Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/7d6e5ef2-e4ce-3c9b-9dbd-fd9418e385e3.roa
File:                     7d6e5ef2-e4ce-3c9b-9dbd-fd9418e385e3.roa (raw, json)
Hash identifier:          s04aJ8ScAr6w8/vCZ9whDMtkzPaDAThtsZzt9u0lOtc=
Subject key identifier:   E8:CB:45:22:06:D7:7E:EE:5F:C5:12:7C:59:CF:D6:24:6E:15:48:F8
Certificate issuer:       /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial:       010D0C9F432858482BF55206D307F11ACD4C5980
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/7d6e5ef2-e4ce-3c9b-9dbd-fd9418e385e3.roa
Signing time:             Wed 11 Dec 2024 14:00:52 +0000
ROA not before:           Wed 11 Dec 2024 14:00:52 +0000
ROA not after:            Tue 11 Mar 2025 13:00:52 +0000
asID:                     14061
IP address blocks:        152.42.128.0/17 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2b:f5:52:06:d3:07:f1:1a:cd:4c:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
        Validity
            Not Before: Dec 11 14:00:52 2024 GMT
            Not After : Mar 11 13:00:52 2025 GMT
        Subject: CN=5b5b6c33-db10-4394-94e0-36ca6500d312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:32:db:97:4e:30:55:50:f9:23:89:cd:11:8e:
                    36:4f:0f:ee:dd:9d:bc:4b:26:6c:f8:c6:81:d7:a3:
                    8c:c5:cf:ef:dc:4b:e2:d5:85:d9:a6:72:13:37:28:
                    d2:67:0b:1b:43:9e:23:6a:df:b7:32:7f:6d:a0:d7:
                    2a:7c:22:33:37:23:b7:62:51:b0:6d:db:b9:16:ee:
                    99:1f:04:62:28:7a:79:dc:d1:91:4e:8c:b0:de:41:
                    43:6c:49:ec:ff:0d:95:87:11:43:2c:be:21:09:7e:
                    bd:1f:21:f5:ff:9b:0a:f8:f1:4b:77:ae:70:cc:7d:
                    ae:2c:02:8a:5a:e6:25:14:0b:1f:07:b9:99:da:b1:
                    16:a2:c2:66:13:5b:d0:e6:e5:58:5e:28:25:41:75:
                    63:8d:1e:b9:9d:49:f3:b2:49:c1:81:b2:b7:53:81:
                    e6:3a:70:42:6f:5f:83:05:74:b4:69:e7:55:28:3e:
                    ed:05:1a:89:64:e1:52:99:b5:0e:f9:57:06:22:b5:
                    2b:b9:f9:08:ce:08:a4:e7:61:72:7f:a9:d1:44:4e:
                    b4:cb:80:9a:d6:01:41:db:c8:49:e5:6e:b3:16:53:
                    12:2a:1b:62:0a:e7:1d:6e:6f:64:d8:cc:a3:b6:78:
                    5f:35:29:a3:41:c1:c2:37:a0:95:a8:57:87:ec:43:
                    6e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:CB:45:22:06:D7:7E:EE:5F:C5:12:7C:59:CF:D6:24:6E:15:48:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/7d6e5ef2-e4ce-3c9b-9dbd-fd9418e385e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl

            X509v3 Authority Key Identifier:
                keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.42.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:df:de:a9:ba:e1:74:99:bc:08:d6:75:4f:8f:c8:df:20:23:
         c1:62:e1:33:92:3e:ca:38:e8:66:4c:1e:2d:39:88:94:9b:b1:
         df:85:55:38:3a:02:01:03:49:91:14:0a:e9:c4:e2:b6:51:14:
         d2:56:e7:d8:ab:42:a0:f1:ce:49:d8:45:59:32:4f:be:2f:34:
         83:3a:ba:2b:58:36:cd:75:37:d0:ab:3c:70:14:e5:5d:e5:42:
         c3:22:89:20:58:2a:dc:03:f8:2f:d1:76:07:3e:af:b1:4f:db:
         37:26:b8:c9:35:df:a1:72:61:40:72:fa:68:05:a9:48:59:a9:
         0e:e8:9f:3d:c8:43:6b:a5:8f:76:81:2d:c4:2a:1b:0e:60:b3:
         d2:a8:34:4a:eb:91:38:c7:9d:a7:01:3e:6c:6e:dc:3e:56:68:
         c6:bf:7f:26:bd:76:c5:bf:e7:04:0a:21:e6:68:15:e0:69:5f:
         30:b1:8c:7a:42:84:18:8e:f0:79:19:cf:b0:63:e7:b4:b7:07:
         66:5a:c0:9e:1e:3d:f4:50:d3:53:16:5b:36:86:08:a9:be:12:
         70:7c:8f:d5:5c:d0:1d:d1:f5:1b:80:91:68:f1:a3:9a:4a:ec:
         af:17:73:74:84:92:15:42:0a:80:01:63:d9:10:57:f9:6e:0f:
         09:01:f8:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----