Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3d4d2593-f35d-3140-aa3f-05a01464bcb9.roa
File:                     3d4d2593-f35d-3140-aa3f-05a01464bcb9.roa (raw, json)
Hash identifier:          ywv95Qr0RvvVfX3R70uR0G4X/foMmInnfp2WcykKCxM=
Subject key identifier:   32:F3:22:C4:F8:B1:E3:A0:29:51:9A:F1:4E:50:EF:4A:0D:43:AC:B7
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858484C1036B741B7A9F618D0A380
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3d4d2593-f35d-3140-aa3f-05a01464bcb9.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     13576
IP address blocks:        23.26.117.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:10:36:b7:41:b7:a9:f6:18:d0:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=d726c91f-deac-4720-af33-e8962ec93f18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:77:4d:08:95:53:57:79:e8:7b:fe:8e:53:28:
                    6c:6c:bd:90:4f:aa:18:e1:60:a2:6e:35:2f:02:08:
                    69:cd:38:8b:1a:bc:fc:81:35:6a:b5:66:aa:6d:e8:
                    d7:29:aa:b0:91:21:e3:89:f7:16:cb:d7:55:98:51:
                    6f:9f:3b:93:5f:04:37:2a:7a:a2:cf:1e:4c:f4:9c:
                    9d:3c:fa:e5:c4:7a:02:b4:d2:f2:28:8a:e7:bd:6a:
                    88:13:43:c2:94:55:fd:00:3c:56:65:6a:34:5f:9c:
                    bd:50:9c:5c:e7:ab:17:54:72:bb:25:fd:c0:a9:6b:
                    6c:a3:83:55:14:f9:7e:88:51:b5:54:20:bb:e6:bf:
                    a2:cc:19:b3:b7:83:2d:f7:85:55:28:b7:d7:71:ec:
                    0a:84:40:47:0a:57:f2:b2:bb:ba:75:2c:0a:7e:11:
                    bd:bc:16:a3:9f:82:e4:03:35:39:3d:60:35:2f:f3:
                    fd:a5:84:2a:4d:61:24:2f:5f:35:19:d2:d0:a1:27:
                    64:b7:c3:ab:2c:b1:c7:9b:57:c4:9e:a6:19:a7:52:
                    bb:fc:ae:e0:46:d4:9e:2a:73:09:ab:08:9b:b9:d1:
                    e5:b1:2b:d9:2e:63:78:2c:93:8a:4d:d9:4a:35:b5:
                    44:e5:86:c8:9d:af:9e:63:75:e8:b7:ac:a6:f4:48:
                    af:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:F3:22:C4:F8:B1:E3:A0:29:51:9A:F1:4E:50:EF:4A:0D:43:AC:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3d4d2593-f35d-3140-aa3f-05a01464bcb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:6f:0c:75:17:40:11:10:c6:9a:51:b7:50:9e:e4:97:cc:2d:
         85:24:c1:b9:c7:70:d3:11:c9:9d:62:bd:fb:91:44:26:76:71:
         6a:f9:26:de:36:74:99:5e:8d:25:4b:0a:41:07:46:55:29:6b:
         bc:2d:3b:eb:a9:fb:ec:07:43:23:9a:90:4f:ac:e0:93:65:ca:
         52:87:fb:97:48:ef:83:4f:51:cb:b5:14:a5:b7:ac:17:a0:31:
         e0:ee:de:28:21:4c:de:2b:ab:6e:84:67:02:bd:18:2d:7f:53:
         44:57:fb:62:3a:fe:1e:e8:14:c5:57:70:7c:99:07:11:c7:7a:
         9f:f0:03:26:9b:8d:48:a4:17:af:4d:5a:21:4e:d3:2a:39:37:
         99:21:f0:60:8d:d2:13:69:fa:7d:5e:ca:24:54:7c:92:2e:95:
         a3:f0:17:7f:0d:31:ba:60:ac:6b:c0:73:07:50:23:41:f3:2e:
         bf:e5:fa:02:e8:06:90:28:1b:0a:92:fc:bd:ea:80:aa:51:6c:
         88:26:07:dd:d3:02:0f:8f:40:92:e1:f4:7b:ee:cf:d5:aa:b7:
         ad:1a:48:8a:5f:86:7b:00:9e:22:4c:dd:57:76:16:7f:06:18:
         8a:1f:f9:2a:86:7b:1f:2b:8d:f0:d3:c2:3b:a1:45:9d:00:6e:
         62:0e:cd:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----