Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/beb73535-d0fb-4340-8d5e-4c26d6a59dc7/f14a4a41-a566-35dd-8a9e-a82124746a3b.roa
File:                     f14a4a41-a566-35dd-8a9e-a82124746a3b.roa (raw, json)
Hash identifier:          R3RIu1uR/wBw9U0/aXczyRE8U26i+iZwKGKcJsLB5ok=
Subject key identifier:   D8:FD:85:57:DF:8A:29:9D:75:AC:60:DA:A7:A7:97:D7:1F:E0:EB:AC
Certificate issuer:       /CN=beb73535-d0fb-4340-8d5e-4c26d6a59dc7
Certificate serial:       010D0C9F43285849287E6E957D4D05B124848180
Authority key identifier: CC:F8:F7:81:D8:59:90:59:3F:D4:20:4D:A0:61:ED:65:26:1E:0C:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/beb73535-d0fb-4340-8d5e-4c26d6a59dc7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/beb73535-d0fb-4340-8d5e-4c26d6a59dc7/f14a4a41-a566-35dd-8a9e-a82124746a3b.roa
Signing time:             Wed 12 Mar 2025 01:00:39 +0000
ROA not before:           Wed 12 Mar 2025 01:00:39 +0000
ROA not after:            Tue 10 Jun 2025 01:00:39 +0000
asID:                     395511
IP address blocks:        67.22.111.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:28:7e:6e:95:7d:4d:05:b1:24:84:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=beb73535-d0fb-4340-8d5e-4c26d6a59dc7
        Validity
            Not Before: Mar 12 01:00:39 2025 GMT
            Not After : Jun 10 01:00:39 2025 GMT
        Subject: CN=082fe128-f6f2-4d79-8159-d5beb95438ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:20:3c:f7:6b:aa:32:f9:a1:af:df:97:70:03:
                    50:b1:87:5c:02:dd:a8:58:1a:e9:61:8e:44:bf:e1:
                    0a:37:64:44:66:2a:12:b2:68:43:ba:5a:0d:c1:6e:
                    b6:c0:78:c6:09:6f:86:83:7b:28:51:16:5e:97:7d:
                    73:c5:f8:16:21:af:5f:13:a5:91:ef:ef:8c:0d:82:
                    7f:8d:ca:13:36:db:9d:66:dc:35:a2:93:b7:d3:2b:
                    4b:42:30:18:a7:a7:9a:ae:bf:50:b5:2c:1b:40:fe:
                    6a:e3:89:87:59:a7:25:ef:f4:d5:c7:6e:23:29:d7:
                    f9:eb:d4:ef:28:c3:e0:1a:88:24:10:11:07:3d:50:
                    62:35:11:93:bf:b7:e9:d7:14:db:51:5d:37:a4:81:
                    02:4b:08:26:ba:08:46:88:7d:5f:c2:b3:2c:a8:79:
                    03:c1:e8:5f:8f:d7:be:03:b5:a0:e2:a1:f9:90:df:
                    19:7d:c8:c3:ef:a2:87:56:47:da:32:99:2c:18:b5:
                    1e:13:35:b1:51:e8:13:30:f6:cf:93:da:a4:6c:a5:
                    6e:0b:73:e9:4b:61:e6:e0:5e:77:62:0f:53:4e:1a:
                    25:5b:61:fd:58:83:de:18:0e:56:59:b3:af:bb:34:
                    e2:86:18:2b:3a:e1:56:7c:c4:7e:42:02:c2:2a:ea:
                    37:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:FD:85:57:DF:8A:29:9D:75:AC:60:DA:A7:A7:97:D7:1F:E0:EB:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/beb73535-d0fb-4340-8d5e-4c26d6a59dc7/f14a4a41-a566-35dd-8a9e-a82124746a3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/beb73535-d0fb-4340-8d5e-4c26d6a59dc7/beb73535-d0fb-4340-8d5e-4c26d6a59dc7.crl

            X509v3 Authority Key Identifier:
                keyid:CC:F8:F7:81:D8:59:90:59:3F:D4:20:4D:A0:61:ED:65:26:1E:0C:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/beb73535-d0fb-4340-8d5e-4c26d6a59dc7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.22.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:3a:74:9a:79:96:2f:4d:31:0e:b3:82:8c:3e:dc:99:5e:68:
         17:23:41:b9:71:01:6e:c8:14:e4:dc:00:76:d6:df:cd:a5:68:
         d0:e5:67:bd:57:78:94:26:c0:d3:92:b8:e8:d5:66:5c:9f:8c:
         77:b2:35:88:79:42:fd:36:1c:e4:79:83:e4:f2:94:8f:d0:47:
         ec:39:fb:04:cc:18:f8:06:05:9d:ab:24:c7:70:3a:d4:4b:5a:
         0b:b1:d7:d2:c1:cc:31:d9:48:8c:f0:1c:d2:25:cd:e2:25:4e:
         a8:ca:d3:9f:bc:3e:48:6a:b4:c9:8e:49:49:ec:9d:c8:65:de:
         d5:f2:fc:27:92:38:c1:dc:fa:e7:9c:3f:d2:4e:6b:89:3c:d1:
         07:d1:0d:c5:01:86:99:dd:2f:02:19:13:a9:a5:d3:cb:59:30:
         f4:b8:87:19:fc:53:dd:59:62:76:a4:3c:eb:cd:6a:7d:2d:8a:
         05:c7:5c:e7:95:cd:3f:36:7d:e3:ea:be:a5:24:13:5d:03:ed:
         d9:0e:d0:3d:6a:7d:0b:79:62:c2:44:84:dc:77:3a:c4:58:d5:
         bf:38:ee:94:ee:d5:08:08:30:ab:21:f8:34:d2:35:59:58:4c:
         cc:21:30:d6:c7:f4:13:25:53:81:93:b7:5f:a1:04:2b:3d:7c:
         0c:27:f7:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----