Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/90059a01-40ec-34d8-917a-8a196ef57339.roa
File:                     90059a01-40ec-34d8-917a-8a196ef57339.roa (raw, json)
Hash identifier:          9NSWPgRWo2B3kS8EzA8LmgXiddwxtgZiJW9+OvlqtCM=
Subject key identifier:   66:E9:EE:EF:B7:F9:88:63:A4:57:8F:E6:BD:54:9F:43:12:1F:F1:2F
Certificate issuer:       /CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
Certificate serial:       010D0C9F43285848A04910E69ED3A99466618200
Authority key identifier: E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/90059a01-40ec-34d8-917a-8a196ef57339.roa
Signing time:             Wed 22 Jan 2025 06:03:27 +0000
ROA not before:           Wed 22 Jan 2025 06:03:27 +0000
ROA not after:            Tue 22 Apr 2025 05:03:27 +0000
asID:                     19165
IP address blocks:        204.14.154.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a0:49:10:e6:9e:d3:a9:94:66:61:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
        Validity
            Not Before: Jan 22 06:03:27 2025 GMT
            Not After : Apr 22 05:03:27 2025 GMT
        Subject: CN=778cc874-0ba2-42ca-926f-e8a7d34a095c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8c:24:81:27:33:50:08:33:77:ff:d7:3e:40:
                    8d:b4:6f:4b:ca:9f:e0:3c:82:08:cb:0f:44:53:56:
                    4d:34:bd:0f:43:7e:47:4a:3e:aa:4b:a0:d4:f2:97:
                    07:2c:81:eb:50:08:d6:82:3b:e4:93:02:75:8d:73:
                    c8:58:75:e2:40:cf:fd:cc:64:b4:46:27:6e:8e:19:
                    9d:39:93:73:73:f4:0e:c4:22:79:4f:7e:5d:ce:51:
                    be:3b:11:70:c4:9a:06:b0:e4:30:83:02:85:0d:72:
                    24:35:44:c2:32:24:0f:c3:a5:a9:a5:d3:b5:77:3a:
                    d4:7a:d4:cb:11:cf:91:3c:b6:66:3a:08:d5:19:e2:
                    a2:5a:c5:32:0f:5f:9e:50:7f:1c:57:61:c7:83:fb:
                    68:45:a7:af:eb:3a:2a:19:63:2d:36:44:c0:8f:04:
                    03:3b:04:89:fd:88:ce:c9:d2:3f:04:b7:7f:0d:d3:
                    88:60:c6:74:5f:51:36:78:10:0d:a1:44:fe:b6:65:
                    87:4e:7d:b1:eb:4f:7e:9e:d7:ba:52:ec:37:6b:b8:
                    2d:98:9e:7e:69:a5:16:8d:bf:9d:fa:0a:5c:8e:d9:
                    ff:1d:c2:2d:81:ff:8c:3b:62:c5:29:bb:65:30:60:
                    0a:25:93:63:17:9b:28:15:bc:7b:56:a3:26:19:be:
                    26:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:E9:EE:EF:B7:F9:88:63:A4:57:8F:E6:BD:54:9F:43:12:1F:F1:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/90059a01-40ec-34d8-917a-8a196ef57339.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl

            X509v3 Authority Key Identifier:
                keyid:E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.14.154.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:e7:9e:aa:24:88:9c:c3:5d:19:16:72:f7:82:08:20:f9:89:
         23:d3:2b:c7:da:89:3c:02:3c:47:be:48:bb:0c:8d:63:6c:54:
         91:01:5b:1f:98:14:d2:27:3b:fe:a5:36:bb:d4:7a:5b:18:7d:
         58:dd:6b:fb:79:22:76:e3:ff:39:2a:e0:47:b2:49:2c:80:24:
         ee:94:47:c2:4e:64:90:f9:92:24:27:5b:db:d6:b9:71:26:49:
         0c:c7:80:2d:62:86:d6:e1:b7:94:45:4e:b9:33:76:06:64:a9:
         7d:ce:b8:95:74:f4:8c:8f:b0:a6:d7:84:c8:51:fa:85:dc:b0:
         33:36:23:d4:a4:a3:2d:fa:3b:02:81:34:df:ca:ab:92:6f:23:
         e7:b7:a6:ec:4c:d8:4a:9c:34:8d:2e:ee:64:fc:fc:36:1e:21:
         66:ca:6e:17:2a:20:ed:ea:6f:40:19:c5:b8:d4:f2:e4:71:71:
         74:18:4d:e9:72:a7:1b:d2:b9:4f:bd:1c:9c:6e:20:e7:4b:8f:
         c2:e9:58:2b:41:0f:e8:27:d9:3d:43:d4:ed:88:a8:a0:c7:60:
         ca:f5:99:d9:a4:4e:0d:c6:c6:51:90:60:75:7c:0d:81:c4:3c:
         52:22:97:ae:c4:19:3d:7e:f4:dd:49:53:ce:00:17:f7:70:b8:
         33:93:36:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----