Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3cc38345-6550-34c7-91a9-c41099c6e187.roa
File:                     3cc38345-6550-34c7-91a9-c41099c6e187.roa (raw, json)
Hash identifier:          VEKVssb9EqGNzLY2PTM338MNcPJqF3KAYNhtmMcGdkc=
Subject key identifier:   53:FA:0A:89:C7:DE:DE:D5:AF:1B:93:36:6D:09:03:02:66:63:88:21
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584838855D602A0CF12D87C9EFC0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3cc38345-6550-34c7-91a9-c41099c6e187.roa
Signing time:             Mon 16 Dec 2024 02:00:39 +0000
ROA not before:           Mon 16 Dec 2024 02:00:39 +0000
ROA not after:            Sun 16 Mar 2025 01:00:39 +0000
asID:                     1225
IP address blocks:        129.250.35.96/28 maxlen: 28
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:38:85:5d:60:2a:0c:f1:2d:87:c9:ef:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Dec 16 02:00:39 2024 GMT
            Not After : Mar 16 01:00:39 2025 GMT
        Subject: CN=e6a55103-316e-4e67-949e-2257750fdc3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:62:8a:1a:6c:71:25:f7:e1:14:82:f8:ad:41:
                    9e:73:65:60:0b:1a:cc:07:84:f2:cc:f3:35:3d:fd:
                    8a:b4:54:39:83:9f:e8:2f:f2:27:f3:26:04:6a:57:
                    40:45:93:7f:8b:ae:39:3c:78:d8:ee:e9:e3:51:3c:
                    11:6a:9d:d7:47:d5:5d:74:74:f8:c7:f2:46:05:28:
                    d7:e1:ab:d3:1f:50:72:26:2b:4f:9b:52:0a:b8:88:
                    34:cf:37:29:a9:55:ff:07:1e:35:03:1d:b9:03:98:
                    6f:fc:5c:c0:4c:3c:4f:f0:b0:1f:46:b0:b3:a8:14:
                    40:7c:cf:41:3a:0a:c9:f5:4c:64:aa:b7:68:e1:05:
                    c1:7e:8a:5f:e9:27:31:2b:d6:47:20:0a:50:5a:ce:
                    b5:3e:68:c1:b7:ad:57:61:8f:11:02:91:b4:be:f5:
                    89:0c:d8:eb:ea:e2:c0:11:70:43:ea:42:8a:01:ea:
                    fe:bd:a7:12:67:52:c6:96:d7:f5:53:2a:57:74:7f:
                    31:22:13:27:21:67:45:d2:c1:5f:a4:9d:0f:47:3b:
                    5e:fe:e0:a9:43:01:15:f2:14:e7:9c:6a:d3:57:c6:
                    df:e1:09:45:f0:89:62:0a:6f:02:f6:24:b4:50:8e:
                    d0:e5:05:92:1d:46:78:77:a6:6f:96:e7:b7:02:93:
                    45:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:FA:0A:89:C7:DE:DE:D5:AF:1B:93:36:6D:09:03:02:66:63:88:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3cc38345-6550-34c7-91a9-c41099c6e187.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.250.35.96/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:23:9f:67:09:24:8e:70:62:36:05:e8:4b:2d:84:f1:aa:81:
         5f:aa:3a:0b:e1:83:bb:b4:96:b1:5f:bb:b4:e4:aa:9d:a5:a7:
         a0:72:56:1d:f5:7b:35:d2:89:82:c7:f2:54:35:92:92:6a:0a:
         a0:ca:b1:12:20:3d:47:03:86:25:73:bf:a7:fc:d2:99:88:de:
         c8:ba:38:cc:7e:09:ed:1b:38:fc:04:d4:88:88:d0:2a:0b:47:
         9d:2b:7b:f8:a1:0e:1a:e9:04:d2:b6:43:5d:5f:21:f9:24:7d:
         c2:fa:a0:44:21:61:e6:48:fa:10:4c:be:08:25:27:cc:51:57:
         a6:53:4b:17:45:3d:40:40:3e:cd:11:f8:04:0c:6e:6b:8b:7b:
         db:9e:d2:dc:5c:39:98:a9:75:30:bd:03:31:f0:41:78:f9:8c:
         c3:47:08:b1:cb:2e:83:d9:af:f6:1b:ec:24:5c:e1:ec:d6:0c:
         dc:35:ca:12:77:49:d9:a8:22:8e:20:03:c0:94:94:56:86:e6:
         1e:b6:b8:6a:a4:fd:98:6c:ec:2d:6d:cf:21:e6:84:76:9c:0c:
         98:9c:a8:b1:ad:4d:c0:36:04:5f:a0:a8:b3:e2:2b:02:a4:fa:
         b6:f3:ae:97:77:b9:4a:d7:c8:6f:41:d0:f5:ca:95:f8:cb:07:
         f5:d8:96:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----