Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280/011ade8c-5158-3ad0-b3a4-f792372a4d23.roa
File:                     011ade8c-5158-3ad0-b3a4-f792372a4d23.roa (raw, json)
Hash identifier:          hJ4qCAYIpcm37lizeoQHxIQp/ozWSzepgHMphRt0adE=
Subject key identifier:   16:2B:26:51:71:4B:A5:60:56:57:97:0B:69:D4:BD:3C:67:29:2B:6B
Certificate issuer:       /CN=3c7535f4-d3f1-4e7f-b379-0835e02fb280
Certificate serial:       010D0C9F43285848F9269C4E327599867FC25780
Authority key identifier: 6A:75:98:EE:10:F6:3C:A4:73:F2:97:8B:E2:08:9A:00:F0:E2:DA:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280/011ade8c-5158-3ad0-b3a4-f792372a4d23.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     398987
IP address blocks:        23.128.97.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:9c:4e:32:75:99:86:7f:c2:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c7535f4-d3f1-4e7f-b379-0835e02fb280
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=ad9abf26-8d85-4155-98d9-c350c4f02df1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:3f:0d:46:92:d5:b2:01:b8:db:6b:87:fc:0c:
                    fe:28:ae:9e:f9:87:a5:77:0c:51:a0:67:70:2a:f1:
                    41:43:54:0f:7b:e0:25:3c:09:25:45:23:22:ba:71:
                    61:8d:4e:f3:ce:d4:6e:6d:ce:fc:87:4a:7c:1b:1d:
                    78:83:d6:f1:f2:d2:1f:e6:05:f0:5c:53:4b:37:5c:
                    13:d5:79:34:a1:cf:3d:59:d2:32:80:71:b8:fa:eb:
                    5b:6c:7b:70:84:23:f5:24:92:90:5b:5e:d9:7e:33:
                    af:52:54:74:0c:f5:c7:82:70:fd:af:85:67:ab:2e:
                    e6:e7:73:58:09:19:f7:09:8e:cb:1f:f1:33:89:01:
                    5f:2c:15:78:eb:bc:4f:aa:80:a4:ed:d9:a3:a1:38:
                    c0:f9:1c:05:6b:fe:49:45:0e:9d:d8:97:67:e2:82:
                    02:59:24:6f:3b:01:28:7d:5e:e1:0c:d7:4c:e4:e1:
                    7f:38:fb:f7:9b:a4:cd:42:f6:10:bf:9b:25:9b:dc:
                    2f:f7:62:db:89:d6:de:6e:d1:fd:68:4e:51:7f:1d:
                    bf:be:ef:11:7e:35:17:a4:2c:7f:88:a7:9c:70:08:
                    48:94:eb:ce:1a:05:ec:32:06:31:71:94:58:1e:32:
                    b3:b3:c7:3c:3e:3f:30:3a:b5:7a:3b:e2:a2:c4:d4:
                    2b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:2B:26:51:71:4B:A5:60:56:57:97:0B:69:D4:BD:3C:67:29:2B:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280/011ade8c-5158-3ad0-b3a4-f792372a4d23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280/3c7535f4-d3f1-4e7f-b379-0835e02fb280.crl

            X509v3 Authority Key Identifier:
                keyid:6A:75:98:EE:10:F6:3C:A4:73:F2:97:8B:E2:08:9A:00:F0:E2:DA:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.128.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:36:7e:8d:ad:e3:a6:7f:c9:a2:da:69:22:16:98:c8:4d:cf:
         18:b5:20:85:4a:f8:f9:4f:64:cf:97:c3:5a:86:f8:a4:47:b8:
         ed:7f:12:28:52:b2:21:e0:16:26:d8:a6:c3:93:98:37:db:48:
         51:8e:7c:1a:43:7e:bf:af:c2:6e:75:19:77:b6:18:0a:7d:bb:
         8d:6c:1f:e3:53:11:4a:49:dc:cb:5e:d7:89:54:4d:3e:47:4b:
         3c:db:a9:0e:e6:62:50:dd:cb:22:cd:07:ef:a0:38:24:57:bb:
         46:98:ea:23:32:00:03:51:99:0d:2a:d3:49:b8:10:71:17:99:
         99:51:ed:33:47:5e:4f:c0:ef:55:db:11:90:56:43:9d:3b:94:
         0b:fb:93:01:29:57:b6:b0:4e:06:ad:0c:a5:16:50:a4:cf:4d:
         0a:22:a2:b8:ed:bf:b1:f8:62:ec:1f:89:f2:44:05:a2:bd:da:
         c3:15:62:23:df:4a:5d:4f:78:2b:fc:90:f3:49:33:e9:f3:7e:
         82:0e:f6:36:62:cb:1a:d4:5a:fe:e5:1d:5b:f3:53:23:1b:5c:
         31:0f:eb:c9:35:29:78:e7:48:1e:2a:c4:bf:64:30:f8:6b:58:
         a9:cb:79:1f:fa:ba:13:fc:45:73:4d:25:7e:7d:61:cf:bb:7f:
         9b:44:8c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----