Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/3fe1e8f5-320d-39a9-a808-8859f3928adf.roa
File:                     3fe1e8f5-320d-39a9-a808-8859f3928adf.roa (raw, json)
Hash identifier:          928ESEZjAB8D6pah5nb2QMhMEdaZXsZ/cxm/qF56Hw0=
Subject key identifier:   94:80:03:A3:4D:9B:BE:F9:D6:84:98:A4:AE:24:FD:15:F1:72:39:E5
Certificate issuer:       /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Certificate serial:       010D0C9F432858488DAB49D78761D09112B46700
Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/3fe1e8f5-320d-39a9-a808-8859f3928adf.roa
Signing time:             Wed 15 Jan 2025 14:00:51 +0000
ROA not before:           Wed 15 Jan 2025 14:00:51 +0000
ROA not after:            Tue 15 Apr 2025 13:00:51 +0000
asID:                     396253
IP address blocks:        136.228.217.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8d:ab:49:d7:87:61:d0:91:12:b4:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
        Validity
            Not Before: Jan 15 14:00:51 2025 GMT
            Not After : Apr 15 13:00:51 2025 GMT
        Subject: CN=e1e1ecf8-1739-4465-8386-eaf81a63d361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:65:fd:f0:50:06:0a:3d:ae:3a:b4:a6:49:a3:
                    3d:b4:ec:81:e1:95:03:a2:91:68:81:cf:64:2a:a2:
                    fb:6f:b1:45:a3:18:cf:8c:74:1e:95:6a:76:ac:4f:
                    dd:55:50:31:03:2a:32:4a:8c:e0:10:69:11:91:9e:
                    70:3f:ca:89:ce:7d:a8:f6:5e:5c:da:e5:08:8f:8e:
                    2c:8e:34:98:62:61:0c:a0:88:dd:bc:56:b5:54:3d:
                    32:c2:59:3a:c0:5c:5c:16:6c:67:98:f5:91:be:a4:
                    b7:45:da:90:bb:59:b2:2d:9e:58:b2:3a:10:b6:ba:
                    67:7f:c7:45:25:cb:e5:5e:c3:cc:4d:81:28:fa:36:
                    07:1d:c0:76:86:fd:97:a1:d6:da:f2:ab:6a:6b:7d:
                    9d:3e:ea:82:fb:7f:f1:c7:42:e0:4d:70:3d:f3:da:
                    74:d3:ca:4e:21:0a:c8:1b:96:73:38:91:c3:a7:b7:
                    e3:b3:ea:07:9e:c5:38:57:98:27:6e:f2:e3:dc:66:
                    3c:f9:4e:32:57:8c:9b:15:d3:0e:94:91:0a:5b:7f:
                    cf:45:c3:7b:f4:9d:d3:af:9b:20:1e:90:99:53:56:
                    d4:32:c0:1d:12:6e:b9:ff:bc:3d:7e:9e:eb:8f:a6:
                    8f:80:4f:cc:92:5e:26:00:2e:0f:db:99:ee:eb:56:
                    a2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:80:03:A3:4D:9B:BE:F9:D6:84:98:A4:AE:24:FD:15:F1:72:39:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/3fe1e8f5-320d-39a9-a808-8859f3928adf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl

            X509v3 Authority Key Identifier:
                keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.228.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:43:0a:f7:0d:0e:0e:d9:da:e1:2f:94:21:7a:96:16:73:5d:
         05:03:04:7d:54:1d:4a:95:d5:c2:08:9c:0e:29:03:ac:69:1b:
         fc:0d:d1:60:88:5b:49:dc:45:01:e6:b4:b5:37:2f:8d:cc:79:
         12:0a:3a:cb:94:2c:ca:62:28:a7:81:ff:fe:6e:c9:37:ef:2a:
         25:96:d9:fe:63:d6:88:b2:c5:8a:b6:93:07:57:3c:03:46:31:
         1a:e9:02:0f:d8:73:44:87:31:0f:53:b5:58:8f:22:6b:57:9c:
         73:33:2f:9a:a4:18:f5:ca:7c:3a:50:08:2d:a4:99:06:0a:e6:
         99:77:c7:2e:95:bb:51:1a:61:80:02:6f:67:9b:a4:08:89:0b:
         dc:a2:7f:41:a7:5b:5b:e5:2a:77:16:72:dd:0d:50:9a:27:02:
         bb:66:5f:22:69:fa:55:4e:e0:da:b2:3d:f1:e2:3b:bd:1d:91:
         31:71:83:68:e6:b5:3b:4d:a0:c5:9d:19:70:bf:7e:ba:58:97:
         99:5b:e2:17:f5:3f:b8:37:5b:bd:fe:66:02:72:95:d8:50:1b:
         c1:03:b3:5e:45:3c:56:47:cf:62:25:c5:2d:29:e6:0a:46:19:
         9c:c4:84:86:08:28:62:dd:9f:27:8e:b4:a2:49:6f:27:0c:f7:
         9b:9a:28:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----