Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99e1d141-14b6-4f80-9f3f-dee27509d144/bec2b2c5-ebf6-3b91-980c-ff2232d54f8b.roa
File:                     bec2b2c5-ebf6-3b91-980c-ff2232d54f8b.roa (raw, json)
Hash identifier:          QhbYNJ7jlN4kxYyakkGgqE0hVzJnEteI/lDuUJtsrfE=
Subject key identifier:   B3:5C:48:5B:77:62:CD:FA:FE:CB:C1:CB:CF:59:06:51:96:F9:7D:6A
Certificate issuer:       /CN=99e1d141-14b6-4f80-9f3f-dee27509d144
Certificate serial:       010D0C9F43285845DA98F50E6903C1CADB961580
Authority key identifier: BD:2D:93:B2:25:24:A4:46:22:6F:BD:5A:28:F3:59:42:88:0F:49:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99e1d141-14b6-4f80-9f3f-dee27509d144.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99e1d141-14b6-4f80-9f3f-dee27509d144/bec2b2c5-ebf6-3b91-980c-ff2232d54f8b.roa
Signing time:             Mon 13 May 2024 01:00:25 +0000
ROA not before:           Mon 13 May 2024 01:00:25 +0000
ROA not after:            Sun 11 Aug 2024 01:00:25 +0000
asID:                     16509
IP address blocks:        69.64.149.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:da:98:f5:0e:69:03:c1:ca:db:96:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99e1d141-14b6-4f80-9f3f-dee27509d144
        Validity
            Not Before: May 13 01:00:25 2024 GMT
            Not After : Aug 11 01:00:25 2024 GMT
        Subject: CN=e5cbbeec-c3f5-425b-81fb-fbee829b3c3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:04:12:f5:b2:69:fd:7f:b9:cc:a8:19:63:75:
                    3d:ca:c1:81:0d:52:04:e8:d9:85:05:f6:07:94:d9:
                    db:3a:7f:b2:4d:f3:9d:84:42:57:72:f3:a6:de:07:
                    73:9c:f1:b7:f5:32:77:15:5e:c4:a8:1e:2c:ba:00:
                    ee:3a:61:a0:2d:5f:74:77:ee:fe:b7:8d:9d:f0:79:
                    5e:7d:fe:4f:3c:e0:66:1a:db:c3:ea:1f:b7:0f:c5:
                    a2:9a:5a:07:1a:1e:19:90:e6:6f:a4:4f:79:e4:21:
                    08:a0:8d:84:eb:11:55:6c:3b:cc:80:f2:73:d1:f6:
                    53:b1:36:aa:f4:35:1f:df:8f:5a:cd:94:be:5a:eb:
                    f5:70:03:20:76:73:cc:68:bc:d4:6b:44:eb:c1:fa:
                    01:a2:7c:bf:d6:bb:b7:91:1c:63:f9:67:ea:cd:42:
                    17:d2:6e:dd:46:58:44:11:80:90:49:00:d2:0d:c4:
                    b6:ed:cb:88:c0:6d:38:40:91:75:27:4e:85:1e:27:
                    95:05:88:37:d7:ba:b8:95:f6:ab:8d:64:c3:0f:b8:
                    4e:92:1b:7a:d6:b7:b6:ce:21:80:c4:a6:eb:37:36:
                    6f:9d:12:8e:93:ce:a6:4f:1b:e4:32:32:11:67:74:
                    3b:1f:60:92:f9:17:27:f1:68:bc:90:3f:00:85:33:
                    32:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:5C:48:5B:77:62:CD:FA:FE:CB:C1:CB:CF:59:06:51:96:F9:7D:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99e1d141-14b6-4f80-9f3f-dee27509d144/bec2b2c5-ebf6-3b91-980c-ff2232d54f8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99e1d141-14b6-4f80-9f3f-dee27509d144/99e1d141-14b6-4f80-9f3f-dee27509d144.crl

            X509v3 Authority Key Identifier:
                keyid:BD:2D:93:B2:25:24:A4:46:22:6F:BD:5A:28:F3:59:42:88:0F:49:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99e1d141-14b6-4f80-9f3f-dee27509d144.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.64.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:3b:c6:b1:02:ae:23:41:d8:a2:2d:ec:81:dd:2b:70:58:5f:
         db:33:f5:0f:bc:6b:13:e1:22:0c:7d:9a:e9:c7:8f:cf:ec:35:
         2e:2b:a7:ec:bb:a1:ec:6b:5b:da:aa:c4:f3:98:b4:98:6e:35:
         50:5d:c1:73:6b:f7:f4:01:35:ca:de:96:f3:54:0b:d8:89:1c:
         a4:94:a2:03:87:52:eb:62:e9:fd:e7:f1:39:94:b7:24:ad:53:
         56:d4:0b:35:25:ea:4e:f8:e5:c5:a3:d9:5e:b1:f0:3e:bb:e1:
         fb:92:a2:06:1a:44:8c:ee:3e:3d:ca:a8:9c:80:b2:74:69:7c:
         1e:61:ae:7b:8d:1b:7a:05:43:c9:1f:51:5b:f9:80:79:c6:5c:
         a8:c4:88:b4:a8:94:f1:c2:dd:83:18:70:25:7e:27:25:b4:e1:
         98:7d:50:b5:52:ad:6e:b3:30:5d:ca:c9:26:a3:ea:85:7b:4d:
         fc:9b:36:c5:90:11:b3:e6:3d:08:6d:c8:a5:2c:9a:89:26:ec:
         e1:8a:12:4e:a9:de:a8:56:41:8b:36:3a:3f:ed:22:3c:d5:b8:
         b2:8e:fe:84:a2:4d:86:e7:71:69:64:e1:2f:b7:83:7f:cd:c9:
         29:24:9a:d0:d0:15:54:08:fd:bc:70:16:cb:36:85:8e:48:68:
         f5:c2:db:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----