Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9c210b0f-4118-3ebd-81aa-d03ad43a6c22.roa
File:                     9c210b0f-4118-3ebd-81aa-d03ad43a6c22.roa (raw, json)
Hash identifier:          q8qExcROEPlBrQbgjvTXn0LfJT2XbqsU9GlTv0qT2UY=
Subject key identifier:   6B:25:46:11:93:33:60:CE:F0:5D:FC:62:0D:69:59:ED:64:BA:CC:4B
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584830469D0806499F3FC1F40080
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9c210b0f-4118-3ebd-81aa-d03ad43a6c22.roa
Signing time:             Fri 13 Dec 2024 03:07:58 +0000
ROA not before:           Fri 13 Dec 2024 03:07:58 +0000
ROA not after:            Thu 13 Mar 2025 02:07:58 +0000
asID:                     13335
IP address blocks:        172.71.183.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:30:46:9d:08:06:49:9f:3f:c1:f4:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Dec 13 03:07:58 2024 GMT
            Not After : Mar 13 02:07:58 2025 GMT
        Subject: CN=3abb3927-1677-49d0-b78e-046b6d0c9cb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d7:28:a8:da:87:a9:53:89:bc:16:18:ac:27:
                    d5:c1:b8:bf:5c:c3:49:c3:ab:9c:2f:d6:e4:79:10:
                    8a:43:6d:0f:aa:ef:5e:6d:32:93:27:fa:11:e5:b7:
                    b8:34:0c:ad:42:2a:69:4a:4c:92:cb:0e:b1:2d:20:
                    24:28:c1:63:70:de:7b:c6:db:49:ab:9c:e8:d9:14:
                    38:fa:2a:8b:c5:44:4c:34:a3:69:8b:d9:0d:ea:90:
                    d7:e5:01:1f:f8:d3:95:f1:08:e6:fb:d7:1e:aa:19:
                    ee:42:17:c8:2e:58:b0:87:f4:98:9b:bc:04:dd:fe:
                    7c:b8:2f:47:b4:f4:65:1b:56:51:79:87:07:43:e9:
                    f5:a1:1f:40:50:42:e9:0c:ff:dd:97:d6:25:49:a1:
                    0b:97:c5:42:23:5b:bd:08:85:c4:15:e8:c4:a3:4e:
                    7c:ed:7c:e9:ec:44:ff:43:21:f2:27:f5:eb:33:11:
                    19:df:4a:5a:39:a0:a8:51:62:9a:6a:7d:e9:12:11:
                    8b:27:af:1e:de:5c:d2:48:f2:4c:c8:43:67:81:77:
                    a2:5d:78:23:d6:7f:fb:5c:39:a6:36:a7:bf:50:ea:
                    25:89:ac:cb:0f:28:0b:78:10:36:c0:3c:27:8e:15:
                    c8:ae:c6:df:76:02:76:df:0f:cc:66:2a:ea:d9:97:
                    2e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:25:46:11:93:33:60:CE:F0:5D:FC:62:0D:69:59:ED:64:BA:CC:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9c210b0f-4118-3ebd-81aa-d03ad43a6c22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.71.183.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:75:11:b3:32:47:c1:a7:6a:e6:99:ae:03:87:bb:52:ba:00:
         db:c7:b5:55:21:9b:c9:ca:7d:d7:e5:e9:19:1b:61:87:ab:03:
         4c:15:e8:9a:2a:60:eb:8c:1e:13:03:47:75:3b:07:7f:ac:df:
         0b:99:11:7b:4c:dc:b5:38:45:ad:7c:c8:0b:ad:d6:90:c0:c4:
         f7:a2:b1:62:21:64:98:7f:bf:44:13:a5:1f:16:af:47:86:53:
         0b:61:0f:25:56:65:83:d4:37:96:a4:5a:3f:35:e6:97:62:fe:
         9c:98:7b:f6:86:ff:eb:73:47:6b:45:9d:29:02:e8:21:f6:c6:
         76:11:a6:5c:a2:47:01:0b:01:79:40:04:b2:f0:35:ad:e8:24:
         3e:e4:27:e5:dd:22:fc:e5:38:21:07:8a:1c:ef:cc:04:4f:2f:
         a7:11:10:9a:ec:14:74:cd:8d:e8:b2:42:30:63:39:71:2c:d9:
         77:ee:64:f7:75:99:b1:67:ef:59:ab:16:47:58:58:bb:2a:8e:
         6d:3d:3f:c9:06:e6:cd:84:42:5b:ba:8a:18:a8:36:e1:85:84:
         2c:e4:04:5a:34:6d:3b:0e:7b:6d:e1:05:7a:bb:48:47:d9:8a:
         f7:19:61:54:06:55:86:a5:3a:18:dc:46:c1:5a:1d:4d:e3:a0:
         6c:ed:21:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----