Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/01d87b93-f8a0-3de8-b5c6-6febae5c2ad7.roa
File:                     01d87b93-f8a0-3de8-b5c6-6febae5c2ad7.roa (raw, json)
Hash identifier:          mB/dyVmZzb0ToPmUo/HVmZs2qdsSdeE4XR0R1exqhrU=
Subject key identifier:   DB:49:C9:10:F5:2B:E1:98:7E:BE:BA:07:81:FD:92:58:76:FA:DE:65
Certificate issuer:       /CN=aa033953-9752-479d-b9ee-4213cf648479
Certificate serial:       010D0C9F4328584929E3C731CDAE618A1ED3CFD8
Authority key identifier: 84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/01d87b93-f8a0-3de8-b5c6-6febae5c2ad7.roa
Signing time:             Wed 12 Mar 2025 13:00:53 +0000
ROA not before:           Wed 12 Mar 2025 13:00:53 +0000
ROA not after:            Tue 10 Jun 2025 13:00:53 +0000
asID:                     22066
IP address blocks:        205.213.166.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:29:e3:c7:31:cd:ae:61:8a:1e:d3:cf:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa033953-9752-479d-b9ee-4213cf648479
        Validity
            Not Before: Mar 12 13:00:53 2025 GMT
            Not After : Jun 10 13:00:53 2025 GMT
        Subject: CN=b7a6cfcb-9806-437a-90c1-46098b8706ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:79:31:e2:5c:8a:66:19:b5:6f:34:e6:44:23:
                    58:f9:79:98:08:c3:eb:e9:4e:2b:07:6f:e9:cd:4e:
                    aa:0b:a9:34:50:d0:ee:84:16:ec:a1:04:ce:a0:d2:
                    c0:45:e5:b3:85:24:43:05:cf:f9:e8:43:90:e7:4e:
                    07:26:f7:60:d2:17:a9:86:cf:1a:8b:ff:42:2e:73:
                    3a:95:a7:24:4e:3d:c2:fd:2a:d8:5d:c2:2e:8c:20:
                    fb:e9:ce:b9:86:db:c9:86:1f:e2:fe:e0:8b:d7:3f:
                    9c:bf:3b:c7:42:00:6f:74:15:bd:9f:e4:db:16:cd:
                    8d:d6:e7:24:0a:05:04:a7:32:30:50:7e:82:a1:c3:
                    ab:d7:8e:66:6f:fc:28:30:db:df:e7:ee:4d:9b:ee:
                    f6:b6:0c:e7:17:4e:b5:a4:cd:56:71:a0:52:47:6c:
                    b2:40:42:0f:ce:5d:c2:72:3f:b3:e9:67:8e:cb:e9:
                    a1:bf:2c:b3:3b:e7:e7:db:0a:9c:15:39:bc:42:d2:
                    e7:a2:bd:fd:73:04:b2:76:24:1f:dd:68:bb:e9:20:
                    ca:5e:8d:c5:0c:4b:ee:d6:63:85:92:53:70:b6:57:
                    f4:68:ad:74:7e:f6:c8:cd:d7:96:1f:49:95:23:47:
                    f9:41:93:01:14:e7:c2:15:db:5d:b8:c9:40:73:a3:
                    f7:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:49:C9:10:F5:2B:E1:98:7E:BE:BA:07:81:FD:92:58:76:FA:DE:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/01d87b93-f8a0-3de8-b5c6-6febae5c2ad7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl

            X509v3 Authority Key Identifier:
                keyid:84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.213.166.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:bc:a9:0b:75:28:ee:e5:33:ff:b8:2f:7d:3c:51:fd:03:c7:
         51:75:64:df:3a:82:c9:f5:a6:0c:ed:97:fd:3c:3d:e7:13:54:
         38:7f:d9:95:72:67:32:8d:59:63:c3:e6:39:57:1f:c2:cc:11:
         5d:51:9f:9a:8f:ae:ee:b5:ed:12:88:c4:9b:eb:b0:5b:a8:42:
         8c:ed:a4:54:1c:53:82:ff:7e:8e:b3:dc:43:02:1b:64:ff:39:
         d7:3b:1b:b0:58:74:d3:50:cb:6d:22:e9:c3:51:9e:cd:a4:46:
         d0:ab:c5:7d:be:d4:29:a3:90:c8:9f:01:e6:43:99:aa:cd:83:
         bf:b4:34:3a:17:70:fc:b1:5d:6c:78:84:0f:9a:2a:4d:26:4e:
         28:c2:a8:c7:64:2f:76:8f:02:9a:a4:11:7e:fd:f0:fd:48:c9:
         f1:a6:c2:b7:a8:a5:fa:cc:08:1e:0a:01:87:d7:c5:8d:16:2d:
         b3:5a:b7:71:d1:06:4f:20:55:1d:67:89:0c:c6:65:44:0b:96:
         72:ba:e6:7a:05:ce:e0:ca:d0:02:3c:98:ac:35:ec:ef:b8:d4:
         5d:81:a0:07:06:21:1c:d0:05:1f:e6:f0:be:1a:00:6d:aa:3f:
         df:c4:12:74:41:e2:1f:a3:2c:58:41:2c:49:61:5e:56:57:b2:
         d3:02:8b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----