Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cbb9348f-0e74-4fb3-9ea9-84626962cb22/dca32146-dfdc-3078-86b5-f295935cc6e9.roa
File:                     dca32146-dfdc-3078-86b5-f295935cc6e9.roa (raw, json)
Hash identifier:          r5SucE8tKpH1WDjGT7LNigD7gcCixsDa1iZthOs2OUQ=
Subject key identifier:   AE:DE:90:9E:B4:68:77:3E:28:C3:BD:2C:3A:D2:DE:9A:5F:20:41:C6
Certificate issuer:       /CN=cbb9348f-0e74-4fb3-9ea9-84626962cb22
Certificate serial:       010D0C9F4328584902EC0FBD80861F6654451C80
Authority key identifier: 44:2F:BF:B1:80:1F:E6:EB:A4:8F:A7:37:42:BA:68:31:1F:3B:47:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cbb9348f-0e74-4fb3-9ea9-84626962cb22.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cbb9348f-0e74-4fb3-9ea9-84626962cb22/dca32146-dfdc-3078-86b5-f295935cc6e9.roa
Signing time:             Wed 26 Feb 2025 14:00:51 +0000
ROA not before:           Wed 26 Feb 2025 14:00:51 +0000
ROA not after:            Tue 27 May 2025 13:00:51 +0000
asID:                     53763
IP address blocks:        23.164.232.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:02:ec:0f:bd:80:86:1f:66:54:45:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbb9348f-0e74-4fb3-9ea9-84626962cb22
        Validity
            Not Before: Feb 26 14:00:51 2025 GMT
            Not After : May 27 13:00:51 2025 GMT
        Subject: CN=99466eb3-1b69-441a-9112-708e33cfca72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b7:3c:44:3d:99:6e:d1:47:5b:37:4e:8d:d5:
                    c7:50:35:6c:79:cd:9b:28:b7:ee:42:87:f2:d9:43:
                    b5:92:db:b6:7d:e7:d7:fa:b3:f6:83:b4:f0:2b:b0:
                    3c:26:d2:d3:67:e9:b1:7a:97:55:68:cf:40:31:30:
                    da:d6:0c:28:7d:b1:4c:01:66:9e:05:05:04:b9:cd:
                    d7:6b:34:95:1a:dc:a4:47:33:c8:8c:da:48:34:a3:
                    d6:39:1a:4a:b0:d9:36:c5:fe:1e:64:16:7e:9b:a2:
                    b4:33:b5:51:48:ea:8b:09:b4:3f:0e:d1:67:16:5a:
                    d9:b3:8b:ed:fe:18:0c:4f:c7:9c:a8:76:5d:65:1b:
                    6e:ef:42:db:65:b0:49:6c:fa:77:0a:de:cd:30:0f:
                    ab:ab:1d:e8:76:59:15:83:19:70:a4:c5:6d:73:25:
                    74:f9:74:41:ef:d3:1b:24:f1:50:da:3e:a6:41:2d:
                    f0:5c:64:73:b7:f7:37:7f:08:dd:78:34:a6:b1:58:
                    78:13:c3:6f:0d:96:db:20:7f:75:1a:a9:4e:1a:0d:
                    03:46:93:fa:dc:6f:6f:7c:6a:f8:85:6e:77:f5:67:
                    85:4e:73:73:0d:51:38:79:ad:27:0b:8e:d3:27:80:
                    3d:c2:64:f7:ec:99:ca:99:83:c1:5e:04:cc:5f:a3:
                    be:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:DE:90:9E:B4:68:77:3E:28:C3:BD:2C:3A:D2:DE:9A:5F:20:41:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cbb9348f-0e74-4fb3-9ea9-84626962cb22/dca32146-dfdc-3078-86b5-f295935cc6e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cbb9348f-0e74-4fb3-9ea9-84626962cb22/cbb9348f-0e74-4fb3-9ea9-84626962cb22.crl

            X509v3 Authority Key Identifier:
                keyid:44:2F:BF:B1:80:1F:E6:EB:A4:8F:A7:37:42:BA:68:31:1F:3B:47:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cbb9348f-0e74-4fb3-9ea9-84626962cb22.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.164.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:89:6c:36:3a:b8:54:ad:3f:7f:21:d6:3c:1d:8b:d3:66:e3:
         f3:ba:91:f0:1f:c3:a1:6d:dc:7e:a5:b5:75:c9:42:6a:d8:36:
         05:f3:99:97:8f:47:8f:d6:5c:f8:63:17:1e:64:a3:4b:f0:af:
         0f:34:18:6b:38:74:29:81:de:af:20:e6:8e:1d:6e:a8:67:b4:
         33:2e:41:a3:ea:0c:e7:b1:2f:b9:90:25:01:24:85:c6:60:1e:
         62:fb:4f:61:b1:a7:82:19:ba:d7:9d:c1:e5:0c:b6:b0:95:60:
         7b:a8:0a:5c:b6:04:ee:49:dc:49:f7:35:d4:ab:8a:cd:db:dc:
         de:6c:c5:75:6d:bc:b8:2d:fa:eb:79:66:34:28:ed:41:36:40:
         3a:98:84:f7:dd:de:16:03:96:c2:64:a0:6e:ee:31:9a:92:a8:
         de:7d:a5:cc:d6:eb:c9:0e:9b:3b:1f:37:f5:02:b1:f6:58:59:
         1d:bc:70:cc:d1:d4:10:13:cd:80:2b:ad:54:39:70:9d:4d:59:
         6f:c0:90:d8:41:6a:f9:fc:49:4a:1f:24:64:aa:ea:eb:86:65:
         c7:20:f8:f1:35:cf:27:02:44:0b:f7:8b:60:ff:93:bb:a2:b5:
         1a:cf:c8:76:23:f6:c2:f6:5f:91:ba:05:24:7b:f3:da:cc:39:
         af:5a:ce:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----