Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f7495b2c-f98e-3507-8362-8b0505f1fca5.roa
File:                     f7495b2c-f98e-3507-8362-8b0505f1fca5.roa (raw, json)
Hash identifier:          kS+Za8wh+zZ+1oLsb4RmEXkeZsXc7qSrz2X9Q7Nhyek=
Subject key identifier:   DC:D0:59:29:A9:F3:94:9F:06:F9:2D:A5:1F:9D:95:35:96:D5:86:8A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858484C134B0FEC2739DB25163E80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f7495b2c-f98e-3507-8362-8b0505f1fca5.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     33651
IP address blocks:        24.5.244.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:13:4b:0f:ec:27:39:db:25:16:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=d1d93148-dd10-4020-ae21-93ccefb205ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ba:1e:dc:81:83:87:16:7b:f8:88:29:b2:9f:
                    83:a0:f7:cd:b9:4a:bc:4d:9f:35:64:a2:e9:ba:47:
                    3b:79:cc:8c:4e:5e:98:8a:62:b1:87:e5:49:b0:bb:
                    55:c7:10:e4:a7:9f:11:fd:54:3f:22:99:52:5b:c7:
                    b3:fa:df:12:b7:13:f8:31:a9:4a:2c:0a:be:80:69:
                    70:75:ab:5e:f8:98:e4:18:92:a7:dd:4f:3f:7f:b4:
                    d4:44:25:b6:5f:3d:90:9b:0a:76:47:55:36:ed:47:
                    31:9c:10:49:21:59:61:3f:6b:83:33:63:f2:9b:46:
                    b2:c6:05:81:e6:b1:9e:97:a6:f6:d0:db:df:3e:de:
                    b0:bc:bd:b1:73:bf:17:c0:f7:e0:10:70:26:69:28:
                    b7:d5:75:21:68:64:dd:26:38:e7:c6:36:9a:26:ec:
                    d4:ff:62:39:2a:48:fc:79:f1:7b:0a:7e:94:5e:cd:
                    48:c3:97:7a:f4:92:0f:68:a5:96:42:60:37:93:11:
                    42:a4:95:33:5e:fb:02:4a:dc:be:cc:d2:2c:a0:1e:
                    27:74:0e:55:aa:34:00:6c:4d:de:3f:a2:8a:7c:69:
                    c7:cc:05:45:8f:de:65:1f:21:c2:12:ef:c0:92:d8:
                    0a:98:26:1e:0b:07:36:0a:d4:b4:31:77:54:8b:05:
                    40:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:D0:59:29:A9:F3:94:9F:06:F9:2D:A5:1F:9D:95:35:96:D5:86:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f7495b2c-f98e-3507-8362-8b0505f1fca5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.5.244.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d1:9f:ba:09:79:b9:13:b8:b8:45:47:93:8a:1f:31:dc:d1:97:
         ff:8f:86:08:f4:bf:89:67:e1:2b:e0:e3:76:6b:f2:a3:1c:2a:
         57:c6:83:af:6c:88:7f:1d:f4:00:f2:93:3a:5b:a7:a2:08:b5:
         00:21:44:c9:af:4b:30:a8:5d:d9:a8:37:7c:a9:a5:93:85:77:
         b7:75:b8:49:4a:9a:6e:40:bd:56:ed:6e:5a:76:d4:73:8a:f1:
         a7:0e:ef:e2:71:e6:dd:f2:a5:61:7a:d8:94:5b:f7:20:85:ef:
         6d:bf:c3:c1:46:7b:d2:9e:e4:48:f2:e3:84:d3:71:7a:84:5d:
         c1:f7:f8:89:d1:50:76:be:0f:26:e0:2c:7f:31:f0:24:56:be:
         d0:37:7b:b4:38:d6:97:be:71:4a:5e:bc:4a:4f:d8:32:4f:1f:
         a5:3e:ca:74:ba:01:74:89:0d:90:a9:56:de:83:a1:f4:7c:bf:
         4d:c7:6c:01:03:e0:53:0e:4c:aa:1d:1a:71:37:47:b4:c9:2e:
         73:6c:2b:76:7f:b9:26:28:45:bd:8a:5e:7f:43:ab:d7:05:e2:
         7a:32:81:0e:c5:1a:6b:5a:73:d8:20:9a:b1:42:31:d8:d4:62:
         8c:3d:21:da:09:62:f2:f2:02:7a:0a:bf:22:e8:7a:65:c2:79:
         9f:39:cb:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----