Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/2b19fe31-783c-3d4a-8ece-06a253df9756.roa
File:                     2b19fe31-783c-3d4a-8ece-06a253df9756.roa (raw, json)
Hash identifier:          /uKLnduOyWsNc8Sh+LhZrKTOqT+sYpp7rqfMjRnh1jc=
Subject key identifier:   58:98:97:AC:A2:04:D8:25:9D:6F:D7:6F:D7:9B:6F:B8:AA:B0:4D:FE
Certificate issuer:       /CN=faf569a5-954e-480e-9904-712ec61652b7
Certificate serial:       010D0C9F4328584941E2016AA66D50C553294958
Authority key identifier: 06:32:5E:FB:8B:27:C3:34:23:E2:86:F6:6C:02:1A:A9:B4:81:29:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/2b19fe31-783c-3d4a-8ece-06a253df9756.roa
Signing time:             Fri 21 Mar 2025 03:16:44 +0000
ROA not before:           Fri 21 Mar 2025 03:16:44 +0000
ROA not after:            Thu 19 Jun 2025 03:16:44 +0000
asID:                     4913
IP address blocks:        216.226.74.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:41:e2:01:6a:a6:6d:50:c5:53:29:49:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faf569a5-954e-480e-9904-712ec61652b7
        Validity
            Not Before: Mar 21 03:16:44 2025 GMT
            Not After : Jun 19 03:16:44 2025 GMT
        Subject: CN=ed179329-3659-4166-91e4-b9dbdaa21426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0a:eb:35:6c:13:35:5f:29:07:62:30:67:39:
                    4c:d9:c1:3c:53:47:e3:9d:d7:ee:e7:03:a1:4c:6f:
                    18:24:9f:24:44:df:0c:75:e4:51:2a:bc:c8:8b:39:
                    75:e9:be:98:b0:85:c3:5b:ba:fa:ab:7a:91:ec:25:
                    ec:be:5a:7f:4e:b1:a2:3f:e3:b2:1a:3f:f1:ec:0e:
                    87:5c:a0:2b:e5:92:7b:fb:4c:3f:51:31:24:c1:03:
                    11:ed:6e:11:bc:3c:c6:5d:18:c2:44:f6:6a:62:8b:
                    03:d8:74:3d:ac:6f:a5:b7:41:22:e2:b3:1b:93:ed:
                    00:b0:09:21:b4:d3:22:57:b3:a1:15:ea:e5:de:ff:
                    4d:98:eb:61:d1:ba:4c:29:7c:62:25:23:42:05:80:
                    40:44:ad:ea:39:8e:1b:8c:a9:94:9a:a6:97:a6:bb:
                    17:2c:d5:77:a2:f0:6e:78:40:0e:06:31:f3:32:b8:
                    f9:ea:86:c5:46:23:4f:af:a0:2d:61:ea:bc:54:91:
                    c2:95:13:c8:4c:51:24:37:00:b6:a7:23:5e:22:9c:
                    c4:af:13:fd:9d:77:f8:79:05:ac:b2:2b:02:33:e3:
                    ca:d1:ad:58:ae:ed:cc:60:14:e5:1e:25:19:9d:6c:
                    aa:04:06:0c:72:ce:75:e9:4f:c3:35:c9:47:99:da:
                    01:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:98:97:AC:A2:04:D8:25:9D:6F:D7:6F:D7:9B:6F:B8:AA:B0:4D:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/2b19fe31-783c-3d4a-8ece-06a253df9756.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/faf569a5-954e-480e-9904-712ec61652b7.crl

            X509v3 Authority Key Identifier:
                keyid:06:32:5E:FB:8B:27:C3:34:23:E2:86:F6:6C:02:1A:A9:B4:81:29:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.226.74.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:0a:10:69:1d:da:3f:70:fa:66:dc:8a:61:d8:86:4e:9e:ff:
         c8:a9:a1:a6:b3:7b:7a:aa:95:aa:84:b7:5a:fd:1c:4d:d5:5a:
         c4:57:24:2d:77:07:59:34:7f:86:aa:6b:bb:d4:a0:46:ac:56:
         04:c3:13:eb:6f:ce:f6:ae:d4:71:12:f6:b0:1a:b8:7f:f3:72:
         51:7f:15:ed:c1:dd:19:0f:38:76:b8:8b:d3:3a:9a:7c:d5:4d:
         8f:9a:7b:42:30:ef:86:be:07:29:e4:a7:f4:6b:4e:4a:96:dd:
         5b:2a:ae:54:81:b6:0e:ff:8a:4a:a6:3a:8a:f4:95:77:19:fb:
         08:44:20:16:9b:9f:fa:a1:93:aa:ac:1e:d5:78:54:b9:cb:7f:
         5a:96:01:85:09:b9:18:a9:f8:1e:c1:43:40:07:76:9c:23:cb:
         f8:7f:28:27:e3:ac:b5:6f:31:d8:f5:73:fc:26:87:b0:e6:b9:
         b4:69:5e:06:a6:b9:50:81:c0:e0:bb:c5:21:41:3c:6c:89:51:
         33:b4:1a:d3:95:b3:a9:51:d9:b2:56:f0:60:57:e0:a2:0f:e8:
         0f:87:e5:69:42:f9:72:e0:93:e1:bf:d3:40:bd:11:be:eb:a6:
         01:41:e1:43:05:30:fe:6a:00:66:04:f0:dd:4b:86:f4:31:da:
         db:18:09:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----