Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a14cf30-3ffd-4bde-ae67-7cf4e360ad1f/9bb7624d-5641-3e7a-90ff-5c3d42746a7f.roa
File:                     9bb7624d-5641-3e7a-90ff-5c3d42746a7f.roa (raw, json)
Hash identifier:          USEMMDZ1LSNi52F6NA6+edzDAZmcoAA/sKF12KrTk30=
Subject key identifier:   DB:6F:40:E7:ED:BB:01:BD:1E:91:59:AD:BD:49:09:8E:11:14:B9:AF
Certificate issuer:       /CN=7a14cf30-3ffd-4bde-ae67-7cf4e360ad1f
Certificate serial:       010D0C9F43285848AC60D5DCF8956806D87BC880
Authority key identifier: FA:37:7E:30:C4:98:61:DA:07:EE:89:10:AD:D1:05:C7:89:CF:E7:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a14cf30-3ffd-4bde-ae67-7cf4e360ad1f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a14cf30-3ffd-4bde-ae67-7cf4e360ad1f/9bb7624d-5641-3e7a-90ff-5c3d42746a7f.roa
Signing time:             Sun 26 Jan 2025 14:00:52 +0000
ROA not before:           Sun 26 Jan 2025 14:00:52 +0000
ROA not after:            Sat 26 Apr 2025 13:00:52 +0000
asID:                     20091
IP address blocks:        23.132.64.0/24 maxlen: 24
                          2604:6c0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ac:60:d5:dc:f8:95:68:06:d8:7b:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a14cf30-3ffd-4bde-ae67-7cf4e360ad1f
        Validity
            Not Before: Jan 26 14:00:52 2025 GMT
            Not After : Apr 26 13:00:52 2025 GMT
        Subject: CN=6016f559-bce5-4165-95ee-3eb71b7adee8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:0f:f2:27:3c:7b:7e:20:ea:40:8b:53:ae:ab:
                    93:c3:f8:c4:3b:22:b4:28:19:12:7f:aa:72:88:c3:
                    3e:55:07:65:9f:b2:3d:8b:f1:13:f5:97:90:5d:95:
                    81:0a:a8:19:44:db:44:d5:d1:d6:3e:f6:91:4c:05:
                    38:ae:64:73:75:0c:41:3b:f7:63:76:03:38:da:f8:
                    6c:79:a0:bc:61:c4:c5:e8:38:cc:19:16:e4:15:c5:
                    c5:35:d3:43:1d:64:0e:2d:73:97:06:93:97:0c:4f:
                    36:d4:ea:57:e7:08:ee:a7:f9:fa:e3:bc:db:3a:ba:
                    60:8d:82:fe:fa:3b:df:14:c0:4d:eb:ea:1f:ad:7c:
                    e4:54:a5:0b:4e:c3:23:28:97:b2:33:13:e8:13:c6:
                    2e:0a:22:7e:f4:68:95:b4:50:b8:8a:b6:b3:d8:5e:
                    53:bf:4c:97:1e:07:73:a7:a0:ff:74:fe:e0:e1:a5:
                    6b:d1:81:58:10:6f:d0:27:05:0f:14:d7:2d:16:e1:
                    74:ce:e3:09:70:10:22:94:f1:70:bb:ff:c8:4d:38:
                    df:c6:93:02:c7:14:1e:9b:91:a3:a9:33:43:42:6e:
                    84:57:d7:50:db:1a:bc:46:fb:3f:cb:9f:c9:38:56:
                    56:c0:32:7c:68:a5:bd:cf:13:d0:1d:b0:59:e0:76:
                    46:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:6F:40:E7:ED:BB:01:BD:1E:91:59:AD:BD:49:09:8E:11:14:B9:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a14cf30-3ffd-4bde-ae67-7cf4e360ad1f/9bb7624d-5641-3e7a-90ff-5c3d42746a7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a14cf30-3ffd-4bde-ae67-7cf4e360ad1f/7a14cf30-3ffd-4bde-ae67-7cf4e360ad1f.crl

            X509v3 Authority Key Identifier:
                keyid:FA:37:7E:30:C4:98:61:DA:07:EE:89:10:AD:D1:05:C7:89:CF:E7:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a14cf30-3ffd-4bde-ae67-7cf4e360ad1f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.132.64.0/24
                IPv6:
                  2604:6c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:d7:2a:af:68:2a:31:73:ec:7a:2d:69:f5:62:89:c6:e1:27:
         99:0c:4e:b1:07:76:0c:ee:e9:9b:85:40:37:d0:24:e5:c1:77:
         98:48:36:21:f6:a5:ab:40:a0:e9:ce:a8:8d:c3:47:5a:7c:bc:
         09:bd:1f:88:ae:0b:70:97:9a:ce:e2:95:2a:8e:56:60:8a:4a:
         84:72:69:52:b3:55:cd:66:98:19:87:20:4a:aa:0c:52:46:80:
         07:c1:ce:40:7d:84:0a:94:5c:23:52:83:9c:36:d2:93:f9:76:
         2d:df:83:2f:73:63:3b:2d:f7:18:83:96:24:83:8f:05:2f:db:
         28:32:c5:c0:4e:d5:e2:91:7a:f9:56:45:0c:55:59:7c:3b:54:
         56:00:62:be:d9:0a:23:95:63:e2:4a:7f:5e:b0:cb:b5:99:c3:
         02:cb:78:9a:92:e1:c0:79:3b:6c:6a:99:80:af:2c:c9:af:a4:
         23:15:5b:a3:52:13:81:89:66:e1:27:94:a5:80:e6:ee:7f:2e:
         93:57:8a:bd:b6:6f:9a:69:59:e3:e9:77:51:c0:56:68:fc:a2:
         e0:df:76:4b:f5:f7:bd:19:d6:71:dc:9c:f1:1f:d6:65:c2:e8:
         e9:81:91:27:af:55:6d:9f:3d:96:ae:f8:d0:22:8f:56:fa:75:
         f3:72:e3:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----