Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fb140d9f-3941-3d05-b458-3b1bf60c2605.roa
File:                     fb140d9f-3941-3d05-b458-3b1bf60c2605.roa (raw, json)
Hash identifier:          cI7+b6wy+AuOrYeMpfVPVyCEsvFBRN15e7rFPxqJ7ys=
Subject key identifier:   41:3E:F2:0D:47:EA:31:B6:42:28:86:76:F6:EE:0F:6B:C3:3F:97:10
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285848280EFC38CB7A61A52802DE00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fb140d9f-3941-3d05-b458-3b1bf60c2605.roa
Signing time:             Tue 10 Dec 2024 04:29:25 +0000
ROA not before:           Tue 10 Dec 2024 04:29:25 +0000
ROA not after:            Mon 10 Mar 2025 03:29:25 +0000
asID:                     13335
IP address blocks:        162.158.248.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:28:0e:fc:38:cb:7a:61:a5:28:02:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Dec 10 04:29:25 2024 GMT
            Not After : Mar 10 03:29:25 2025 GMT
        Subject: CN=4e1fb4c0-188e-49dd-8710-d3bff00ca985
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:60:ec:8c:05:fd:ba:2a:bb:f8:da:98:c7:59:
                    ee:6a:a1:fc:ee:e4:2c:6c:3c:af:e1:3b:d0:84:01:
                    03:81:41:03:6a:94:12:14:a0:54:ef:cb:1b:4e:f1:
                    e9:25:ea:bd:7a:00:69:8b:3e:bd:58:82:31:22:d8:
                    3f:2e:64:ac:2e:90:f3:5e:d1:c8:e9:3f:ff:96:1e:
                    8f:08:c5:8d:f3:2f:b1:2d:c1:5d:75:5b:3c:0e:b7:
                    c5:99:eb:42:60:64:ae:18:59:b2:60:c4:8f:b1:8a:
                    d2:97:5b:3d:dc:88:84:7d:b4:d1:2b:70:19:d5:c1:
                    fe:41:0a:ec:bd:d1:da:13:f5:75:4b:15:e4:32:c3:
                    c1:4c:f9:ad:af:70:72:99:06:6b:9e:a7:ea:e5:30:
                    08:8c:17:40:57:da:c1:b1:fb:11:be:7d:47:46:f8:
                    1c:34:82:1b:c4:9e:10:f1:58:55:9a:4f:76:13:15:
                    31:1f:a3:5a:e0:84:09:1e:0e:b1:83:ad:fe:f0:71:
                    6d:68:41:5b:15:6e:79:c7:55:8f:27:98:2d:63:99:
                    b7:6e:ac:49:d8:a8:d8:b0:f2:43:66:48:74:60:23:
                    a6:23:53:9d:89:2b:90:03:14:ef:28:7c:a8:36:c0:
                    1a:b0:0c:12:87:81:cc:9e:01:de:bb:f2:81:06:0e:
                    a0:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:3E:F2:0D:47:EA:31:B6:42:28:86:76:F6:EE:0F:6B:C3:3F:97:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fb140d9f-3941-3d05-b458-3b1bf60c2605.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:0a:51:30:f8:0f:b8:43:86:31:ee:95:d5:14:1e:82:13:64:
         c0:d5:88:35:02:f3:cb:71:56:30:52:cf:7a:01:5c:3b:7d:24:
         62:76:b2:48:cc:0f:ab:b4:77:59:6d:a5:e1:b8:a8:0d:9f:ff:
         3c:82:fa:10:75:94:08:ac:56:b2:d0:f8:99:35:d8:3a:b3:ce:
         1e:87:18:fd:12:45:37:17:4a:31:e9:f8:13:85:59:ac:21:b5:
         af:5a:b7:21:fa:87:e8:66:5b:b9:10:08:a6:57:e6:47:07:d4:
         7d:c6:9d:a7:72:63:88:08:39:b1:7b:95:b9:49:c9:3b:1e:48:
         db:58:c3:f3:10:00:52:da:56:e6:71:01:a7:6b:87:55:af:04:
         c3:29:c1:f6:09:df:49:f3:71:c4:9e:11:8a:7e:0e:93:80:92:
         0b:f9:03:cf:69:6e:32:55:d5:7f:71:91:0f:3b:2b:8f:f8:41:
         cd:2c:41:6e:a6:46:71:b6:66:7f:93:f4:cc:a0:e4:8f:e1:ff:
         ed:6a:91:50:6d:cd:56:5e:a9:8a:b7:c6:0d:5e:67:b2:56:be:
         9c:93:47:56:b4:1b:c8:b5:e8:a3:cc:03:95:5c:f4:83:69:f7:
         33:ca:7a:c5:9f:d6:01:45:80:c6:f3:30:09:05:0e:9b:89:f0:
         0c:ae:56:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----