Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/83d3c129-8ecd-3b31-8f52-f199d8b7e300.roa
File:                     83d3c129-8ecd-3b31-8f52-f199d8b7e300.roa (raw, json)
Hash identifier:          2aoSUmURXtedjS1AAb5hcwYZDmMvuM2aTdwddaL4fm8=
Subject key identifier:   C7:32:7F:DE:CD:2D:1B:16:05:89:55:00:11:4C:E2:13:3F:1E:CF:82
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285848281C96DA52B2C65B17DB64C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/83d3c129-8ecd-3b31-8f52-f199d8b7e300.roa
Signing time:             Tue 10 Dec 2024 04:56:49 +0000
ROA not before:           Tue 10 Dec 2024 04:56:49 +0000
ROA not after:            Mon 10 Mar 2025 03:56:49 +0000
asID:                     13335
IP address blocks:        172.64.231.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:28:1c:96:da:52:b2:c6:5b:17:db:64:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Dec 10 04:56:49 2024 GMT
            Not After : Mar 10 03:56:49 2025 GMT
        Subject: CN=90cba43c-03b1-41a9-abed-8ead5bcac791
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8c:89:e2:fa:e8:4e:12:58:72:1f:4b:60:13:
                    5f:1c:54:58:e0:27:d4:c2:0e:38:e6:3c:7d:71:f1:
                    98:7b:07:fd:9e:65:ea:53:ae:55:2e:fa:2e:a7:74:
                    73:cf:32:bc:01:f6:6c:f3:96:2b:94:38:6b:74:5e:
                    17:40:c5:83:fe:63:2c:39:a3:35:8d:26:bd:3c:40:
                    17:be:54:bc:38:3f:d3:b8:02:25:65:18:f0:5f:87:
                    34:78:d5:0e:96:45:a9:46:84:10:73:7f:44:a2:df:
                    6b:d2:da:65:f8:ff:1c:e2:44:1d:61:d7:57:1a:8d:
                    82:8f:c4:d1:6e:32:74:78:a1:7a:98:82:4f:3a:07:
                    65:dc:b0:86:7c:07:5d:c1:15:a1:f3:80:b3:19:6c:
                    b7:06:27:85:41:c5:3b:de:2a:a2:a0:99:b5:65:49:
                    43:a7:5c:d1:0e:e2:40:e7:c7:ab:dc:be:7d:8c:77:
                    5e:dd:17:4b:6b:0c:0c:e7:29:e2:04:2a:ca:88:cc:
                    7a:7b:73:ba:63:41:d5:60:99:c1:0c:24:5e:83:c6:
                    bc:6e:5d:25:d4:e1:a2:73:e8:cb:f0:58:d8:b0:77:
                    64:d9:85:29:28:24:57:28:02:c4:8a:ff:ea:a7:ce:
                    ab:2b:97:dc:20:01:88:03:b3:3f:80:bc:b4:7a:e5:
                    68:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:32:7F:DE:CD:2D:1B:16:05:89:55:00:11:4C:E2:13:3F:1E:CF:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/83d3c129-8ecd-3b31-8f52-f199d8b7e300.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.64.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:e7:1b:57:76:5c:48:01:1a:57:28:bd:6f:00:63:1a:b3:de:
         ee:d2:01:80:28:29:de:75:06:3b:6f:aa:e4:8e:d5:3c:4d:b8:
         c5:41:17:b0:79:75:be:3f:92:bf:c5:65:d3:3b:93:91:ba:e3:
         02:71:1a:a5:58:d3:f4:bd:a4:bc:b2:cf:31:8a:ec:72:be:03:
         0d:0a:0f:1a:e9:85:31:7a:62:c7:76:16:d2:25:db:86:16:c9:
         79:d6:2c:d4:c3:01:01:19:5d:93:50:ce:e1:91:7f:f3:81:14:
         ea:b7:30:e6:51:71:51:68:e8:89:a4:a1:79:70:3d:f3:8f:57:
         8f:bf:09:ff:41:d7:87:c5:a1:2f:7a:f5:98:96:2b:0d:fe:ec:
         f3:8e:b5:59:ed:c0:af:3b:c7:ce:00:0f:2c:74:39:e6:d3:10:
         f5:84:a7:80:6b:84:9a:8b:ea:ba:68:ac:8f:87:8b:87:1d:5b:
         3b:8e:87:4e:77:db:6c:fd:10:60:eb:8c:52:e6:e0:81:3d:8f:
         b2:0d:87:69:7c:08:cd:69:fe:62:b8:11:6d:1c:ae:a2:66:68:
         a6:97:cc:f5:29:a0:99:4c:1f:c8:f4:11:df:0d:54:22:75:4c:
         8d:0d:81:13:0d:f0:91:d8:2d:55:d9:6a:69:4a:7a:a5:3e:a8:
         d0:03:27:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----