Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/95cfc3d1-8c96-370e-b0b4-54b16dd9aba2.roa
File:                     95cfc3d1-8c96-370e-b0b4-54b16dd9aba2.roa (raw, json)
Hash identifier:          arGrar+kCXLqwU05ZYmRRWAC3EiPrjjeXgLMEB68Ohk=
Subject key identifier:   0F:8B:CD:AF:42:2B:59:3E:B9:DE:82:1C:BF:B6:86:3C:25:C1:86:9C
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F4328584843B00B26FE61103B90D94858
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/95cfc3d1-8c96-370e-b0b4-54b16dd9aba2.roa
Signing time:             Fri 20 Dec 2024 02:00:40 +0000
ROA not before:           Fri 20 Dec 2024 02:00:40 +0000
ROA not after:            Thu 20 Mar 2025 01:00:40 +0000
asID:                     3356
IP address blocks:        20.148.240.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:43:b0:0b:26:fe:61:10:3b:90:d9:48:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: Dec 20 02:00:40 2024 GMT
            Not After : Mar 20 01:00:40 2025 GMT
        Subject: CN=ece5d4e2-bce0-45fc-ae99-1b0a109874f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:02:95:c8:c7:55:ef:c0:37:38:f4:cf:cf:3f:
                    3f:fe:ab:71:43:01:51:39:5a:26:d6:e6:14:0e:77:
                    17:b0:e8:d5:9a:ba:9e:e5:8c:f6:cd:7d:83:31:91:
                    00:49:00:e3:e9:b3:c5:50:87:08:f9:1a:26:a9:d2:
                    3d:03:f7:5e:2c:9b:4a:08:ce:58:b8:c5:8c:1e:00:
                    2b:ca:b2:36:58:14:3a:65:c7:5c:d6:3e:e4:cc:51:
                    71:07:67:74:4c:48:c2:ec:07:09:f4:51:de:49:d1:
                    78:17:1a:ab:a6:95:ae:9a:d9:a1:28:31:aa:38:3f:
                    f4:5d:29:91:ce:d1:88:f8:50:88:65:87:8c:61:76:
                    ae:16:1a:c1:31:18:c6:40:8d:b5:2a:16:e2:40:61:
                    bb:4e:61:01:cb:6d:29:bd:c3:43:99:3c:d0:8a:3f:
                    9d:24:87:55:1c:06:b3:f1:f8:4e:a3:36:4d:46:91:
                    2e:4f:1c:61:8e:78:83:1b:82:3f:b8:bd:d3:dc:a3:
                    7b:bb:ba:e7:a7:d3:27:d1:9f:2b:e4:f5:74:81:e2:
                    b1:30:9e:a7:90:61:08:37:33:99:36:c2:76:74:5d:
                    98:88:cb:e2:f1:13:f2:5d:5c:24:a8:86:ad:da:1d:
                    83:93:f8:26:de:9d:35:df:9c:80:03:e9:b5:58:21:
                    43:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:8B:CD:AF:42:2B:59:3E:B9:DE:82:1C:BF:B6:86:3C:25:C1:86:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/95cfc3d1-8c96-370e-b0b4-54b16dd9aba2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.148.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:0f:14:ea:c6:58:b3:e5:f9:b2:d1:52:a7:7f:dc:e5:2c:d7:
         c3:31:b0:31:a5:57:82:79:d0:b6:1e:e5:4f:99:8d:2d:95:ea:
         bb:92:20:80:6d:c0:5e:80:51:12:4d:b0:74:3f:a6:3a:17:19:
         2b:05:a5:da:a5:75:74:5e:3c:9d:be:51:ce:61:77:14:8e:3e:
         c0:64:11:f4:20:e7:fb:73:df:06:14:56:2a:dc:01:80:c1:bf:
         a3:de:c1:34:1b:89:57:86:03:5c:9f:8e:7e:61:23:3a:0d:8f:
         a4:64:91:e7:c9:86:fd:4a:04:34:2c:b2:5f:1c:6f:b8:4d:d7:
         f1:3b:1e:e7:ad:cc:9a:dd:64:f7:76:bc:ee:52:75:4d:ec:c7:
         e2:25:46:55:05:c5:d5:10:63:6b:f7:84:1e:60:91:52:df:b7:
         8a:2f:3f:43:ee:30:b0:25:65:76:84:3d:ff:3b:71:43:b2:3f:
         7d:a9:26:89:37:92:0c:a6:ca:1e:f1:61:65:44:eb:80:20:3a:
         c2:7e:5f:41:1e:07:4d:d9:7a:ca:87:dc:0a:5e:9f:8c:19:91:
         8d:34:eb:fb:00:05:75:20:fb:7b:7c:46:02:f5:a6:e5:cb:d2:
         ce:66:a1:0c:da:35:f2:c1:b0:d6:9e:57:0b:8b:92:fc:5b:d7:
         87:ed:f3:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----