Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/4efb0180-0036-3a86-b06e-97ab544504f2.roa
File:                     4efb0180-0036-3a86-b06e-97ab544504f2.roa (raw, json)
Hash identifier:          CtdU9a7rsZbH1NMKJ5r7PWQzwiIN9/z95okHvoIIf2k=
Subject key identifier:   EB:6C:1D:CC:1D:EA:E1:99:16:3F:DB:DD:C2:62:60:2D:D4:B7:E7:28
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F432858485B6AF936A40150A57AA14F00
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/4efb0180-0036-3a86-b06e-97ab544504f2.roa
Signing time:             Sat 28 Dec 2024 14:00:52 +0000
ROA not before:           Sat 28 Dec 2024 14:00:52 +0000
ROA not after:            Fri 28 Mar 2025 13:00:52 +0000
asID:                     396982
IP address blocks:        130.41.0.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5b:6a:f9:36:a4:01:50:a5:7a:a1:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Dec 28 14:00:52 2024 GMT
            Not After : Mar 28 13:00:52 2025 GMT
        Subject: CN=bee82939-e914-4223-bc5f-ef7f0cec3e47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:89:1e:30:38:c1:9a:f4:2f:4d:07:3e:c3:b2:
                    ff:c1:55:5e:f5:7a:ed:e7:07:b1:4b:fa:b4:2a:14:
                    ce:19:21:0b:15:36:ee:1e:1f:58:aa:60:08:6c:30:
                    cc:6f:b2:11:56:1c:d5:c5:78:07:2d:5a:5b:ce:1d:
                    87:93:e9:cf:cd:80:f4:7e:70:0b:65:a4:f1:72:8e:
                    23:82:31:d9:94:24:30:c5:2a:b9:d0:8e:ca:aa:55:
                    fd:73:01:b0:59:ef:1d:b9:df:65:c0:d4:56:48:bd:
                    0d:eb:e4:d0:52:d8:fb:39:d3:80:b6:d2:75:e4:65:
                    95:54:c9:b0:18:44:51:ba:47:0d:bc:33:6e:47:8d:
                    27:5b:ed:d7:3e:e5:d9:ef:39:e0:d7:2d:e2:88:80:
                    90:6b:ff:ec:4e:bd:80:59:16:1e:a7:90:ac:7d:9d:
                    5e:3b:2a:6a:8f:7d:0a:ab:a6:ce:b3:1f:3a:a4:47:
                    4f:48:ee:7d:17:53:73:31:50:11:1e:72:ad:19:7a:
                    03:81:57:d6:de:2b:76:3f:6c:ac:16:60:fe:1a:ab:
                    ae:4d:50:1f:ed:51:1d:d2:a2:27:58:c4:61:4e:e6:
                    9e:cf:81:96:61:55:2e:d4:aa:60:a4:6d:89:99:6e:
                    17:2f:33:78:e8:e7:ff:77:58:9c:dc:59:cf:d0:e3:
                    9d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:6C:1D:CC:1D:EA:E1:99:16:3F:DB:DD:C2:62:60:2D:D4:B7:E7:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/4efb0180-0036-3a86-b06e-97ab544504f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.41.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:87:b5:49:8d:fa:32:94:45:9f:bf:a3:cf:02:40:06:9b:3c:
         cf:3b:92:72:9f:a7:b0:83:4e:51:9d:4d:50:13:14:6b:df:37:
         38:36:92:db:6f:5f:06:81:38:f3:fe:a3:69:09:a6:00:cd:73:
         cd:67:2b:b7:63:17:ed:7a:26:51:b4:37:2f:fc:b4:f3:92:47:
         4a:a8:c3:b4:72:12:7d:d3:73:f6:da:c1:24:fc:77:37:2c:1d:
         a5:3f:f3:02:79:c0:55:ea:6a:12:00:b8:0f:e9:2a:76:82:38:
         87:ba:cb:fb:31:99:af:bb:82:c6:be:b9:bd:7c:08:5d:67:e7:
         28:69:80:64:50:08:02:56:7f:99:05:c5:73:76:2e:c7:ac:c0:
         7c:8d:d1:ff:f5:3c:20:67:bb:12:46:ba:fa:29:6d:2c:11:ce:
         ff:e7:98:15:19:cb:48:35:80:55:61:a7:95:fb:e9:a8:a2:06:
         b7:1f:5e:ad:02:87:25:11:da:ca:27:75:66:4b:02:3e:ad:5a:
         8e:1c:8e:a6:fb:a9:a4:71:f7:f4:fc:4d:4f:d3:42:6c:ed:93:
         20:20:aa:60:11:b6:f0:7d:2d:a5:5e:5e:28:02:27:fe:e5:3b:
         b7:c0:bc:50:13:56:73:cd:89:ea:6b:c4:89:27:19:eb:99:63:
         d9:75:3b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----