Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99e1d141-14b6-4f80-9f3f-dee27509d144/35ce904c-3c66-3a2a-81f2-ed31bf4c764e.roa
File:                     35ce904c-3c66-3a2a-81f2-ed31bf4c764e.roa (raw, json)
Hash identifier:          0NhfOp052a1X6A09UsgqNlnDanmMy45qqCNyq9fg4Q8=
Subject key identifier:   A6:28:2E:A0:0F:07:5C:9A:17:A1:9C:F0:F3:2F:88:78:26:44:6A:0C
Certificate issuer:       /CN=99e1d141-14b6-4f80-9f3f-dee27509d144
Certificate serial:       010D0C9F43285845DA98F546C2F7CBA11A5B5040
Authority key identifier: BD:2D:93:B2:25:24:A4:46:22:6F:BD:5A:28:F3:59:42:88:0F:49:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99e1d141-14b6-4f80-9f3f-dee27509d144.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99e1d141-14b6-4f80-9f3f-dee27509d144/35ce904c-3c66-3a2a-81f2-ed31bf4c764e.roa
Signing time:             Mon 13 May 2024 01:00:25 +0000
ROA not before:           Mon 13 May 2024 01:00:25 +0000
ROA not after:            Sun 11 Aug 2024 01:00:25 +0000
asID:                     16509
IP address blocks:        69.64.148.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:da:98:f5:46:c2:f7:cb:a1:1a:5b:50:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99e1d141-14b6-4f80-9f3f-dee27509d144
        Validity
            Not Before: May 13 01:00:25 2024 GMT
            Not After : Aug 11 01:00:25 2024 GMT
        Subject: CN=c742f67f-cf28-4a9f-b808-5265db3ebfc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d2:c3:9d:a9:5b:65:1b:68:60:06:85:69:06:
                    84:e5:16:cf:d8:60:4d:b1:a9:55:dc:df:9b:00:6e:
                    88:a8:9b:84:50:6a:4d:3a:d0:d0:93:0d:43:9b:f2:
                    87:c6:26:87:eb:fe:61:35:75:32:02:4f:c6:df:7a:
                    a9:97:b4:86:97:e9:88:c0:84:9f:c4:f6:a4:75:99:
                    e4:48:ef:2d:02:6f:54:51:d3:55:0e:3b:64:9f:4a:
                    5a:8e:e2:66:7d:a1:e7:41:86:43:14:de:6c:e3:17:
                    fe:90:1c:7d:4e:fe:3c:f3:79:31:43:61:44:24:bb:
                    a3:61:4a:88:68:c6:a1:15:3a:3a:f8:cb:05:88:3d:
                    28:06:56:1d:2b:1e:fd:7f:f9:7d:89:41:aa:aa:97:
                    e3:3f:14:0f:85:e4:45:49:eb:0d:5d:52:b4:53:02:
                    5a:6f:7f:65:79:71:d7:64:bc:95:0c:a1:75:00:9e:
                    92:67:fd:74:4a:04:47:3d:7f:c5:68:b4:d1:d2:c8:
                    63:59:2f:16:e7:c2:0c:62:59:27:5a:d4:7a:3b:59:
                    c8:fe:42:77:c1:01:fb:3c:c2:20:a7:fb:be:38:26:
                    75:da:6d:ce:75:19:2d:c5:8c:9d:e4:ef:6f:f3:8b:
                    8f:3e:5f:60:b5:37:40:6c:d0:4f:23:79:b3:a9:cd:
                    38:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:28:2E:A0:0F:07:5C:9A:17:A1:9C:F0:F3:2F:88:78:26:44:6A:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99e1d141-14b6-4f80-9f3f-dee27509d144/35ce904c-3c66-3a2a-81f2-ed31bf4c764e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99e1d141-14b6-4f80-9f3f-dee27509d144/99e1d141-14b6-4f80-9f3f-dee27509d144.crl

            X509v3 Authority Key Identifier:
                keyid:BD:2D:93:B2:25:24:A4:46:22:6F:BD:5A:28:F3:59:42:88:0F:49:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99e1d141-14b6-4f80-9f3f-dee27509d144.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.64.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:63:60:cc:07:10:d3:3c:7c:00:25:57:f0:e1:6e:58:db:fc:
         9b:4e:ba:aa:ef:bc:6a:fb:7d:c7:b6:25:dd:86:cb:18:48:ac:
         94:02:95:9f:4f:41:c2:9c:22:78:48:38:ed:1c:5f:3b:d4:73:
         9f:9c:ad:10:44:c3:3c:d6:f9:60:2c:ec:b3:36:0f:76:ea:f2:
         09:7c:69:31:f9:1b:9b:8e:4e:26:78:32:a5:73:35:02:a6:89:
         c0:8c:3a:5f:af:1f:9f:e9:5c:5a:2e:48:80:00:42:6d:35:51:
         3e:2a:80:4c:3d:bf:17:b7:23:56:4a:f7:4c:cd:5d:26:60:67:
         62:80:f1:38:76:03:f2:26:69:ef:e7:3f:7e:e6:9f:49:dc:cb:
         77:af:86:36:b6:40:53:e5:22:20:7e:22:ed:a7:94:92:ee:1b:
         52:6e:65:fb:07:b5:7d:c8:6f:2e:74:a7:67:cd:62:d0:7f:f5:
         4c:bb:ba:71:7b:4f:34:53:21:8d:d7:c5:7f:67:fb:4b:9e:38:
         7b:ea:6e:66:15:96:9a:b0:ce:f0:93:01:48:27:75:1e:8e:1b:
         88:67:dc:88:d0:a0:01:b4:e2:08:97:a9:d1:b5:d1:b9:f8:94:
         b6:39:c6:f9:83:00:07:bb:b5:68:20:37:1d:5d:59:92:40:d8:
         d9:45:38:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----