Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6988df0e-943d-4b39-9efe-14a6bc7ce86d/d57252c6-b6d9-3b7d-9812-15fecda6a9dd.roa
File:                     d57252c6-b6d9-3b7d-9812-15fecda6a9dd.roa (raw, json)
Hash identifier:          +VgxQ/fONjc0vFHZJHHtbNCz+mKJNl4USJ7GAzeEYko=
Subject key identifier:   F8:0F:7C:E9:95:BF:60:95:99:36:4D:C2:D0:55:BD:7F:F9:16:D8:04
Certificate issuer:       /CN=6988df0e-943d-4b39-9efe-14a6bc7ce86d
Certificate serial:       010D0C9F43285842D6AED329B9D3BD6924638540
Authority key identifier: 91:92:80:4F:56:48:B9:1A:5A:0E:FD:F9:75:E2:1B:5C:1A:85:B1:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6988df0e-943d-4b39-9efe-14a6bc7ce86d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6988df0e-943d-4b39-9efe-14a6bc7ce86d/d57252c6-b6d9-3b7d-9812-15fecda6a9dd.roa
Signing time:             Thu 10 Aug 2023 13:00:24 +0000
ROA not before:           Thu 10 Aug 2023 13:00:24 +0000
ROA not after:            Wed 08 Nov 2023 14:00:24 +0000
asID:                     0
IP address blocks:        206.41.108.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:d6:ae:d3:29:b9:d3:bd:69:24:63:85:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6988df0e-943d-4b39-9efe-14a6bc7ce86d
        Validity
            Not Before: Aug 10 13:00:24 2023 GMT
            Not After : Nov  8 14:00:24 2023 GMT
        Subject: CN=79df3b00-4099-44f2-af8d-9a1ab64c614b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:59:0e:d8:2b:12:9f:51:e2:6e:d1:1f:08:b6:
                    bf:f1:c1:1e:44:91:04:b0:69:5f:60:cd:40:2c:c2:
                    65:35:57:c0:c8:78:64:9b:3f:38:65:a5:6f:d9:78:
                    92:88:f8:52:31:d4:41:b1:3e:c3:d3:6b:57:d1:ab:
                    6a:84:ab:ec:01:25:7a:5a:4b:16:7e:3a:fa:a8:9b:
                    9b:22:71:10:01:01:e1:2f:9f:d5:72:5a:21:23:23:
                    01:4e:df:2e:56:f0:ea:d4:95:9d:7e:7a:22:ab:39:
                    75:4d:4b:dc:a9:80:52:03:62:34:a6:c3:60:d6:90:
                    ef:e7:d5:3b:b2:2d:1e:56:79:c1:9e:3b:b2:f5:66:
                    ff:a8:17:1b:f4:56:27:fa:31:26:f2:9c:ae:08:51:
                    d3:e1:9c:d9:56:93:72:86:0a:fc:64:f9:96:8a:20:
                    46:4f:3c:80:23:fb:ce:9b:02:62:c6:ff:f8:67:f4:
                    70:8d:0c:ed:3c:42:ed:fa:6b:07:53:f9:a6:e9:37:
                    47:1c:4b:cc:a3:44:30:a6:0a:41:09:27:6e:4d:f8:
                    cd:71:09:18:c6:8b:85:05:47:1e:64:16:4c:e5:8a:
                    38:8a:bb:f6:e0:87:15:56:a8:d4:22:52:df:f3:8a:
                    31:12:6b:fb:54:0f:a6:6b:0c:79:3e:29:d9:51:2d:
                    dd:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:0F:7C:E9:95:BF:60:95:99:36:4D:C2:D0:55:BD:7F:F9:16:D8:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6988df0e-943d-4b39-9efe-14a6bc7ce86d/d57252c6-b6d9-3b7d-9812-15fecda6a9dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6988df0e-943d-4b39-9efe-14a6bc7ce86d/6988df0e-943d-4b39-9efe-14a6bc7ce86d.crl

            X509v3 Authority Key Identifier:
                keyid:91:92:80:4F:56:48:B9:1A:5A:0E:FD:F9:75:E2:1B:5C:1A:85:B1:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6988df0e-943d-4b39-9efe-14a6bc7ce86d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.41.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:4f:5e:10:83:9f:07:1f:24:46:58:e6:b7:59:d6:d7:3c:cc:
         15:be:ef:c3:ef:71:62:e9:ab:bb:12:22:04:0c:2e:19:12:a2:
         2b:df:54:c2:a3:65:37:12:02:5f:fe:2e:84:3a:0b:6b:7f:54:
         0a:68:bb:4f:d6:75:1a:f5:d7:04:c0:39:b4:91:2d:3b:93:87:
         73:00:d3:00:28:76:69:cd:52:5c:46:9b:72:ef:0b:d2:bc:2f:
         eb:51:1c:19:b6:ce:d4:79:e5:c7:de:81:31:ef:12:38:7c:90:
         3a:db:16:7d:3a:1e:bf:36:6c:3a:29:ce:d8:06:f6:f2:7d:bb:
         12:96:67:08:08:27:1f:41:15:f4:a6:0b:ee:83:9a:22:3d:e8:
         dc:f0:4f:25:4d:d1:06:44:58:b4:63:3c:be:85:4a:5c:b1:f6:
         b8:c4:40:20:ce:85:36:19:fc:59:6a:f1:33:cc:d9:5d:e0:39:
         c5:87:f5:f7:57:0b:b0:fc:39:fb:2e:21:1e:0f:c4:bc:1c:52:
         0a:0f:eb:4b:2e:7e:41:01:ba:dd:08:f0:37:00:a3:a8:99:b5:
         12:c1:c5:41:1d:66:93:0d:d2:1a:48:9f:b0:df:27:b6:06:49:
         8c:65:16:2a:32:93:8b:50:9c:e0:ad:81:08:c1:4d:f6:2f:b6:
         09:ca:ba:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----