Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/971963f9-d7d0-3de4-9fd9-4157e4c677c8.roa
File:                     971963f9-d7d0-3de4-9fd9-4157e4c677c8.roa (raw, json)
Hash identifier:          wErcK+GC72HMi2yH0mnRcSg2IcZyOTkQTx+TChO0sVQ=
Subject key identifier:   39:5F:0E:3E:EF:84:FC:7C:E7:88:F7:6D:F2:D5:E8:8E:DB:A1:C7:49
Certificate issuer:       /CN=74b24643-d6d5-4d2a-b885-83160dec7103
Certificate serial:       010D0C9F4328584802150687168912208B69A9C0
Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/971963f9-d7d0-3de4-9fd9-4157e4c677c8.roa
Signing time:             Tue 26 Nov 2024 14:00:39 +0000
ROA not before:           Tue 26 Nov 2024 14:00:39 +0000
ROA not after:            Mon 24 Feb 2025 14:00:39 +0000
asID:                     715
IP address blocks:        74.63.16.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:02:15:06:87:16:89:12:20:8b:69:a9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103
        Validity
            Not Before: Nov 26 14:00:39 2024 GMT
            Not After : Feb 24 14:00:39 2025 GMT
        Subject: CN=99f3d33c-8abe-4697-8d8b-b85e00203181
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:b8:b7:5c:e9:6d:8b:8d:d4:63:7b:da:41:4a:
                    e9:cc:20:5c:e1:4e:86:57:19:10:34:31:5d:a5:b0:
                    ad:14:69:cc:8b:2d:8d:34:53:76:c5:8a:e3:a8:02:
                    f6:26:35:d2:24:13:19:4d:a9:c2:06:48:23:5f:36:
                    3b:56:9b:f6:29:04:83:40:ad:29:fe:e7:44:1f:46:
                    e1:64:bd:42:bd:eb:c4:4a:55:81:f9:a8:67:f9:86:
                    5a:38:00:4b:ef:9b:25:7c:99:c8:96:5b:6d:d3:d1:
                    46:3e:2d:91:b4:c6:d0:91:02:2b:ed:ce:d0:e1:bf:
                    69:ec:f1:52:ca:87:47:ef:11:c4:5b:3a:1c:78:0e:
                    88:65:ef:76:b9:77:81:1b:a3:0e:e9:c7:9c:c5:aa:
                    90:98:b4:93:97:e0:39:12:84:91:3e:68:b6:43:77:
                    7b:95:58:95:2d:3d:12:ca:cf:8f:d8:57:a2:8c:ea:
                    43:08:f0:cc:dc:01:b8:79:12:cc:19:0e:a1:82:2d:
                    5f:20:a6:ee:d0:e0:5c:8e:f0:b1:f1:72:37:f0:1f:
                    3c:f0:37:66:29:e7:52:a4:c9:b1:9c:a8:6b:5d:13:
                    61:2a:06:41:59:5f:74:09:4d:e6:d4:22:64:a2:77:
                    4d:17:9c:56:0b:ec:03:a0:22:8f:b9:ad:9c:1d:a8:
                    6f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:5F:0E:3E:EF:84:FC:7C:E7:88:F7:6D:F2:D5:E8:8E:DB:A1:C7:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/971963f9-d7d0-3de4-9fd9-4157e4c677c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl

            X509v3 Authority Key Identifier:
                keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.63.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:76:3d:e8:6d:46:b0:ff:35:66:13:f9:70:88:2c:95:64:ca:
         e6:96:8e:84:6d:da:c1:0b:ff:ca:64:f0:e9:66:c7:8b:21:d2:
         11:16:a9:c5:6b:db:29:01:43:ca:0d:21:06:e7:09:c8:9b:87:
         ef:e6:fa:ab:73:18:69:20:14:24:d4:41:66:80:1d:66:49:86:
         40:d5:c4:ec:e4:7d:93:d5:64:87:51:e1:7d:a9:7e:76:67:86:
         cc:5e:ad:8e:be:f3:13:47:ee:ee:f6:d7:66:ab:6f:b4:10:b9:
         9a:46:e5:92:ec:d9:8d:8c:ed:0c:c6:a0:16:d1:82:d6:75:4f:
         84:84:a5:e7:c0:35:10:17:19:5f:b0:0f:16:36:39:c1:49:9e:
         87:5e:f9:15:85:20:4d:5f:b2:4f:08:2d:33:b3:1b:58:7f:50:
         f8:84:8a:3a:b3:ad:4c:af:75:7c:9d:e7:51:14:9c:64:3c:95:
         d6:ef:1e:ae:17:07:a2:49:62:ab:51:5e:da:f8:d3:f7:2c:81:
         65:e2:85:ed:f6:5c:18:89:a8:d9:87:38:7f:ed:7e:a8:b8:54:
         b6:d9:57:81:5f:40:35:6b:b4:10:ce:23:b4:a0:e7:63:8b:53:
         91:a1:79:09:14:f8:50:3e:83:08:9b:fd:de:9d:ae:5a:11:3a:
         65:12:6b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----