Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e433bfb1-04bf-39d6-a999-49377ebe286f.roa
File:                     e433bfb1-04bf-39d6-a999-49377ebe286f.roa (raw, json)
Hash identifier:          oK5cI4YGXSnH6TUwC1wBJxm7MHBCfgy/CY/pJio/nsE=
Subject key identifier:   33:12:D0:46:FD:6C:A4:20:96:48:49:52:EB:A7:A8:D9:2F:3A:13:A5
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62A831E46D3041A1927531A
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e433bfb1-04bf-39d6-a999-49377ebe286f.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        184.20.253.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:83:1e:46:d3:04:1a:19:27:53:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=48002e19-86e3-4b08-a8d0-3cea427540bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f9:82:08:9e:7a:e9:ec:3e:56:a5:aa:34:ca:
                    a1:b5:70:22:fd:ff:b8:b4:98:fa:d9:2d:b9:c1:da:
                    3b:9c:30:72:85:cd:c1:a1:33:f4:68:91:4e:6d:2e:
                    1c:8b:32:09:04:b4:10:8d:9d:15:f5:9d:5c:5c:69:
                    4d:1e:ab:1f:9f:da:cc:1c:20:23:e0:17:a3:a4:4c:
                    89:62:81:bf:82:38:5c:2f:dd:06:ee:05:e7:46:75:
                    dd:b4:3a:f5:fa:bf:73:45:d1:53:4f:f3:dc:eb:fe:
                    48:49:66:1c:6c:b9:0c:78:d6:ef:cf:16:14:7b:61:
                    fe:ad:65:7a:b0:e6:7d:28:b5:99:07:da:17:e6:01:
                    bb:87:fc:21:04:78:8d:ba:f6:86:f8:30:ad:bc:39:
                    71:30:7c:7b:24:1b:1e:20:f0:ec:22:e7:9b:39:7d:
                    2f:5d:e2:5f:66:25:9a:8d:35:ee:83:e5:14:11:c8:
                    5e:4d:0e:26:e1:0c:d4:fb:21:5c:3c:18:52:ac:9b:
                    65:eb:33:dd:ae:8e:93:20:41:d8:46:23:d5:c8:48:
                    ea:92:df:91:49:7a:f2:1f:11:2f:d1:80:47:71:2f:
                    02:e1:59:0e:69:e5:b1:29:6e:1f:8c:30:0f:5f:c7:
                    41:ce:29:72:76:38:ef:15:9a:80:34:4c:08:ab:bb:
                    e5:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:12:D0:46:FD:6C:A4:20:96:48:49:52:EB:A7:A8:D9:2F:3A:13:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e433bfb1-04bf-39d6-a999-49377ebe286f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:cd:ef:16:02:37:a3:8e:a7:d6:a7:32:f7:d1:84:5b:bb:ff:
         4c:99:a3:ff:88:5d:28:2d:15:f2:b1:74:a3:1d:6b:ca:f6:b6:
         0b:11:93:ba:88:77:e2:0e:cd:ca:c6:4d:c7:d0:4b:53:88:94:
         51:a4:76:54:6b:1a:72:62:f8:42:7c:ca:70:f8:4e:c5:54:7c:
         9d:1a:b1:ce:65:2d:74:9c:29:7b:8b:e3:0a:70:1d:7c:c8:a5:
         6a:b0:a8:34:a2:32:96:a0:33:8b:80:54:8a:32:44:e8:1f:66:
         6a:ab:d4:45:09:c5:66:2a:36:9c:f9:4c:e3:69:08:9f:c3:22:
         80:f9:a7:78:26:95:6f:6a:0c:8d:a5:1d:71:cd:ed:bd:0a:2c:
         f7:0b:34:d1:17:0d:1a:ab:29:21:79:90:09:59:bf:37:26:33:
         76:4b:c6:91:2d:c1:dd:f3:07:22:d0:0f:5f:22:5f:ce:7c:66:
         e1:28:e0:f2:8e:dc:bd:e4:33:98:5b:30:65:4d:af:f4:6b:51:
         44:fc:73:3f:34:84:ee:dd:47:35:27:33:a5:c7:6f:17:ce:56:
         65:f7:19:5e:b9:c7:3e:89:3d:53:05:92:84:81:59:29:70:e6:
         98:c3:63:53:ab:8c:f2:94:05:b6:87:f8:b6:8a:3a:f6:0f:4c:
         03:c4:ee:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----