Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cd5c253d-7be1-390f-b8f3-6a2fb50cc8aa.roa
File:                     cd5c253d-7be1-390f-b8f3-6a2fb50cc8aa.roa (raw, json)
Hash identifier:          fTGBIsnA1+jwO+ji+Vf7aSpJGSeDhjtSpVaCe8DuH6o=
Subject key identifier:   58:B9:55:CA:72:4E:1F:B2:8F:1A:28:41:E2:C9:26:7A:63:F3:F9:D5
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62A6BFB496F4B0803510E40
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cd5c253d-7be1-390f-b8f3-6a2fb50cc8aa.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        162.72.46.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:6b:fb:49:6f:4b:08:03:51:0e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=4474d282-d9a6-4e7a-956a-f650302460ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:58:a6:11:49:f8:6f:a2:6a:39:47:67:9a:ab:
                    bf:af:c1:46:43:67:9e:77:f6:5f:1b:0b:8a:2d:53:
                    2d:19:29:d4:40:3d:4d:15:77:5b:7c:91:c7:c3:6e:
                    7e:d8:2f:a1:ff:22:06:78:4b:50:e8:f7:2f:de:56:
                    fb:3a:ba:0a:ef:4c:1f:f6:41:ed:4f:fa:c1:23:06:
                    98:35:4a:9b:6f:c6:cc:6f:7e:58:b8:0c:2b:cb:1a:
                    2e:98:91:e4:3a:0e:74:26:6f:d0:78:d6:67:0b:29:
                    db:73:61:64:f3:04:65:34:9d:92:93:91:c0:99:ff:
                    fc:ea:71:3a:68:c1:38:72:8a:fd:7c:e2:61:a1:fe:
                    a9:9a:c6:6f:5d:b8:ef:05:bd:69:2c:41:2b:ae:a6:
                    b7:0b:ad:72:fb:43:19:47:63:21:9b:33:d1:de:9d:
                    f9:03:e2:fd:3b:f7:26:13:c2:bd:68:c3:5c:e4:04:
                    09:21:7e:74:32:f0:65:4b:f5:c4:63:03:39:e0:14:
                    36:04:0e:98:48:6f:e9:3c:f9:6e:01:13:0f:a6:b5:
                    1a:de:b5:5b:6c:11:14:31:79:c0:22:67:d5:d0:59:
                    80:76:bd:6d:e3:21:c9:4f:0c:a8:13:46:0c:df:0b:
                    83:6b:fe:ac:bf:d6:2f:16:2d:1f:ed:98:75:a9:e8:
                    3e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:B9:55:CA:72:4E:1F:B2:8F:1A:28:41:E2:C9:26:7A:63:F3:F9:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cd5c253d-7be1-390f-b8f3-6a2fb50cc8aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:b8:80:08:d5:d7:22:66:38:f1:11:a9:50:58:21:4c:64:ad:
         51:1f:07:55:2f:d9:a8:da:51:0c:b6:5d:50:0c:52:9c:66:52:
         8b:91:44:30:80:15:fd:97:07:a2:d2:47:60:74:8b:0e:02:42:
         cc:bd:b5:f5:97:e4:2a:67:66:3c:9e:b8:ec:66:d8:56:2e:69:
         21:dc:2e:40:19:a6:f2:6d:b8:c0:4f:99:79:20:e2:a7:fe:f5:
         10:c4:d6:57:8a:73:7c:36:ce:f9:cd:a3:cb:a0:3e:96:e5:90:
         2d:e6:71:bf:96:08:2b:b4:0c:cf:98:6e:a0:0f:63:33:2d:36:
         b3:a0:d0:43:d3:30:73:d8:5a:64:cf:09:1d:f7:c1:af:a7:f9:
         5d:49:e2:72:7c:ad:b8:2f:4b:5d:2e:b8:5a:3c:34:3e:cf:8d:
         7a:6e:06:83:46:13:16:ff:07:05:2a:93:b9:d3:57:62:30:75:
         1e:5b:6b:01:b9:c5:cc:f0:01:c8:51:74:68:b0:e3:ff:05:42:
         d1:1b:f6:f3:de:a1:1d:cd:0d:79:ed:35:e2:74:01:d3:f6:dd:
         31:10:86:09:87:f6:07:15:cf:2f:4e:f1:bd:ac:d7:b6:98:51:
         ce:12:4c:c6:cb:31:ad:78:7f:ba:f7:c0:9c:06:25:25:17:78:
         2c:61:d5:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----