Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/76dd9975-746a-344b-b81a-674850bce36f.roa
File:                     76dd9975-746a-344b-b81a-674850bce36f.roa (raw, json)
Hash identifier:          Vx3hH/b1aMWNGQU8mArB4/TbJJC0itfcSh+vyE2cErU=
Subject key identifier:   8C:F0:A6:BE:43:6C:BC:F0:C8:49:7F:3B:5E:0E:5E:67:0E:D9:15:C1
Certificate issuer:       /CN=45d9fc7a-f366-485f-a2c8-58c4b470361a
Certificate serial:       010D0C9F432858493ED3D4956021417D10029D00
Authority key identifier: 96:12:B0:E7:AD:D9:71:F2:E5:1F:50:56:E7:7A:70:25:0D:98:B7:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/76dd9975-746a-344b-b81a-674850bce36f.roa
Signing time:             Thu 20 Mar 2025 01:00:39 +0000
ROA not before:           Thu 20 Mar 2025 01:00:39 +0000
ROA not after:            Wed 18 Jun 2025 01:00:39 +0000
asID:                     398900
IP address blocks:        23.134.232.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3e:d3:d4:95:60:21:41:7d:10:02:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45d9fc7a-f366-485f-a2c8-58c4b470361a
        Validity
            Not Before: Mar 20 01:00:39 2025 GMT
            Not After : Jun 18 01:00:39 2025 GMT
        Subject: CN=13bf86eb-06cd-4782-b03e-2440b029ed36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:41:a5:22:91:af:78:25:92:7b:12:c7:eb:c8:
                    04:6c:f7:76:07:e5:41:99:3e:d2:4e:96:d5:ac:83:
                    1f:25:bf:2a:87:f2:ed:53:1c:4e:8a:c0:d0:4a:0a:
                    ae:c1:d4:df:0f:a6:49:eb:b7:81:eb:ec:f7:87:b7:
                    e8:81:2d:d7:8d:4c:71:9d:2e:ac:00:81:47:2d:52:
                    0f:e1:27:0e:a9:6f:5f:fd:c7:43:16:63:c3:e5:20:
                    cb:4f:99:44:64:28:73:a9:fc:7b:01:dd:38:14:19:
                    53:74:f8:fc:bd:45:19:5d:5e:af:ef:44:3d:f8:c3:
                    e2:d9:b4:bc:b6:3d:44:ed:f1:e4:0b:7f:90:c8:0f:
                    ca:af:01:96:f2:86:f6:72:b6:d7:23:bf:b1:94:f2:
                    33:51:e4:68:55:bf:c0:b5:76:36:cd:a7:80:52:ea:
                    17:2c:db:b1:d6:fd:ea:7b:1c:79:d2:e1:d3:4d:f2:
                    b1:34:a9:5b:3d:63:23:30:7e:aa:0d:c4:3e:c7:05:
                    85:55:57:f8:17:de:d9:f4:a5:5b:8f:8f:28:17:6b:
                    86:e5:60:91:ad:01:32:f5:8f:18:82:04:89:25:08:
                    00:a6:de:ab:48:c4:86:42:63:fb:e3:8c:61:8e:c8:
                    f8:0b:26:fd:cd:b5:e6:93:20:a9:3a:21:8d:8c:90:
                    2f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:F0:A6:BE:43:6C:BC:F0:C8:49:7F:3B:5E:0E:5E:67:0E:D9:15:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/76dd9975-746a-344b-b81a-674850bce36f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/45d9fc7a-f366-485f-a2c8-58c4b470361a.crl

            X509v3 Authority Key Identifier:
                keyid:96:12:B0:E7:AD:D9:71:F2:E5:1F:50:56:E7:7A:70:25:0D:98:B7:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:fb:c7:fa:67:6c:72:fa:e7:3f:bb:67:04:66:9c:ab:59:fa:
         94:b4:c8:d9:58:4b:c5:d2:8d:1b:f4:69:1b:ae:77:ad:c2:a7:
         1c:eb:f3:eb:f6:2f:e6:66:4a:30:c5:a4:c6:3f:0b:10:11:49:
         c2:d9:12:7d:b5:11:60:60:52:95:ff:20:c0:d4:48:06:55:0d:
         92:b0:98:61:2c:78:0b:68:d1:30:1c:c6:48:fb:ad:92:11:c1:
         c8:b4:20:3b:ee:d2:6f:2c:00:33:31:d3:2f:b8:51:98:73:52:
         67:98:bb:dc:95:89:a1:0d:68:f8:35:bd:f0:9a:f0:97:9c:1c:
         ec:e1:f8:7d:31:c1:9d:6d:be:a1:30:c1:48:30:3d:c7:7c:62:
         9d:5c:00:d0:7e:7c:ed:f7:83:d4:39:a5:d0:24:63:4a:05:9b:
         ef:bc:54:d3:d1:f0:b1:42:7b:d6:54:4f:70:bf:e2:19:7e:7d:
         c0:d7:84:e2:29:eb:4c:c5:26:32:75:7d:fd:3f:84:a4:48:e9:
         e2:b1:05:64:02:29:32:a0:f0:79:40:ed:99:e6:00:ae:bb:d0:
         7f:e3:e7:22:ec:15:90:60:2b:99:8f:7b:78:bb:7d:7f:f5:83:
         d9:1b:f4:7c:0b:fe:c2:a5:11:0d:f4:87:67:22:b5:67:7c:20:
         a3:d7:0a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----