Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cc1ddec6-aa9e-3022-862c-f899edef20a7.roa
File:                     cc1ddec6-aa9e-3022-862c-f899edef20a7.roa (raw, json)
Hash identifier:          4Sa3rsXZyi8cp6gteIMjDMitj9lxyU24ULZ0rni3uE0=
Subject key identifier:   02:74:63:9E:92:82:A9:8D:9A:62:7A:04:48:7A:F8:5E:2C:74:CA:FF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858484C10EDC6D3624F3A141FAD80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cc1ddec6-aa9e-3022-862c-f899edef20a7.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     33491
IP address blocks:        69.243.180.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:10:ed:c6:d3:62:4f:3a:14:1f:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=2dfb3ad4-a131-4e5e-8af2-a06c574c1eb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:90:bd:13:68:7c:bc:b5:dd:a3:37:b7:b3:0c:
                    40:23:c8:27:68:a6:19:7a:6c:69:b4:a0:04:83:a6:
                    c4:69:0a:9a:47:9e:f1:73:08:f5:61:44:75:fa:28:
                    58:e0:9f:f3:11:f6:b8:01:e2:d8:73:56:e8:ca:01:
                    d4:72:5e:a5:24:14:6c:5b:72:51:49:82:3f:41:5d:
                    fb:0a:b0:22:d6:3a:7b:09:36:0c:05:bd:dc:dd:81:
                    2d:37:43:13:47:d4:8f:26:a2:78:6f:d9:45:70:0d:
                    da:26:32:76:be:c8:01:2e:73:dc:75:45:43:5e:3f:
                    11:6a:f6:ef:a3:64:5e:d9:7c:59:b7:ba:36:23:c7:
                    79:a0:75:b8:ac:93:52:7b:f2:6f:09:84:26:85:9b:
                    59:78:9c:cb:3a:5b:37:92:39:09:35:f2:59:ae:e5:
                    08:c7:2d:cd:06:75:b6:c3:df:7a:3a:b3:bc:cb:60:
                    6e:3b:c0:2b:6f:06:ca:e5:17:4d:6d:dc:da:74:37:
                    1e:a9:f7:38:05:ed:3a:23:75:f0:77:b7:95:a2:24:
                    6c:c3:b8:ae:9f:ed:3a:a7:f5:40:6c:27:31:74:29:
                    ff:56:50:d9:98:64:d7:12:67:09:ee:29:8c:6a:05:
                    9c:90:e0:37:a6:89:aa:80:2e:db:2e:16:8d:6f:8b:
                    f2:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:74:63:9E:92:82:A9:8D:9A:62:7A:04:48:7A:F8:5E:2C:74:CA:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cc1ddec6-aa9e-3022-862c-f899edef20a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.243.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:5c:c7:98:97:3b:25:9d:cf:7e:dc:c0:50:dd:11:fe:59:bb:
         dc:d8:c0:c0:e1:b9:81:51:f4:9a:74:a4:73:8a:91:1b:ae:2c:
         de:5e:37:76:e2:87:6f:17:83:e5:c6:0f:48:fc:33:96:cf:bf:
         78:dc:52:ff:de:3e:2a:4f:fa:ba:7e:88:21:c2:ae:32:30:c7:
         d8:71:73:de:ef:90:8c:a2:04:ae:88:87:62:cc:ef:20:36:06:
         c7:c2:71:e0:fb:f7:42:16:39:4a:6a:b1:0d:cc:3c:81:70:1b:
         f9:bb:8f:03:34:fe:1e:cb:0b:34:3f:07:83:e0:21:8a:4d:71:
         1b:10:17:7c:8d:20:1e:b3:25:fe:9b:2e:5e:65:4f:4a:fd:2b:
         8b:3f:4e:fa:71:14:70:d8:2a:a5:b6:a3:2c:a8:a5:0f:7e:f1:
         28:79:83:96:5f:fb:a7:9d:a3:f1:90:17:a4:34:dd:1c:4b:ce:
         6d:5c:c9:b6:21:d0:e9:df:36:19:9b:23:b4:25:4b:33:a6:55:
         e6:82:cd:fc:ad:cf:71:d4:18:d4:f7:86:80:7b:3c:b3:eb:bf:
         2d:8e:f9:84:c6:d7:f2:1c:ae:ab:b3:5c:68:39:c3:1e:d0:f5:
         dd:7f:af:5b:8b:58:81:5d:a8:a3:27:f8:a8:43:ad:7d:0e:44:
         10:b5:c8:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----