Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/5761e698-8303-343c-9d59-f2fd2c87dd63.roa
File:                     5761e698-8303-343c-9d59-f2fd2c87dd63.roa (raw, json)
Hash identifier:          Bl+Eg5zXk/uUKpW2GhARGznPMwi7MK7MBR2/zNJS9bo=
Subject key identifier:   C4:A9:2E:C7:A3:7A:0B:7A:3E:00:7B:C7:D5:C7:2F:DE:FB:BB:7B:09
Certificate issuer:       /CN=614c4e09-0317-4410-a7a2-52c308a201b1
Certificate serial:       010D0C9F432858486AC59B0A83F954568D09F280
Authority key identifier: 7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/5761e698-8303-343c-9d59-f2fd2c87dd63.roa
Signing time:             Fri 03 Jan 2025 02:00:40 +0000
ROA not before:           Fri 03 Jan 2025 02:00:40 +0000
ROA not after:            Thu 03 Apr 2025 01:00:40 +0000
asID:                     9009
IP address blocks:        168.91.112.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:6a:c5:9b:0a:83:f9:54:56:8d:09:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=614c4e09-0317-4410-a7a2-52c308a201b1
        Validity
            Not Before: Jan  3 02:00:40 2025 GMT
            Not After : Apr  3 01:00:40 2025 GMT
        Subject: CN=27b01ecc-fde9-4df3-8629-88f9d37f7572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:11:37:02:d9:8c:f1:63:17:75:49:f9:ad:d7:
                    a9:2d:0a:70:4d:37:ba:3e:5e:82:fa:9a:97:c2:9f:
                    bd:b8:bf:01:5a:a4:d0:dd:9e:fa:83:c1:2c:26:8e:
                    ed:96:2b:23:d6:58:ca:2b:d8:1f:72:b0:62:1b:8b:
                    50:17:d5:4d:9a:e9:5d:12:fe:71:72:94:92:17:be:
                    6a:85:6e:3c:68:2f:cf:ea:6c:2d:51:c5:36:2e:cd:
                    81:e3:67:ea:18:e5:03:02:71:3f:e8:8b:43:05:1e:
                    df:21:33:6a:8d:40:3d:a5:a0:ce:aa:41:32:50:62:
                    ed:6e:92:03:c3:bb:60:62:15:c8:28:53:bb:c7:0f:
                    83:12:26:bb:46:97:f3:fe:c1:00:56:77:e0:0a:19:
                    64:c1:0f:4b:d5:bc:0d:e5:c5:bf:05:04:68:b2:10:
                    6d:8d:ee:52:f9:2d:21:7d:f2:74:85:c5:db:61:ef:
                    77:ef:d4:0a:eb:c0:60:8e:0f:6a:90:89:a4:81:1d:
                    38:04:9a:eb:25:6f:3b:fb:f3:b2:dd:fa:07:6a:11:
                    e7:4e:ed:f2:7e:43:0f:4c:ed:75:1c:6b:ea:36:74:
                    fe:bc:9b:78:40:fa:50:26:96:54:4e:19:eb:bc:d8:
                    37:9d:d8:49:52:33:85:25:63:94:8d:2a:e6:92:c4:
                    f3:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:A9:2E:C7:A3:7A:0B:7A:3E:00:7B:C7:D5:C7:2F:DE:FB:BB:7B:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/5761e698-8303-343c-9d59-f2fd2c87dd63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl

            X509v3 Authority Key Identifier:
                keyid:7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.91.112.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:9c:07:4a:ec:19:f7:07:14:d0:78:5e:4c:27:2c:2a:8a:44:
         9e:82:af:16:ee:f7:7e:89:52:2c:59:c8:96:3b:4f:15:1d:40:
         7c:d4:f8:fb:7d:e0:aa:50:af:f3:11:ff:5f:6e:5e:19:49:4a:
         92:7b:45:f9:40:b9:73:12:ed:e5:ea:a0:7b:c6:dc:1c:b1:d7:
         c6:7c:40:8b:25:df:44:2e:22:1d:7b:c5:5b:98:0d:f8:ed:6b:
         de:e6:33:46:ac:c9:a8:7a:92:3d:bc:03:14:08:d3:47:48:d4:
         3c:7c:2b:e7:a3:26:68:49:d2:75:07:09:51:23:37:f0:74:3b:
         94:1a:7a:ab:eb:91:25:ee:08:21:96:c1:f1:32:7c:3b:50:be:
         45:73:9c:29:76:da:29:cc:ff:81:0f:63:ac:22:a8:cc:32:6c:
         bb:95:9b:de:60:2d:5d:81:ca:bb:cf:1f:4b:5a:24:97:67:94:
         28:b7:20:a6:10:e1:95:cd:bb:c0:88:20:3b:7c:36:d7:f9:e6:
         80:d1:48:ae:47:87:86:6a:b0:32:18:66:9d:64:54:b3:87:f8:
         c5:22:58:66:f3:29:e7:bf:3e:96:cf:05:45:dc:75:b8:7d:53:
         75:1e:50:8f:18:f4:5c:ce:96:26:33:f6:a4:b8:4f:14:03:44:
         86:9e:c3:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----