Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/bfb9d0b6-2b39-3db3-b2d9-d6b802bbb5f7.roa
File:                     bfb9d0b6-2b39-3db3-b2d9-d6b802bbb5f7.roa (raw, json)
Hash identifier:          R7fISIedb6JyMF5PzKNCEDroDDVVKr9fdrHjDMKzwMs=
Subject key identifier:   D7:74:04:DD:02:04:99:C4:4C:2F:22:C5:00:9A:F2:95:2B:46:A5:E0
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F432858493243D5B8447EB115E6D3E780
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/bfb9d0b6-2b39-3db3-b2d9-d6b802bbb5f7.roa
Signing time:             Sat 15 Mar 2025 13:00:52 +0000
ROA not before:           Sat 15 Mar 2025 13:00:52 +0000
ROA not after:            Fri 13 Jun 2025 13:00:52 +0000
asID:                     398478
IP address blocks:        107.148.8.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:32:43:d5:b8:44:7e:b1:15:e6:d3:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Mar 15 13:00:52 2025 GMT
            Not After : Jun 13 13:00:52 2025 GMT
        Subject: CN=0866af97-4007-4a8b-a216-2479ce0fa501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a6:47:5d:a6:ea:89:2e:ca:2b:6b:4b:04:11:
                    49:d7:28:72:52:96:69:f6:14:a8:d5:cc:1f:58:eb:
                    68:56:fd:ca:13:70:b0:8c:a3:7e:63:f2:5a:ae:ff:
                    62:96:59:7f:bd:10:d5:af:0e:f5:00:0d:fe:d0:57:
                    c2:2d:9b:87:43:f6:23:f4:91:5e:4e:fd:8e:8c:9e:
                    52:96:02:d1:23:d1:1c:7c:4f:6d:ad:4f:7b:b7:d0:
                    94:2c:b7:b3:57:bf:b4:cb:ac:fb:18:61:3f:4b:94:
                    12:8f:fb:b3:6b:3b:c8:57:0e:80:18:9c:24:8f:a2:
                    f8:4f:41:e4:9e:74:72:52:23:a0:d2:32:1d:7a:8e:
                    67:d2:da:91:12:0a:6b:07:15:27:bb:96:21:47:61:
                    02:33:a7:10:68:6e:37:4b:d2:42:c7:72:05:33:85:
                    e5:b8:9e:3e:75:49:87:da:fa:d5:0c:d3:d9:79:c0:
                    e4:ac:3f:57:ea:28:00:e7:48:62:b8:b8:fc:dd:a6:
                    80:7c:7f:1d:11:cc:39:c5:da:93:69:6c:5e:8c:6f:
                    ca:b8:5f:de:76:45:24:17:ce:91:37:3e:51:9d:0a:
                    c8:c2:7e:84:32:e4:bf:59:9a:e4:62:fe:51:51:45:
                    d4:d1:d6:01:e8:1d:37:0b:ea:ef:0b:b1:9a:95:0d:
                    de:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:74:04:DD:02:04:99:C4:4C:2F:22:C5:00:9A:F2:95:2B:46:A5:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/bfb9d0b6-2b39-3db3-b2d9-d6b802bbb5f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.148.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:b7:23:b3:46:88:fa:e6:0d:f6:60:70:c0:1c:7e:24:be:1b:
         85:82:62:12:13:69:b0:90:4f:ba:4e:93:ae:d8:48:72:9e:da:
         fc:d9:48:9b:25:14:b3:00:96:04:08:a9:c8:03:b7:8a:b1:ca:
         af:5e:18:fc:9c:3a:f4:bb:ac:05:1f:c8:1a:1e:8f:c4:47:ba:
         83:e2:3b:03:39:15:54:7f:0c:60:18:5b:09:b2:8e:df:3f:f6:
         6e:95:de:ae:f9:d0:c0:44:ad:34:47:5b:81:bd:85:dc:7a:2d:
         7b:bd:b3:8e:5b:c0:fb:d5:c1:7d:d3:34:86:df:d6:1f:c3:af:
         d9:ea:ba:8b:3a:69:72:cb:04:b3:a4:01:aa:95:79:47:14:a4:
         69:eb:07:4c:e4:10:9b:6d:ed:40:d5:0c:d3:82:ca:d4:19:1c:
         a6:55:f9:f6:f8:39:a7:f9:cc:f5:da:ef:99:6f:f9:3f:ad:15:
         7b:4e:41:cd:30:dc:cb:6a:10:9b:59:43:7d:09:83:20:60:9b:
         41:87:f2:4a:80:66:54:35:5a:93:d6:c5:7a:40:85:58:fe:d0:
         49:62:07:08:6b:3b:ea:68:3b:16:69:bb:17:b1:a9:24:0e:5a:
         3c:3a:aa:ab:ba:3b:5f:ae:cb:99:d2:b7:55:fe:d3:3f:10:16:
         b5:a4:a7:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----