Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/6222acbb-8fb1-3bcf-ae36-19bcab77a56a.roa
File:                     6222acbb-8fb1-3bcf-ae36-19bcab77a56a.roa (raw, json)
Hash identifier:          uEkKoNYsLvkEDLLBKsxTOLov69VLZC3vJAmIP72OByo=
Subject key identifier:   C0:F7:72:71:D0:B3:DA:54:77:86:14:90:8C:7E:67:40:AF:C5:0F:89
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285848DA70F16263E0D64454996000
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/6222acbb-8fb1-3bcf-ae36-19bcab77a56a.roa
Signing time:             Wed 12 Feb 2025 02:00:39 +0000
ROA not before:           Wed 12 Feb 2025 02:00:39 +0000
ROA not after:            Tue 13 May 2025 01:00:39 +0000
asID:                     64267
IP address blocks:        168.91.40.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:da:70:f1:62:63:e0:d6:44:54:99:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Feb 12 02:00:39 2025 GMT
            Not After : May 13 01:00:39 2025 GMT
        Subject: CN=ce437007-3248-428a-a44b-442a7077d5f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:5d:6f:7d:49:aa:3e:7d:d6:59:0a:4a:dd:dc:
                    5e:a1:12:5e:98:27:76:f8:df:7a:1f:2d:70:8c:bd:
                    97:e5:ff:37:f4:5c:0a:e1:3e:49:f3:b4:79:0a:a8:
                    1a:0f:e8:98:30:30:cf:9e:19:f8:9e:58:44:00:25:
                    d5:a0:a1:44:8f:ba:59:7f:82:d7:46:0d:8f:82:69:
                    38:9a:7b:33:dc:0f:30:49:ee:d7:2a:9e:ba:ca:8f:
                    4e:33:f2:cf:a8:88:b0:8f:1a:da:73:fc:8e:a5:3f:
                    c5:f0:23:04:2b:15:49:4c:33:19:4f:46:2e:ad:d9:
                    bd:e5:96:c0:5e:12:ab:1b:cf:e5:a6:88:97:c9:cd:
                    2f:9e:32:80:89:08:b6:61:08:32:66:a9:1c:5e:c4:
                    d5:75:be:52:a3:3b:0b:72:9d:cc:5a:e2:38:d0:4f:
                    59:ae:29:74:cf:28:3a:9d:87:e3:62:ae:5b:f0:20:
                    08:d8:84:17:a2:2f:61:16:b6:77:7a:1a:3a:9b:9f:
                    9c:31:a8:d5:e5:bf:90:0d:59:f4:de:0b:d8:5b:18:
                    8f:68:9c:87:5e:6e:b1:fe:ab:8e:23:9e:a3:eb:46:
                    2f:0e:80:f2:47:81:2b:97:9b:28:37:5b:ab:47:a9:
                    f3:0c:81:6f:9c:22:ef:1e:f0:cd:66:ca:42:fc:27:
                    27:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:F7:72:71:D0:B3:DA:54:77:86:14:90:8C:7E:67:40:AF:C5:0F:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/6222acbb-8fb1-3bcf-ae36-19bcab77a56a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.91.40.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:0f:e0:fa:e5:a1:f9:21:1a:21:c1:a7:91:4f:2c:45:41:19:
         c8:6a:38:9f:a3:32:4f:c0:b9:6a:39:f9:a6:84:cd:2b:a1:78:
         39:0c:b2:ff:6c:68:72:af:ad:d8:9d:15:7f:6a:dd:0e:7b:a2:
         53:1a:15:78:5b:40:8a:19:71:fc:44:35:84:cd:23:4b:fa:fd:
         b3:13:24:11:aa:0d:8f:c2:eb:c5:f0:c2:f3:e9:a5:b2:67:3a:
         92:0e:8a:15:b3:08:9b:6e:f2:02:a2:5f:33:3e:6d:2a:06:27:
         97:7a:8a:96:bd:ee:c0:e9:7f:c5:96:1a:37:8c:0f:52:c0:e3:
         9a:32:ac:1e:2f:a9:9a:df:67:7c:6b:5f:ee:40:08:3e:78:29:
         2d:30:b1:39:cd:d7:eb:d7:5b:5f:f8:72:4d:2a:17:a8:72:b6:
         9b:9a:ef:b8:f8:c3:10:a4:74:c2:8a:af:a5:f2:c2:84:6c:ef:
         0e:bc:26:3b:b0:64:63:71:37:86:92:a5:fd:af:77:1b:3c:49:
         92:78:54:4c:0b:63:79:b8:50:ec:bd:59:a9:78:b7:07:6c:86:
         1c:c2:35:a8:eb:8b:08:c6:cb:aa:fe:f1:c9:cc:38:3f:59:96:
         7a:e7:c6:bd:14:a1:71:aa:da:7c:75:e4:1e:2e:ad:a6:4f:e7:
         37:65:0e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----