Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/c1be6e65-98e4-3db0-9c6b-e982162e2022.roa
File:                     c1be6e65-98e4-3db0-9c6b-e982162e2022.roa (raw, json)
Hash identifier:          vbvEKMSHGV57efFr3W2DnkltxTd8ecvYyy/a2U0kyxc=
Subject key identifier:   C9:52:07:3F:EA:6D:28:C6:26:1E:E7:01:45:2A:C1:28:BB:F2:18:FE
Certificate issuer:       /CN=74b24643-d6d5-4d2a-b885-83160dec7103
Certificate serial:       010D0C9F4328584802150669D5EA6FD46B312B00
Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/c1be6e65-98e4-3db0-9c6b-e982162e2022.roa
Signing time:             Tue 26 Nov 2024 14:00:39 +0000
ROA not before:           Tue 26 Nov 2024 14:00:39 +0000
ROA not after:            Mon 24 Feb 2025 14:00:39 +0000
asID:                     42
IP address blocks:        2001:500:15::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:02:15:06:69:d5:ea:6f:d4:6b:31:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103
        Validity
            Not Before: Nov 26 14:00:39 2024 GMT
            Not After : Feb 24 14:00:39 2025 GMT
        Subject: CN=9eddd692-641e-4964-91a9-f21ffc820842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:49:77:da:f9:b2:0f:e7:46:e9:ae:a7:41:99:
                    5f:84:5f:14:15:ef:d2:56:1a:63:cd:c9:ce:b9:f3:
                    55:55:dc:48:4f:b4:e2:60:2f:7b:e3:68:13:24:1a:
                    d0:ec:11:a4:b6:74:85:7f:ec:8e:82:44:1a:13:9b:
                    05:9b:38:de:31:6b:14:4d:9b:c7:e3:d9:ef:d7:af:
                    ca:ce:d3:75:a4:6d:76:5f:2f:a4:cf:ec:43:f6:0c:
                    df:bd:42:16:f2:04:56:79:d3:de:c3:27:6c:b8:ef:
                    2b:75:d9:bb:36:2e:5f:02:62:07:50:74:47:75:3c:
                    f1:ac:3d:49:c7:36:0d:2c:a4:48:d0:27:e7:c0:1c:
                    5e:02:c8:5c:37:4d:ec:ff:f5:bc:65:68:e0:1f:0c:
                    30:97:b9:05:86:95:2a:a4:c0:2f:2f:02:01:91:d9:
                    36:f2:7d:0f:6a:0e:57:c0:c6:31:13:1f:34:f0:40:
                    5e:ad:63:8e:d2:35:42:15:9f:87:4b:c6:f5:a2:e5:
                    30:8a:e9:37:11:2d:93:da:81:5b:d7:1d:54:79:1c:
                    68:86:43:2d:30:4e:bc:fa:ba:10:e4:94:5e:3f:23:
                    e0:c1:ab:b8:e0:2d:31:52:ab:7b:06:ba:3a:78:49:
                    83:74:24:ed:bd:52:e0:b3:06:11:6a:fc:a5:b2:3a:
                    6a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:52:07:3F:EA:6D:28:C6:26:1E:E7:01:45:2A:C1:28:BB:F2:18:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/c1be6e65-98e4-3db0-9c6b-e982162e2022.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl

            X509v3 Authority Key Identifier:
                keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:15::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:24:19:e0:ff:04:f6:d8:be:30:13:64:bf:17:12:c2:16:ff:
         5a:d4:71:37:cb:d6:b0:32:44:ed:94:ef:77:4e:e3:81:fd:3b:
         d0:ad:67:4c:fc:5a:13:c3:df:f0:ac:ec:1f:90:5d:e5:3a:dd:
         8b:f0:bc:42:69:7b:e0:8b:72:53:44:a3:bb:75:f6:0a:90:f4:
         ff:b6:6b:a5:0d:37:8b:e8:21:46:46:42:97:8b:b5:0d:74:49:
         c6:04:24:d2:34:37:2e:f3:1c:4f:be:57:ac:b8:bb:8f:fe:db:
         f4:4e:d9:37:7b:e2:99:b7:a0:6c:92:f9:e0:a5:17:65:cc:40:
         b0:13:4a:da:12:d2:71:96:4e:53:28:2c:89:65:ab:dd:7b:fe:
         32:e1:ee:30:17:91:cd:bb:9c:76:3d:e6:a1:88:48:fa:88:5d:
         a0:f3:28:90:1b:ff:a7:62:3a:48:a9:a8:a1:22:1f:6e:fb:7a:
         b5:b3:4e:27:09:9e:2e:ce:88:7d:fd:a4:6b:bb:73:c2:64:5f:
         3a:21:0a:b9:83:8c:bd:7d:9c:65:b7:a7:be:77:e1:0f:ee:42:
         16:3e:d9:1c:50:a2:d4:5e:cd:9f:be:c7:cb:e0:7f:9a:cd:3c:
         a2:de:f4:4c:1c:5a:6d:af:a3:f0:d4:2c:10:ae:b9:b2:7c:34:
         9b:1e:98:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----