Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7ec8cdde-d9bd-30e4-bb30-1156e926fde1.roa
File:                     7ec8cdde-d9bd-30e4-bb30-1156e926fde1.roa (raw, json)
Hash identifier:          P/2wlNQmy7ii/xCoScnJfy1fAAxS/W6ps9tGgDjLDk4=
Subject key identifier:   2E:09:B7:8D:32:10:96:E6:A9:1F:A5:F4:41:83:5F:13:BF:38:A7:69
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584840E5672C9EDC14EC357C1BC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7ec8cdde-d9bd-30e4-bb30-1156e926fde1.roa
Signing time:             Thu 19 Dec 2024 02:00:39 +0000
ROA not before:           Thu 19 Dec 2024 02:00:39 +0000
ROA not after:            Wed 19 Mar 2025 01:00:39 +0000
asID:                     7725
IP address blocks:        24.30.92.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:40:e5:67:2c:9e:dc:14:ec:35:7c:1b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 19 02:00:39 2024 GMT
            Not After : Mar 19 01:00:39 2025 GMT
        Subject: CN=56ddb11c-e702-41f3-b277-2bfd117ed30f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8f:82:35:5f:b9:ec:c4:b6:d5:fc:27:48:9e:
                    93:7e:cf:f7:8f:ca:1b:09:2e:b5:22:2f:6f:af:5c:
                    d8:c9:3a:90:00:4e:39:32:d1:9d:7e:68:08:a1:a0:
                    71:ce:a0:46:5a:d4:31:f3:a6:e1:64:75:dd:18:a7:
                    a4:16:c5:0b:31:f4:18:9c:a4:73:ae:c8:2d:56:57:
                    7c:08:35:e3:aa:9b:21:81:84:ac:a7:cd:6f:db:98:
                    7d:4c:ca:6e:d1:a9:2e:fb:3a:9d:c1:66:ae:1c:77:
                    39:5e:0c:c3:5a:5a:1c:6d:62:1b:9b:35:ff:e0:bd:
                    33:43:17:61:40:47:35:31:d4:d8:5c:78:7a:90:87:
                    63:6a:13:f2:dd:e0:ff:6a:fc:8b:4e:fc:f7:dd:cc:
                    c5:60:1b:32:c5:45:a4:67:d5:15:fe:c2:13:7f:c7:
                    5e:83:d4:07:fd:4a:47:e2:d1:27:a2:2a:47:89:1e:
                    e2:50:ce:82:c0:4d:d6:e7:7b:ae:37:92:05:9c:1e:
                    cd:6b:f2:db:59:dd:07:68:be:de:e1:61:f0:67:8a:
                    89:5e:dd:63:92:c5:37:66:29:5c:8a:71:a4:a3:e1:
                    b4:29:1a:b0:1c:cd:fe:3e:d2:0c:d3:89:fd:0c:77:
                    82:d2:8f:37:c6:66:78:93:32:99:b8:3b:da:d4:56:
                    07:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:09:B7:8D:32:10:96:E6:A9:1F:A5:F4:41:83:5F:13:BF:38:A7:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7ec8cdde-d9bd-30e4-bb30-1156e926fde1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.30.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:b8:cd:e1:d9:6e:d4:2d:54:33:54:69:70:91:d8:14:3e:24:
         55:6a:6a:54:f4:6c:c6:3b:ba:c8:cb:4d:b2:6f:0b:ee:c0:82:
         ba:fd:d0:0f:a1:6c:2e:70:da:a9:bd:be:54:4e:15:ae:64:32:
         81:b0:61:c2:21:40:8b:7f:f1:7a:37:3a:91:02:bc:6a:84:3f:
         ec:4b:cc:00:89:c5:ab:ff:ee:92:2a:cb:ea:e8:d5:53:05:04:
         94:95:db:ce:6d:cd:fb:94:a7:83:a6:89:2b:33:a5:91:79:c6:
         37:d8:1b:59:22:63:50:23:66:8e:de:8d:66:dc:45:53:b9:67:
         79:65:c9:39:a2:a9:2e:32:9c:d0:4c:5c:f9:ef:ab:d0:67:54:
         41:7a:4e:7e:11:ac:15:49:12:a2:cf:7c:5c:ee:6b:f0:2d:9f:
         6e:c4:ef:d4:c9:70:f1:a1:47:7e:9a:4d:cd:30:ed:51:6e:49:
         ad:d3:ec:a7:ab:ab:f6:fb:a7:9f:cd:0a:dd:95:27:67:97:c7:
         df:e9:32:a2:ee:3e:eb:f1:8e:b9:bf:32:5d:35:e9:6b:6f:87:
         26:9d:cb:da:a7:9b:b2:51:7f:d6:00:bd:26:91:1e:23:50:43:
         e5:16:48:9f:ff:79:81:90:12:b8:2f:6a:b6:0f:57:1b:ef:e0:
         fe:83:47:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----