Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c2360dd2-58de-396d-a5bf-5fdf5a7fff1f.roa
File:                     c2360dd2-58de-396d-a5bf-5fdf5a7fff1f.roa (raw, json)
Hash identifier:          BiF4pRjdoxnpeNlEYjaI8Kwuie8pfsIhWTgIaAZ6FI4=
Subject key identifier:   85:3E:C3:B9:8F:63:49:28:7D:9D:48:47:D2:BC:40:64:B2:1B:75:03
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584838855C956DEC2D6864561F00
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c2360dd2-58de-396d-a5bf-5fdf5a7fff1f.roa
Signing time:             Mon 16 Dec 2024 02:00:39 +0000
ROA not before:           Mon 16 Dec 2024 02:00:39 +0000
ROA not after:            Sun 16 Mar 2025 01:00:39 +0000
asID:                     1225
IP address blocks:        198.64.72.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:38:85:5c:95:6d:ec:2d:68:64:56:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Dec 16 02:00:39 2024 GMT
            Not After : Mar 16 01:00:39 2025 GMT
        Subject: CN=47b06390-ef2c-4620-b82c-2ecb815eab8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:6d:b7:6b:90:c0:35:c4:d9:b7:6f:09:9f:c3:
                    bf:8d:94:af:b6:9b:45:33:d5:30:f7:72:ce:14:c4:
                    85:09:53:52:c0:87:68:93:93:f7:2d:e7:3f:06:d1:
                    76:f2:fe:1f:0a:db:1e:3c:8e:1a:ac:de:ba:11:83:
                    80:ae:b9:11:8f:be:f5:74:fc:33:3c:aa:94:70:6c:
                    8c:c2:95:53:86:22:39:9e:f0:d1:d3:c2:09:a9:d7:
                    f3:43:95:8a:2a:1a:81:a5:7f:b9:de:c8:5b:f9:15:
                    33:4d:63:d1:2b:11:ce:88:4d:48:80:42:60:b3:f6:
                    1f:32:39:c7:bd:d5:82:0e:8a:ed:7a:e8:aa:53:c9:
                    c4:d6:93:c3:8e:59:8f:3f:5a:a7:52:76:7d:4e:c0:
                    5a:3b:7f:25:4e:42:d5:6a:ca:92:be:d4:6b:08:c9:
                    2a:c3:8a:26:da:f6:d9:c2:43:14:6e:41:09:8c:53:
                    24:79:d0:44:9c:8b:a6:22:d9:61:0f:14:05:ce:8f:
                    8e:ba:46:ad:5e:f1:7a:8f:ef:25:5a:b0:74:86:c8:
                    dc:7e:31:f3:ac:a8:8c:07:c2:be:c4:2d:15:c5:0b:
                    21:6d:a7:eb:df:5c:d3:17:00:d4:77:ac:aa:cc:fb:
                    84:a3:cb:52:33:b3:fb:cb:2f:d3:ae:a0:87:4d:cd:
                    94:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:3E:C3:B9:8F:63:49:28:7D:9D:48:47:D2:BC:40:64:B2:1B:75:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c2360dd2-58de-396d-a5bf-5fdf5a7fff1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.64.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:6f:b6:2e:55:16:26:ed:5a:82:3a:ba:65:22:15:3f:0f:60:
         b4:9e:a8:45:da:9a:9f:fa:14:b5:99:00:f5:04:2e:cd:66:1a:
         d0:7f:5d:b8:26:da:b4:3e:5f:4f:bf:f4:a4:bd:b6:bd:66:f0:
         e9:d7:eb:a1:48:50:17:10:95:43:81:29:ae:f0:df:e9:70:d9:
         98:bd:8f:c0:ae:5d:e2:7a:84:10:6b:cd:6b:3d:e4:39:37:5c:
         04:b5:45:23:61:dc:f4:5b:55:00:9d:ad:14:3b:59:4f:9c:d0:
         fc:cf:90:b7:f3:3c:de:43:a5:5a:d7:99:f8:9b:b6:20:1d:30:
         4a:2f:e4:78:5e:ca:cc:9d:e5:e2:8f:88:4b:95:01:3c:a5:0c:
         05:6b:75:8d:4e:26:f4:05:78:14:d7:28:d9:76:fa:67:64:64:
         1b:2a:01:4a:b5:16:b3:e9:61:23:2e:8d:77:35:f8:48:fb:92:
         07:11:0d:96:8d:9c:32:aa:ef:ab:c5:d5:8f:f0:a6:24:eb:4f:
         e5:aa:1f:43:d9:b4:12:db:49:6d:09:8a:bf:2a:58:5d:a5:19:
         0a:8e:b8:dc:41:96:55:a5:d5:2c:74:ab:14:ea:3a:a0:84:3c:
         51:ec:c8:36:a2:35:2b:67:ce:57:91:c8:42:87:1e:9a:7b:64:
         8f:db:c8:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----