Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/c6221ec9-feac-3a26-9d63-107653e5c3c9.roa
File:                     c6221ec9-feac-3a26-9d63-107653e5c3c9.roa (raw, json)
Hash identifier:          j5PPWhK+NTmbIzlgZv262Q9lJDS0z1AnSn1rahVl+Do=
Subject key identifier:   FE:55:B1:B0:52:2B:9C:73:66:17:8B:3B:E5:94:80:88:79:E2:06:4A
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F432858480214ED2F3D1263AF4A6E7680
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/c6221ec9-feac-3a26-9d63-107653e5c3c9.roa
Signing time:             Tue 26 Nov 2024 14:00:39 +0000
ROA not before:           Tue 26 Nov 2024 14:00:39 +0000
ROA not after:            Mon 24 Feb 2025 14:00:39 +0000
asID:                     3356
IP address blocks:        198.112.112.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:02:14:ed:2f:3d:12:63:af:4a:6e:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Nov 26 14:00:39 2024 GMT
            Not After : Feb 24 14:00:39 2025 GMT
        Subject: CN=5444ba5b-b116-40a3-a7fd-6c83d551cafe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:7e:fb:dd:49:fc:f8:9a:7a:b3:7c:ba:88:42:
                    dc:b5:76:db:95:e7:ef:fe:bd:06:a8:bf:44:1c:87:
                    b1:57:f9:31:fd:dd:29:91:d4:2d:86:e2:54:b7:dd:
                    0b:e4:c1:4a:d0:70:7a:e2:55:d8:aa:84:84:05:d4:
                    2d:55:68:47:a8:ab:c6:60:01:7c:ea:f7:2f:23:35:
                    f6:23:6c:1d:cb:fe:64:91:fd:27:bb:24:6e:ad:c0:
                    5c:3e:cb:2d:bc:95:ad:d2:01:fa:1f:75:ef:3f:c5:
                    fe:03:55:06:63:7a:bd:2b:fb:f5:8e:49:57:50:21:
                    36:40:5e:3a:f9:52:ef:be:48:3a:8f:88:f7:46:2a:
                    a1:99:37:42:d5:29:3d:4c:f6:ac:e0:b2:b3:b8:ba:
                    59:20:a9:84:04:40:66:df:5f:42:4b:64:75:c8:dd:
                    ec:f4:c1:c4:43:70:98:e7:b3:91:b5:2d:29:fb:bb:
                    0b:49:70:2a:e9:c3:bc:19:c8:87:0e:31:ab:7d:07:
                    06:0c:0e:13:09:65:e3:6a:e5:6b:51:63:b9:c0:79:
                    9a:b0:0e:f3:9f:80:a9:15:65:ae:bb:ac:2f:76:9f:
                    04:63:bf:15:7e:b8:f0:b4:cb:52:a0:c7:a0:93:b5:
                    e8:ea:c1:c0:c2:fe:34:8f:12:32:b2:9b:59:5e:ae:
                    7a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:55:B1:B0:52:2B:9C:73:66:17:8B:3B:E5:94:80:88:79:E2:06:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/c6221ec9-feac-3a26-9d63-107653e5c3c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.112.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:a0:5d:1c:85:c3:c6:4c:e6:69:46:ff:10:08:8a:df:ba:30:
         95:d2:81:a5:8e:cf:71:7b:65:3e:b0:0f:f9:34:b0:ce:9b:f7:
         fb:3e:40:15:cf:61:ca:44:65:44:4b:40:9d:a9:d3:18:6a:15:
         72:2d:ce:95:53:c1:17:34:5f:b4:3f:35:9d:15:9d:ff:1e:46:
         5e:56:d9:c1:5d:41:a5:7f:3f:6a:b6:c2:0f:d6:f8:ee:fe:36:
         b9:30:bb:96:cc:0c:92:d8:89:33:d3:70:a8:30:15:3e:c6:a5:
         f0:8d:06:71:52:c6:91:ed:93:bf:e1:22:ff:8a:8b:f6:93:68:
         64:6e:41:82:5d:f0:85:38:ca:75:8f:90:fd:f0:f3:64:0e:45:
         79:9e:13:a0:a9:71:84:c1:e6:fb:b0:e0:69:b0:ac:21:a4:b6:
         ed:37:9c:21:33:8e:b2:0b:7e:7a:65:c8:0e:19:0d:6f:73:b5:
         75:c0:d0:4f:2c:58:70:6f:64:5c:c2:01:82:f2:96:9a:b4:3c:
         65:f1:7e:6d:0a:96:0b:8f:dc:ce:b4:37:6c:78:cf:32:e0:32:
         c4:e2:7f:6d:a1:1e:96:c7:9e:81:e9:b7:62:cb:2f:25:98:ef:
         57:67:11:30:ba:05:54:c2:26:99:9b:84:2b:a7:da:94:69:f2:
         25:97:c1:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----