Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/69b28db5-1998-3d5c-97c2-f6e2b2b733df.roa
File:                     69b28db5-1998-3d5c-97c2-f6e2b2b733df.roa (raw, json)
Hash identifier:          NoE3UOvWTDTAazgW88f2VqBK+rHKjA6EgB2uGN8fHCE=
Subject key identifier:   5D:59:C0:18:43:56:2E:00:E5:7F:0B:56:86:1A:C2:7D:A5:72:63:B1
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285847E094D716E5C843BD41931700
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/69b28db5-1998-3d5c-97c2-f6e2b2b733df.roa
Signing time:             Thu 14 Nov 2024 14:00:40 +0000
ROA not before:           Thu 14 Nov 2024 14:00:40 +0000
ROA not after:            Wed 12 Feb 2025 14:00:40 +0000
asID:                     15169
IP address blocks:        104.134.246.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:94:d7:16:e5:c8:43:bd:41:93:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Nov 14 14:00:40 2024 GMT
            Not After : Feb 12 14:00:40 2025 GMT
        Subject: CN=9d9b51eb-73ce-4ab3-9560-ee2b4c324045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:88:5e:e0:48:b9:b0:ca:50:4b:c5:a2:04:13:
                    a1:b8:12:4a:b8:5a:52:be:c4:0a:57:5a:95:16:f1:
                    1b:40:f2:c9:8e:38:9c:88:5e:3d:f4:95:35:6d:74:
                    35:ed:91:f0:fb:64:13:3b:cb:ba:d8:10:65:c5:4e:
                    58:50:01:8d:2f:e0:cc:ff:a9:bc:d1:27:ad:ea:2f:
                    c5:d6:e8:85:70:c9:cf:94:2e:3e:e4:99:a6:38:cc:
                    0d:fd:9e:fe:d2:57:af:ea:fe:ca:77:0a:27:62:51:
                    0b:10:6a:17:c0:85:94:a5:dc:04:88:89:f8:6a:9c:
                    54:fb:98:45:0a:9b:b2:d7:85:40:6c:a0:d1:e9:fa:
                    cd:c9:1e:25:aa:44:61:53:10:9f:c7:e9:aa:92:46:
                    c4:f9:64:45:54:05:a7:7d:3f:a3:0e:0b:44:94:ea:
                    2d:99:29:be:47:ef:24:00:68:54:98:6d:a1:4d:f3:
                    5b:60:ed:b7:50:18:c1:a9:9a:52:0d:3f:fd:54:81:
                    cc:76:54:2d:3a:5b:dd:6a:11:49:ff:af:06:f5:80:
                    d1:73:e4:9b:11:13:ab:14:fe:9a:9b:83:3c:df:49:
                    63:6a:d4:ab:d2:b0:a0:03:79:5a:54:8d:4f:c9:4a:
                    83:03:de:be:22:4b:63:44:c3:4e:50:83:a0:65:97:
                    51:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:59:C0:18:43:56:2E:00:E5:7F:0B:56:86:1A:C2:7D:A5:72:63:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/69b28db5-1998-3d5c-97c2-f6e2b2b733df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.246.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:2b:5e:29:b3:3e:85:6c:5e:b6:94:79:43:7c:6e:f6:d7:9f:
         ba:10:4a:4d:ba:46:38:8e:49:9b:1c:0d:82:da:bf:27:be:9a:
         a1:a8:79:a8:13:e3:dd:96:82:d1:62:21:7f:dc:b1:b7:9f:55:
         b3:10:0c:d7:b9:1a:77:03:96:bb:da:d2:f4:16:9b:9a:9f:ec:
         3b:24:85:39:36:46:15:78:63:c4:b9:9a:9f:02:9b:fe:dd:60:
         e2:3b:28:7d:07:5b:b3:7e:74:88:5f:69:45:c3:37:b7:b3:50:
         a7:d4:ef:1c:d7:f9:4d:a5:12:ab:8f:3b:3e:72:1d:5f:21:28:
         75:92:ab:20:a2:4d:8a:fd:0c:2f:98:95:f8:0f:db:6d:88:30:
         c7:a7:df:8d:dd:87:81:e2:19:c0:cd:1a:19:b7:36:76:8f:a9:
         fb:36:f1:7a:fe:3a:f4:78:59:3b:ee:74:eb:26:d7:b9:df:e6:
         21:a6:6b:4f:9b:8c:f0:6d:83:d6:a8:a5:09:68:fb:f2:5f:c6:
         2c:f1:d8:90:78:7c:49:91:59:fa:e5:4e:84:77:b2:91:f2:f1:
         29:10:23:9a:3e:4d:2a:7f:26:4b:9f:5e:ac:f1:ff:89:2c:4c:
         af:5e:49:ba:dc:11:bd:be:70:0c:2b:02:f7:17:27:d5:77:2a:
         4c:df:ac:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----