Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40093bea-2ade-3806-9114-f2826ee55899.roa
File:                     40093bea-2ade-3806-9114-f2826ee55899.roa (raw, json)
Hash identifier:          hR3tyqEt2QPriwcQ/BqAd/5GKkl/UqHwCRFOGIc9Tvc=
Subject key identifier:   77:24:F2:BF:F7:15:1E:5C:95:A6:7A:46:B2:4D:96:DA:71:80:08:58
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6BCFCFD875FD386774FF80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40093bea-2ade-3806-9114-f2826ee55899.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     20214
IP address blocks:        23.24.160.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6b:cf:cf:d8:75:fd:38:67:74:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=4fcb9ab8-9f30-46c7-aeea-e8534cb4b0df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9f:2d:2e:1b:c1:26:2f:45:ef:b1:50:7b:f5:
                    c9:a8:5a:09:4e:27:de:d0:fd:68:ae:4e:ab:5f:d8:
                    52:20:00:95:03:ce:a8:96:87:7b:78:c6:ea:bd:71:
                    f9:6d:99:2f:67:76:b2:54:c4:58:a6:af:2f:a1:0c:
                    a3:fa:c7:1d:67:69:19:20:af:3c:53:a7:90:77:5d:
                    78:ca:28:1c:67:01:5b:5b:c6:ec:3d:7c:d3:1a:64:
                    b7:b0:06:31:13:a3:3e:1d:39:4d:ab:c2:69:f3:ab:
                    17:53:06:7d:e9:ee:52:14:73:34:7f:95:94:1e:53:
                    9f:e2:bb:b5:a5:bb:95:54:f5:a0:40:a1:5e:f6:fd:
                    76:33:b9:d5:53:16:3f:4d:fa:05:66:2c:f0:0a:67:
                    fa:04:15:64:a3:34:9e:a5:99:85:61:26:d0:cb:54:
                    8c:15:e1:46:66:06:4e:e3:a6:f5:1b:90:a7:2a:77:
                    12:a7:8f:ba:ea:e3:f5:40:62:63:34:05:16:67:f6:
                    e9:e5:6e:c4:fb:2d:d0:e7:b3:5b:cc:ba:83:7f:18:
                    4f:d2:6a:80:9f:38:8d:c8:ca:55:a6:d6:63:c0:06:
                    69:3e:c4:82:63:23:79:67:a1:3d:d1:c4:c3:32:e5:
                    ef:b9:e5:45:f1:68:7f:b7:46:89:9b:db:44:14:f4:
                    79:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:24:F2:BF:F7:15:1E:5C:95:A6:7A:46:B2:4D:96:DA:71:80:08:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40093bea-2ade-3806-9114-f2826ee55899.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.24.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dd:02:e3:3c:26:57:70:ff:2e:c4:a7:c4:ee:72:c9:12:bc:f8:
         fc:6b:33:25:e8:3c:34:e0:a0:b4:34:a6:a1:a0:a5:88:81:24:
         ce:48:bb:c3:51:9f:48:f3:b5:c3:a8:ab:7c:12:61:b5:aa:d0:
         be:9e:84:d6:c1:24:ee:a8:3a:49:7c:67:30:0a:e0:f7:d9:ac:
         07:8f:2f:e2:76:28:b8:82:5b:4e:16:43:82:d1:17:bd:5a:a1:
         0e:17:16:31:e3:58:39:d8:b8:7b:6b:66:eb:dc:79:70:30:aa:
         cb:7b:e4:0b:0c:85:76:f7:40:e5:e3:e4:d7:cc:87:8a:90:ac:
         a9:bc:1f:11:70:5a:59:95:66:77:1d:5a:6b:12:e2:6c:7b:e8:
         16:1d:00:44:de:c5:13:60:65:4c:ec:15:17:59:67:1a:a2:39:
         f9:86:79:31:26:01:ed:43:10:c8:ff:a5:86:49:43:a7:37:ed:
         fb:d4:62:b0:fa:71:dd:db:ba:2e:41:2e:1a:9b:90:d0:94:da:
         b7:e8:c6:2e:d8:fc:8c:9b:bf:03:46:68:0a:85:98:c0:10:c7:
         2d:80:2c:c7:1f:34:91:60:2b:dc:8b:46:4d:c7:2c:3c:6a:f9:
         db:17:6b:dc:6d:40:1a:ff:47:2a:c1:07:55:5f:50:2d:09:18:
         a2:83:4d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----