Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/c2c6f7d3-cba4-3cc7-bff6-77ef5ec8df20.roa
File:                     c2c6f7d3-cba4-3cc7-bff6-77ef5ec8df20.roa (raw, json)
Hash identifier:          1YVvWq4351QQxmXNWmSqah5sLAIYwK2KdV/g/z8Pzxc=
Subject key identifier:   DB:BB:0F:5F:2B:20:E3:B3:0E:5A:12:E0:5D:42:3F:8D:0B:C4:0D:09
Certificate issuer:       /CN=faf569a5-954e-480e-9904-712ec61652b7
Certificate serial:       010D0C9F4328584941E1C9ACF0A5CD0403F1DD80
Authority key identifier: 06:32:5E:FB:8B:27:C3:34:23:E2:86:F6:6C:02:1A:A9:B4:81:29:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/c2c6f7d3-cba4-3cc7-bff6-77ef5ec8df20.roa
Signing time:             Fri 21 Mar 2025 03:16:18 +0000
ROA not before:           Fri 21 Mar 2025 03:16:18 +0000
ROA not after:            Thu 19 Jun 2025 03:16:18 +0000
asID:                     32034
IP address blocks:        216.226.64.0/24 maxlen: 24
                          216.226.65.0/24 maxlen: 24
                          216.226.66.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:41:e1:c9:ac:f0:a5:cd:04:03:f1:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faf569a5-954e-480e-9904-712ec61652b7
        Validity
            Not Before: Mar 21 03:16:18 2025 GMT
            Not After : Jun 19 03:16:18 2025 GMT
        Subject: CN=c6a6d91a-f6b0-4001-a580-23cfa19fb457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c8:d7:25:90:bc:38:0e:c9:56:9f:60:c6:f4:
                    de:61:df:f9:e4:ca:e8:a9:07:34:61:dd:5f:8d:a6:
                    e3:68:f6:b7:9e:85:5d:10:96:89:12:f8:62:3d:cc:
                    f7:7f:65:51:72:fb:8d:dc:75:76:15:f4:14:ff:7c:
                    a1:40:54:fa:c1:66:e2:0a:43:d9:31:77:a5:13:51:
                    34:34:73:70:ea:4e:15:5a:a8:8d:2a:35:8b:31:70:
                    1c:78:c6:dd:30:fd:54:f5:e4:2f:48:ee:09:59:29:
                    81:7f:b4:8b:0d:0b:27:eb:32:5f:8e:2d:0b:c1:b8:
                    75:41:aa:3f:58:2a:a7:1f:50:25:7b:4e:be:67:c1:
                    e9:c7:68:8f:d6:9f:d3:0d:62:2f:e3:9d:93:20:02:
                    e8:07:78:14:eb:0a:6f:36:d6:16:37:65:bf:46:af:
                    f3:7e:21:26:10:25:f2:23:48:dd:4d:0c:df:5a:08:
                    25:fd:79:53:e5:50:14:63:88:b2:c1:9b:db:33:62:
                    53:56:8f:63:91:6c:f6:c8:cc:2b:c4:ba:cf:64:b1:
                    45:e5:c7:25:13:ad:4a:bd:89:68:ec:77:58:9c:e4:
                    1b:95:02:f4:d2:6a:6e:76:24:d7:05:8a:2b:33:45:
                    bd:e4:fc:76:29:c8:79:c7:a3:ef:da:4b:0e:ac:ad:
                    2d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:BB:0F:5F:2B:20:E3:B3:0E:5A:12:E0:5D:42:3F:8D:0B:C4:0D:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/c2c6f7d3-cba4-3cc7-bff6-77ef5ec8df20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/faf569a5-954e-480e-9904-712ec61652b7.crl

            X509v3 Authority Key Identifier:
                keyid:06:32:5E:FB:8B:27:C3:34:23:E2:86:F6:6C:02:1A:A9:B4:81:29:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.226.64.0-216.226.66.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:74:5d:d5:e5:d8:7c:fb:4a:7e:23:da:74:9e:fc:64:bc:16:
         67:56:eb:53:42:99:de:2b:4d:2e:33:fb:14:42:32:28:22:e4:
         f3:63:38:80:76:91:ad:d5:22:d7:e9:03:43:2b:3a:d8:0a:9e:
         02:bb:2f:dc:7d:91:00:7b:09:65:5d:a4:66:77:e1:35:ad:4a:
         fa:2a:d1:d6:9a:28:75:8b:a7:76:bb:59:f9:45:b9:60:b1:6f:
         4c:21:ab:86:be:ce:06:93:c5:72:ac:47:74:da:27:6f:14:6e:
         9c:ea:92:e5:63:0e:e7:99:59:d8:ee:c5:61:1d:a3:52:1c:34:
         54:20:14:24:44:78:00:54:b1:c6:24:d2:65:b0:e5:4e:94:57:
         05:07:dc:df:12:8e:5e:e7:ac:c8:b5:09:79:9a:ac:5f:05:91:
         38:b6:1b:d5:c9:d4:e6:69:46:b3:84:0f:84:ff:34:4d:54:d3:
         43:61:76:69:34:37:e0:1b:3a:6a:70:99:1f:ca:a3:2f:e0:87:
         7b:ec:25:e6:71:c0:f0:05:ac:43:db:43:7f:8b:08:6f:35:37:
         72:88:92:a7:55:83:26:05:aa:fd:be:43:32:e0:1f:b2:ef:d3:
         93:74:13:26:25:be:d9:b1:56:63:2c:c0:b0:24:ef:a8:07:fe:
         a6:1e:bf:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----