1:27:7b:75:7e:c7:a0:a8:ad:78:8f:7e:14:19:
         7c:0d:1f:99:7c:4d:0c:41:ee:b6:42:49:10:df:5e:b5:a1:bf:
         ad:1d:1e:7b:74:f6:3b:15:b9:fb:2f:10:33:81:cf:32:61:cc:
         64:73:0f:ef:51:16:b5:59:35:f4:7c:0e:15:71:c2:64:da:ec:
         88:91:e9:0a:90:98:63:8e:ef:ac:2c:e5:f7:eb:40:d4:c2:36:
         8f:5a:fa:4d:45:82:df:e5:16:4b:db:a5:df:8a:4c:49:0f:68:
         3a:ac:c4:1c:cb:d1:5b:41:11:8b:c7:4e:59:2b:9d:d7:95:30:
         18:4b:35:d7:d5:79:e4:1e:b3:fb:2f:9c:d6:ba:24:63:c7:69:
         86:10:da:07:87:fd:59:b9:26:f2:f7:c6:1f:d3:2f:8b:9f:13:
         be:8f:6a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----