Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8/30222fda-e243-32b6-b245-ed2edaf68e09.roa
File:                     30222fda-e243-32b6-b245-ed2edaf68e09.roa (raw, json)
Hash identifier:          Ojf5eNUjGfIryoZc49A0WC03Zc4pf3+wlOuHek5jWaM=
Subject key identifier:   98:59:6D:88:78:74:F4:A0:D0:2A:26:FE:A2:12:89:E2:80:D4:E0:30
Certificate issuer:       /CN=e4b04b20-09d3-4cf9-8dd0-c45ce59899d8
Certificate serial:       010D0C9F43285848F65BDBE9E55E2F9B3587A900
Authority key identifier: DA:96:82:D6:51:FE:D3:B5:E0:41:CF:71:D6:E6:9F:AC:E0:2E:99:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8/30222fda-e243-32b6-b245-ed2edaf68e09.roa
Signing time:             Sat 22 Feb 2025 02:00:38 +0000
ROA not before:           Sat 22 Feb 2025 02:00:38 +0000
ROA not after:            Fri 23 May 2025 01:00:38 +0000
asID:                     16796
IP address blocks:        206.211.216.0/23 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f6:5b:db:e9:e5:5e:2f:9b:35:87:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4b04b20-09d3-4cf9-8dd0-c45ce59899d8
        Validity
            Not Before: Feb 22 02:00:38 2025 GMT
            Not After : May 23 01:00:38 2025 GMT
        Subject: CN=4758d78a-9402-4b33-a4b3-d8523713d849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8c:0e:09:45:76:1d:1f:00:97:dc:2d:50:0d:
                    20:9e:5c:69:f2:0a:f8:6d:86:8e:6b:2a:43:f5:6c:
                    5f:8c:22:78:c8:a1:15:9e:f2:87:89:37:0d:c0:87:
                    2a:9a:d5:cf:5f:52:ad:bf:13:e9:4e:68:ed:98:6f:
                    87:58:70:cd:cc:9d:76:85:33:c9:7e:e6:76:93:e6:
                    1e:a8:ea:ca:8d:0b:dc:55:c1:e3:85:03:0d:72:54:
                    48:44:c6:c3:2c:b7:e5:88:ea:62:4f:67:46:e9:c3:
                    36:81:fa:c3:e7:da:4f:4e:22:ee:c9:40:13:60:67:
                    d0:28:8e:af:b2:e3:87:8d:25:10:be:5c:3a:e7:44:
                    c4:77:af:6d:b1:ef:53:9f:e4:19:d7:f0:fa:57:01:
                    e3:ba:52:47:99:49:63:2a:39:83:54:b3:26:41:0f:
                    3c:ad:3a:05:38:1c:84:80:a8:88:e2:3c:9c:ed:50:
                    7c:09:4f:bc:b1:b4:02:15:6b:ce:b2:4c:ef:bb:3e:
                    89:60:0a:14:e1:0b:c6:34:34:77:05:62:a8:14:9b:
                    bd:a5:f7:92:50:ca:e3:af:4c:dd:6f:3d:0b:1d:d9:
                    57:b8:78:f0:78:a6:07:d7:a2:54:48:01:bb:96:04:
                    42:63:62:ae:cd:22:a8:4d:29:26:83:a2:d4:f0:ea:
                    a7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:59:6D:88:78:74:F4:A0:D0:2A:26:FE:A2:12:89:E2:80:D4:E0:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8/30222fda-e243-32b6-b245-ed2edaf68e09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8.crl

            X509v3 Authority Key Identifier:
                keyid:DA:96:82:D6:51:FE:D3:B5:E0:41:CF:71:D6:E6:9F:AC:E0:2E:99:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.211.216.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:78:1b:7f:65:90:bc:32:25:05:cd:d8:35:e0:26:f1:4c:78:
         26:4b:18:1b:64:3e:6e:44:3c:37:ae:f6:86:e3:b4:09:6c:32:
         fa:1f:2c:71:54:ca:22:e8:31:39:4b:a4:a9:83:cf:d2:0f:b9:
         35:65:26:c8:61:b3:7c:fa:64:86:c0:db:1d:e3:9e:83:4d:67:
         85:61:25:31:04:a0:f6:94:fc:e9:53:b6:92:19:0b:a3:6e:15:
         11:f8:e5:02:e2:44:d4:00:f0:12:f3:42:35:bc:fb:cf:a1:b6:
         c4:e4:09:62:4b:8a:bf:03:de:fa:52:fc:41:20:20:bd:08:dd:
         99:39:08:12:2a:06:38:34:83:0e:bb:19:2f:9a:94:66:16:18:
         d4:e7:17:52:ad:ff:94:81:ec:2c:92:30:6d:05:81:33:bd:d9:
         ec:14:c2:8b:cd:d2:c5:34:b2:c8:6d:98:b7:9f:09:f5:98:97:
         3a:fe:01:c7:91:e6:64:18:e2:94:5a:ed:53:e3:15:08:52:a7:
         f2:1a:ae:7f:0b:6d:58:0f:f9:42:bf:67:15:45:e4:7e:53:d4:
         5c:36:77:80:72:29:c3:0d:c4:80:14:d2:df:13:53:6d:5f:5c:
         03:23:47:2f:62:24:0e:2a:45:39:53:1f:98:e4:e1:f3:c1:a2:
         44:74:d3:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----