Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687/7fa0cc30-65e3-3794-b15d-991d8f0a5562.roa
File:                     7fa0cc30-65e3-3794-b15d-991d8f0a5562.roa (raw, json)
Hash identifier:          n6v9h8r/nSaxxcFRLtlsJv0FYs1Y3SE6F6tH6Zfgey0=
Subject key identifier:   B6:A2:56:9A:9A:53:EE:79:BD:72:E1:D6:65:47:A3:94:10:22:28:CE
Certificate issuer:       /CN=7cc9f3bd-75d8-41a5-bec8-2e7af65f5687
Certificate serial:       010D0C9F43285848F9269DB969816D1A0BECD380
Authority key identifier: 0B:09:79:58:DE:CD:36:2F:27:4C:D1:43:17:6C:37:CB:2E:05:BA:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687/7fa0cc30-65e3-3794-b15d-991d8f0a5562.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     398898
IP address blocks:        23.168.16.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:9d:b9:69:81:6d:1a:0b:ec:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7cc9f3bd-75d8-41a5-bec8-2e7af65f5687
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=b4c249ca-d57d-4569-a56c-6fb69f56f7bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a3:ac:38:d8:8c:15:aa:4a:19:17:57:4b:9a:
                    23:5e:c1:31:4a:2c:84:cf:0e:3d:36:14:e0:06:78:
                    82:c7:52:95:2a:21:fc:70:ec:f6:b5:51:57:25:b8:
                    f7:34:a4:ae:95:ce:c7:26:7b:b6:2e:35:d1:f0:18:
                    30:f2:04:b9:08:14:6e:0b:88:99:75:71:8b:31:5c:
                    29:86:db:44:d7:c7:f2:84:fb:49:41:84:9e:a9:30:
                    15:5a:f9:8a:d6:c1:17:2d:62:cc:c5:ed:e2:2a:2e:
                    72:d6:f5:d6:b7:9f:0c:e5:b7:cf:ae:c5:1a:ba:bb:
                    62:02:e4:9e:e2:34:88:66:55:7c:73:de:15:0b:fe:
                    a1:89:6e:b2:4d:28:4d:4c:23:9f:91:75:38:18:0e:
                    2b:07:ac:ad:a4:71:a2:47:56:16:1c:a2:73:39:6a:
                    8f:82:2e:c4:ed:77:2c:19:0d:85:32:59:23:72:c7:
                    11:16:94:f8:cf:7b:f7:1a:1e:5c:77:17:ef:00:a7:
                    fd:5e:fd:d6:db:8f:65:46:6c:ed:45:fc:3f:d2:3c:
                    aa:e2:d6:e0:92:22:19:ec:91:77:70:54:1c:27:f8:
                    e8:a4:02:e9:b7:1e:96:d3:a4:a4:06:18:42:22:98:
                    0f:85:3b:8e:18:a2:13:1c:80:c1:ee:9e:5b:f0:22:
                    e9:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:A2:56:9A:9A:53:EE:79:BD:72:E1:D6:65:47:A3:94:10:22:28:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687/7fa0cc30-65e3-3794-b15d-991d8f0a5562.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687.crl

            X509v3 Authority Key Identifier:
                keyid:0B:09:79:58:DE:CD:36:2F:27:4C:D1:43:17:6C:37:CB:2E:05:BA:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.168.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:29:b1:c0:c2:6e:c0:fc:4a:7a:0a:36:d3:91:6d:23:9d:9d:
         4a:80:1a:28:54:69:97:32:94:c9:17:66:b9:18:55:eb:ac:c8:
         7c:0a:55:3f:23:67:20:a1:1f:fc:0a:16:f0:93:88:88:34:3f:
         11:af:79:70:c8:ce:0a:2e:05:c2:9f:e7:d2:29:4a:94:83:e3:
         01:ff:bd:4e:cd:01:87:fe:a7:a6:4e:ee:9e:28:70:9d:c9:f0:
         65:c2:ac:fb:ee:08:cf:b0:ca:39:f4:fd:f6:2b:e4:a6:a6:a7:
         e4:29:32:2b:dc:84:4e:04:60:f5:a1:c1:cc:6f:e9:ba:85:6a:
         33:59:93:b1:b6:dc:7f:a5:2f:e5:fd:a9:ce:e6:fa:ff:fd:c2:
         01:13:de:a6:b9:9a:c8:62:f0:ab:12:b4:b2:73:f7:fe:d4:cf:
         b7:66:34:ff:87:e0:c3:52:5e:d8:ca:77:ae:33:3d:d3:12:2f:
         c6:06:fb:8a:d7:d2:3c:a5:a2:ab:48:86:64:7e:b2:ca:e8:24:
         9a:b1:ac:66:91:ce:84:89:12:9c:42:77:66:b2:b7:73:4d:9c:
         26:34:e8:45:e3:8b:f9:d5:69:f1:2a:b2:30:74:e2:44:af:e8:
         cb:99:19:75:26:00:94:93:e5:30:68:8d:69:30:46:54:af:67:
         c2:32:46:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----