Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6aad4443-6edd-32c1-a02e-69bfb2c56f8b.roa
File:                     6aad4443-6edd-32c1-a02e-69bfb2c56f8b.roa (raw, json)
Hash identifier:          JfuLVV9CS319/B43tRC2Hvf6nYbamRhuuiZhgpwnAcM=
Subject key identifier:   84:41:EE:AF:CB:60:E2:CD:DF:75:81:5E:ED:6D:C5:F8:C2:E1:41:D1
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584838855D8B8E508FBF1DD89600
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6aad4443-6edd-32c1-a02e-69bfb2c56f8b.roa
Signing time:             Mon 16 Dec 2024 02:00:39 +0000
ROA not before:           Mon 16 Dec 2024 02:00:39 +0000
ROA not after:            Sun 16 Mar 2025 01:00:39 +0000
asID:                     1225
IP address blocks:        129.250.38.192/27 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:38:85:5d:8b:8e:50:8f:bf:1d:d8:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Dec 16 02:00:39 2024 GMT
            Not After : Mar 16 01:00:39 2025 GMT
        Subject: CN=828cc18e-b442-48a2-b314-94083eb01465
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:28:40:4a:1a:09:da:b4:a3:f2:43:32:16:9b:
                    f8:3d:d3:74:53:fc:f0:c8:22:dd:0c:e4:6a:8d:bc:
                    13:b6:e3:ca:1a:87:62:fa:90:51:b0:31:cd:75:86:
                    32:46:2a:4e:d7:22:07:85:e8:f0:1a:1d:22:e9:e2:
                    df:3c:a6:30:e1:ef:47:fa:58:02:7a:a2:5d:84:eb:
                    5d:b7:40:62:a8:33:32:1e:04:2d:27:a8:f0:df:94:
                    6f:5a:50:c4:53:7e:93:92:9e:bc:61:2c:bb:cf:77:
                    30:80:67:78:da:72:72:e8:18:26:64:ba:2c:d6:56:
                    d5:e1:72:7f:13:3a:30:cd:7c:6a:e9:ae:82:69:cf:
                    ab:e4:3e:51:09:ec:6e:5b:02:97:da:b9:78:1b:94:
                    0f:8e:42:b0:cf:9c:73:00:6c:f1:26:6c:40:fe:ce:
                    b1:92:2d:94:9b:43:2f:8d:a1:f6:0e:5d:56:0e:41:
                    0a:37:5d:89:4a:8a:da:65:4a:7b:d3:53:40:8d:e1:
                    a5:1d:67:59:24:2c:fc:ab:dd:e1:56:de:d8:fc:ae:
                    89:f7:ec:12:77:8b:67:0f:3b:12:4d:15:26:2e:b8:
                    71:66:cf:fd:8a:b0:d6:a9:16:d5:0f:a5:15:44:d9:
                    88:50:d0:9b:0c:b7:ae:29:e0:88:e0:2d:b7:55:a3:
                    df:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:41:EE:AF:CB:60:E2:CD:DF:75:81:5E:ED:6D:C5:F8:C2:E1:41:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6aad4443-6edd-32c1-a02e-69bfb2c56f8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.250.38.192/27

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:f0:0e:74:c4:bd:e3:9a:f8:dd:ff:f9:02:47:3d:a8:43:68:
         8d:24:2d:9d:60:1e:59:d1:c1:c7:85:6c:ac:44:80:3b:29:d9:
         e4:3b:22:a8:86:74:d3:96:dc:41:cf:5e:67:c1:3c:cc:c7:33:
         8c:97:fb:80:4e:a7:7f:c3:51:42:e4:ac:a6:9c:06:77:2a:d9:
         94:d9:20:9b:61:37:a1:4c:9d:49:8f:22:ef:0c:e6:8a:93:c4:
         7f:6c:82:88:3a:1e:83:f1:92:2d:0a:d9:10:d5:a6:ca:ff:84:
         b5:40:e2:69:70:95:4c:c7:33:e1:71:8f:6d:70:6d:58:4a:09:
         8c:66:58:97:69:50:28:e9:82:04:c6:bc:2c:1f:96:f3:45:08:
         9f:08:7f:f6:91:4b:1a:32:3d:e8:05:6f:bd:15:45:83:56:41:
         d8:30:f0:a8:77:63:99:86:18:83:cb:a9:61:53:c9:2b:4d:c4:
         03:9f:d5:b1:ba:43:66:3c:6b:94:c5:4e:5b:fd:38:53:5b:f0:
         d0:26:fb:5c:28:5d:ff:b6:53:04:34:7d:d7:70:4b:86:79:59:
         d4:e8:40:f5:ea:e7:3b:21:d0:c3:dc:89:8e:ce:8d:54:db:fc:
         9b:95:c1:7f:d0:86:9c:3c:ca:71:0b:c0:da:d6:87:70:89:53:
         c8:0f:24:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----