Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/53204a75-6523-327f-9e1b-f6a73aaf7091.roa
File:                     53204a75-6523-327f-9e1b-f6a73aaf7091.roa (raw, json)
Hash identifier:          gad4XMUo3rUtoyy9Sr99AZNQHCOFlw19d21sU4RLRCA=
Subject key identifier:   9B:0E:47:A2:25:E8:69:CB:9B:03:7E:6C:17:57:D7:06:7F:84:BC:A6
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584904A99E290A221A4AB4FDCA80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/53204a75-6523-327f-9e1b-f6a73aaf7091.roa
Signing time:             Thu 27 Feb 2025 04:58:49 +0000
ROA not before:           Thu 27 Feb 2025 04:58:49 +0000
ROA not after:            Wed 28 May 2025 03:58:49 +0000
asID:                     834
IP address blocks:        23.230.87.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:04:a9:9e:29:0a:22:1a:4a:b4:fd:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb 27 04:58:49 2025 GMT
            Not After : May 28 03:58:49 2025 GMT
        Subject: CN=863558a7-7e0b-4546-ac1a-3ac538b76a4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ea:f7:36:5a:47:9e:97:4c:a9:bc:23:fc:e5:
                    16:d3:17:d6:2e:c8:c7:39:fe:94:63:43:a5:b0:a0:
                    13:3a:fb:d7:e1:d0:6d:6e:4a:6e:52:97:91:a4:c1:
                    ab:10:9d:ef:f1:4a:2c:ab:ae:d2:65:4c:6c:d8:5d:
                    b1:8f:ba:ae:0b:05:91:5c:02:a9:5b:c1:13:42:bf:
                    38:76:90:ba:a0:7b:88:7e:02:98:b8:94:14:21:45:
                    69:73:4d:e7:54:b5:0b:60:a9:ba:b7:b1:38:63:3e:
                    e8:ab:86:eb:d6:b3:32:5b:d5:4f:2b:52:e5:21:18:
                    da:32:6b:a7:9d:b8:58:57:79:1a:c9:63:c8:b1:fe:
                    16:91:e6:f3:ee:a1:33:bc:f7:48:e3:23:5d:e9:5e:
                    16:e6:9c:a3:16:7d:22:bf:d5:73:e5:98:db:d1:8c:
                    98:cf:c1:96:7e:01:9c:0d:b7:c9:0d:df:5c:3a:de:
                    04:db:c2:54:40:98:e6:13:d5:4f:d8:ad:de:37:c6:
                    2c:1d:71:49:8e:67:8f:00:e1:3f:a2:26:ea:37:b1:
                    6f:50:6f:01:52:79:53:f5:4c:dd:2c:bd:39:1a:0f:
                    d8:fe:f0:2e:09:00:96:ce:28:6a:42:c4:c2:75:92:
                    22:be:e0:8c:86:e2:c2:cc:d1:ae:c2:22:8d:fd:c8:
                    1e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:0E:47:A2:25:E8:69:CB:9B:03:7E:6C:17:57:D7:06:7F:84:BC:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/53204a75-6523-327f-9e1b-f6a73aaf7091.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:86:4d:e9:ad:1e:e3:07:94:94:fd:82:34:c1:52:bf:9a:70:
         d2:70:cb:b7:a3:f0:81:95:44:8a:10:b6:6c:65:20:ba:a2:33:
         4a:84:89:7b:24:03:ca:8c:99:b7:01:a4:d5:72:c3:34:d0:9f:
         58:8f:ce:97:5e:b0:a3:cb:58:f0:c8:c0:46:ba:6c:7d:17:c6:
         d0:1b:78:1b:99:20:d8:e4:4d:e6:45:61:d7:5d:7b:fe:fb:c9:
         04:e5:eb:4a:28:38:bf:8a:e3:a5:e5:b8:25:e0:ef:de:09:1f:
         e8:b9:86:4f:c9:13:43:b1:61:92:35:e0:a0:cd:ac:bd:f1:32:
         ec:33:19:e3:78:08:24:4e:ff:28:9a:5b:d5:84:8b:86:f8:46:
         c9:35:02:11:b5:10:40:7f:43:80:b9:f1:07:93:73:e9:6b:c3:
         77:d5:d5:b0:6f:56:56:32:54:79:9f:de:5f:f9:79:66:92:b3:
         8c:53:9d:ee:48:73:53:31:6b:8c:43:07:43:0f:ce:de:d8:14:
         a7:c9:d0:b4:c1:8b:6d:22:0f:6d:2a:61:98:ed:a8:53:9e:a4:
         2c:61:03:3e:8f:fb:f4:ca:67:c1:6f:d8:4c:d1:42:aa:fc:96:
         b3:02:51:7d:6a:e0:ae:19:4a:ea:b2:e6:e8:b4:c8:90:ce:22:
         df:6a:a8:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----