Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8e3abafb-0537-359d-8d8b-e2f18b9d66e8.roa
File:                     8e3abafb-0537-359d-8d8b-e2f18b9d66e8.roa (raw, json)
Hash identifier:          XsCjTF6vZVnvMqQ4dJZfvTAkWP/vMYLSGx0JJoQH4Es=
Subject key identifier:   8D:88:DF:58:5F:5A:93:D7:92:A5:ED:69:52:3C:9D:E5:AF:26:A7:B1
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285848E0068AE1DA9ACF2031ED9C80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8e3abafb-0537-359d-8d8b-e2f18b9d66e8.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     33363
IP address blocks:        104.137.88.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:8a:e1:da:9a:cf:20:31:ed:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=45a40d39-f393-4889-8c72-a05965b7b78d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:46:59:44:67:75:46:d8:6a:bc:93:ee:e6:7a:
                    ff:52:46:f8:6a:a3:bb:76:01:83:f6:0f:bd:5b:3a:
                    0a:f5:78:7c:4c:c8:1e:a8:09:55:19:ab:b4:df:17:
                    6b:35:b1:0a:2c:e0:0c:2d:f7:55:f6:f0:a2:a3:cf:
                    7e:53:54:4d:ca:5a:88:f0:f0:9f:1a:b6:a2:22:2f:
                    d4:69:ed:05:e0:c1:05:a4:79:3e:ba:dd:06:f8:2e:
                    9b:7b:58:a1:b9:fc:8f:ac:76:45:5c:f7:6f:f7:90:
                    04:3e:55:f7:1a:26:01:9c:f2:4e:13:aa:52:d4:d4:
                    5c:ec:cc:49:01:ac:36:94:1b:8c:54:4b:56:9c:0f:
                    fd:be:24:b8:2d:21:54:9a:9e:9c:be:f0:85:4e:e5:
                    93:50:a9:63:cf:3d:fd:ec:3a:c1:37:c0:ab:f2:14:
                    cc:b2:59:fb:93:c8:37:59:8e:76:43:f7:75:74:c2:
                    5e:0a:8c:a2:2f:01:95:8c:79:78:2d:5c:85:81:9a:
                    c5:66:8d:47:8b:44:ae:50:17:a4:7d:e1:ad:ec:cd:
                    25:d8:d5:fe:b5:f9:58:6f:8d:9e:92:b7:a1:40:42:
                    a5:31:3c:64:fc:27:3b:07:b7:c2:68:11:7d:71:4f:
                    29:12:ee:4c:52:a2:70:73:de:a4:4a:a8:fe:85:86:
                    57:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:88:DF:58:5F:5A:93:D7:92:A5:ED:69:52:3C:9D:E5:AF:26:A7:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8e3abafb-0537-359d-8d8b-e2f18b9d66e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.137.88.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:11:c0:42:e7:03:54:a5:d2:49:bf:a2:c3:78:83:de:26:9e:
         3d:a9:92:32:f6:fa:94:ae:9f:bd:28:e3:22:1c:f5:fb:43:9f:
         be:89:10:e8:7e:7b:78:e2:44:14:bc:78:dc:aa:2f:54:50:24:
         96:5c:8e:6c:aa:79:e0:75:6a:fc:ae:9b:81:82:b9:55:16:4e:
         a4:cb:c9:0b:f6:36:54:38:35:4e:37:c3:f3:ca:8b:fc:6b:db:
         2c:74:50:47:f3:57:d6:b6:c9:da:dc:91:05:4c:3b:f7:63:30:
         f7:ff:31:6d:83:27:18:05:36:15:38:54:ec:6c:39:00:21:08:
         23:eb:fb:3e:53:97:15:62:8c:0d:30:df:ce:82:8f:9d:c3:0a:
         1f:1c:1b:42:8c:02:97:60:46:27:79:35:a5:88:57:34:72:63:
         34:2f:c8:8a:37:df:62:58:a9:71:ba:16:3d:ce:eb:94:8f:36:
         e4:9d:49:e6:dc:6a:b1:97:af:10:21:44:f1:ea:ab:50:79:c9:
         22:0a:89:d0:ef:b1:81:1f:10:89:32:b0:32:c7:32:c2:76:7f:
         f5:69:bf:b9:83:32:1b:24:83:d2:ad:db:bd:eb:bf:a6:e7:bd:
         28:3c:ba:5b:a1:49:9c:64:cc:ae:50:d9:7d:6a:4f:e0:c4:e9:
         26:a8:d4:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----