Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/ee5ea7e9-31cc-3b18-9c75-4ec0decbcd5c.roa
File:                     ee5ea7e9-31cc-3b18-9c75-4ec0decbcd5c.roa (raw, json)
Hash identifier:          bvtFqQYWCA8vPgWnesInxzoCdeINRg3xl+vYegUIXaw=
Subject key identifier:   09:34:13:D5:9D:6F:EF:6C:7C:2E:EF:C3:FC:3F:5B:12:8E:91:F2:62
Certificate issuer:       /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
Certificate serial:       010D0C9F43285848A13615B532961145B2689C60
Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/ee5ea7e9-31cc-3b18-9c75-4ec0decbcd5c.roa
Signing time:             Wed 22 Jan 2025 14:00:52 +0000
ROA not before:           Wed 22 Jan 2025 14:00:52 +0000
ROA not after:            Tue 22 Apr 2025 13:00:52 +0000
asID:                     13009
IP address blocks:        147.249.97.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a1:36:15:b5:32:96:11:45:b2:68:9c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
        Validity
            Not Before: Jan 22 14:00:52 2025 GMT
            Not After : Apr 22 13:00:52 2025 GMT
        Subject: CN=221f198b-b302-463a-a8d4-6009db18438f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:df:cf:92:c7:63:b8:4b:42:7d:9d:9d:b3:65:
                    f0:9e:a3:2b:d0:bf:d8:6b:53:85:96:52:84:37:65:
                    b4:47:74:c2:ea:99:76:89:ac:01:74:1b:e6:f5:f5:
                    ec:86:83:a9:b8:ca:da:43:af:fe:4d:2a:16:05:06:
                    6e:ce:78:7f:b2:6f:a6:cb:ad:0f:fa:d2:f2:bf:4b:
                    42:87:2b:0d:c6:71:ba:b4:7f:d6:e9:e8:c5:90:dd:
                    ce:9d:8d:d8:99:8c:97:36:b5:46:dc:ff:90:1a:01:
                    bd:48:34:03:e9:da:19:e1:25:24:34:0d:0b:a4:37:
                    5a:71:76:58:07:58:c1:c4:8f:e0:75:06:bb:dd:47:
                    6a:91:ce:58:cd:be:7e:a4:59:8e:0c:71:97:a9:17:
                    f0:ff:ed:5c:01:dc:eb:72:ca:eb:f0:79:4b:14:89:
                    7a:bd:53:c7:62:5a:fc:2d:5a:e1:bb:34:ba:d4:e9:
                    2b:e6:d3:b2:08:56:56:78:3c:3c:81:ec:5b:34:ca:
                    9e:09:90:c9:87:d8:81:7d:62:d5:68:48:81:f7:f6:
                    d6:3a:56:38:20:f2:50:79:89:5d:cd:d2:e4:91:63:
                    57:f5:38:a2:18:56:5d:31:9a:d0:6d:b6:c1:12:83:
                    a0:eb:26:01:86:54:01:38:d4:ad:9c:7b:47:f5:0c:
                    21:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:34:13:D5:9D:6F:EF:6C:7C:2E:EF:C3:FC:3F:5B:12:8E:91:F2:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/ee5ea7e9-31cc-3b18-9c75-4ec0decbcd5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl

            X509v3 Authority Key Identifier:
                keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.249.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:3b:8f:ea:ea:e0:cc:0b:fa:06:e5:2b:31:8d:5d:59:d9:15:
         ac:79:ca:65:c6:a4:6e:fd:d2:81:4b:04:60:a2:4e:01:68:6b:
         7b:09:e0:fb:15:41:0d:e4:0a:e3:b4:41:ad:ce:3c:a2:67:51:
         03:a9:c6:70:7f:11:15:59:42:fa:c2:d2:9f:7a:eb:cf:6e:fb:
         52:e0:ff:5a:fc:65:db:3e:93:68:28:22:70:ba:92:5b:c4:0c:
         ea:b0:59:a6:4b:17:cb:2e:43:96:f3:b9:60:1b:26:53:b4:49:
         87:d0:af:b3:fa:bd:fc:e0:ac:26:70:47:4f:41:74:e5:58:0b:
         03:e4:65:ba:5f:9a:a2:f7:47:cc:fe:8e:5b:a4:e3:8b:eb:9f:
         ff:77:6b:dd:45:c5:f6:72:ab:a8:39:3a:4b:9e:56:6d:a1:1a:
         58:c0:2d:8c:33:52:01:09:e5:20:e8:0f:5b:8e:64:e1:cf:34:
         0e:b9:c5:07:1d:c3:86:44:a6:32:d7:63:3a:1a:91:3d:9c:f8:
         07:bb:44:bd:53:e3:5d:07:c0:2b:87:57:6d:4a:95:c9:27:99:
         8d:d9:50:bd:50:41:05:44:00:f7:4a:b7:ae:fb:bd:88:4b:49:
         64:27:ef:ca:9d:10:e6:ca:64:e6:1e:ed:46:dd:67:03:2d:5f:
         91:a5:7f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----