Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0863dfa3-d7c0-3abf-9291-07bf27e9477f.roa
File:                     0863dfa3-d7c0-3abf-9291-07bf27e9477f.roa (raw, json)
Hash identifier:          kfNuW7cnI+M3YtDjfQeMSeKXFV4ii87VBvBiS5JtQfo=
Subject key identifier:   0A:9C:F3:2E:01:D7:8F:56:A1:44:39:7D:BF:87:11:27:ED:2F:C7:4F
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F432858482A9937F3A8658384192154C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0863dfa3-d7c0-3abf-9291-07bf27e9477f.roa
Signing time:             Wed 11 Dec 2024 02:19:33 +0000
ROA not before:           Wed 11 Dec 2024 02:19:33 +0000
ROA not after:            Tue 11 Mar 2025 01:19:33 +0000
asID:                     13335
IP address blocks:        172.68.255.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2a:99:37:f3:a8:65:83:84:19:21:54:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Dec 11 02:19:33 2024 GMT
            Not After : Mar 11 01:19:33 2025 GMT
        Subject: CN=6a9369cd-0421-48fd-8150-9864d1058b8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d6:9f:05:08:4d:40:11:f1:13:56:01:1d:b5:
                    6d:85:40:a7:9c:fb:47:14:98:b8:ad:73:54:bf:5d:
                    8d:a4:6f:77:67:10:66:d3:fc:83:d1:bb:86:1c:46:
                    f5:c9:13:40:9a:3b:21:cf:1d:6b:d9:fa:95:04:c4:
                    2f:bf:65:5d:de:07:dc:0e:85:e6:02:b9:fd:bf:2f:
                    fb:e6:7d:f5:91:d0:ae:bd:2f:6d:c4:8e:7b:9f:1b:
                    c3:5a:63:b1:68:64:c7:71:ed:a8:75:35:5d:02:80:
                    e6:2f:46:fa:11:c2:f5:1a:db:6d:52:25:07:0f:60:
                    8e:d7:fe:99:f4:1c:43:22:b9:94:89:e7:50:a1:01:
                    23:5c:44:41:7a:49:25:d8:1b:e8:5b:ff:8f:7b:98:
                    9b:bf:82:8e:57:75:ae:53:3a:12:1a:0f:7c:2f:b1:
                    82:fe:92:eb:31:23:51:28:98:7c:b8:05:7a:07:15:
                    ce:1b:07:72:a5:d6:08:fe:a0:12:b3:dd:1e:1d:a9:
                    e6:a3:a2:f2:13:54:ad:e1:6f:f6:01:22:32:e0:3d:
                    c4:cb:9a:60:6e:84:46:31:b9:da:fa:de:d3:cc:3a:
                    b9:93:b6:ca:c7:96:81:0a:d7:68:3c:37:69:25:0e:
                    f3:90:a8:97:33:0c:f8:6a:2b:ef:2f:ea:92:17:55:
                    3d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:9C:F3:2E:01:D7:8F:56:A1:44:39:7D:BF:87:11:27:ED:2F:C7:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0863dfa3-d7c0-3abf-9291-07bf27e9477f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:2a:04:17:d2:2b:ae:67:b4:c5:f3:bd:24:a8:04:53:6d:6b:
         08:51:65:50:48:70:3a:5f:1c:04:1c:6c:d2:e8:c1:33:e7:f0:
         4a:92:f7:87:11:58:6d:dd:6f:a1:e0:b2:3c:4e:9e:04:71:fb:
         c1:37:56:c5:0d:58:e7:ee:95:de:60:ba:00:f1:63:69:4c:c5:
         76:52:ac:0f:7f:e3:26:11:40:83:3a:88:3c:d3:e5:06:d6:49:
         2b:97:88:47:ce:4b:1d:8b:84:28:d6:f1:b8:5c:e4:18:52:23:
         53:92:a9:d8:93:4a:31:6a:89:9b:a0:54:c0:af:0a:f2:3f:66:
         e1:69:76:63:1a:3b:e3:9b:52:fc:e3:d4:25:fe:32:2c:fc:5e:
         6f:c9:9b:27:89:f3:b7:42:11:e7:9b:07:3f:ea:d0:45:97:45:
         52:36:19:1f:2f:6c:c6:3e:61:ee:97:9d:88:88:a9:31:f2:b7:
         08:13:93:10:7e:70:ca:94:d6:62:49:09:4b:2d:14:a1:45:db:
         11:b6:6d:c0:97:51:bf:39:1a:c4:d8:75:dd:21:e7:94:eb:65:
         72:c3:e3:48:e0:61:8d:a1:5c:2a:28:bc:a5:b7:12:0f:0a:7a:
         47:89:73:95:9b:dd:33:19:22:58:c0:0a:82:e5:10:e8:98:79:
         03:5e:8d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----