Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247/710ca580-1dad-387f-97c9-134d9d0a2ed7.roa
File:                     710ca580-1dad-387f-97c9-134d9d0a2ed7.roa (raw, json)
Hash identifier:          a+AjWVbjP7WVr1Exxhyse+XySyuFHZBAnzD7+Tfs1aI=
Subject key identifier:   13:3F:9F:B0:FB:3C:3C:75:71:5E:1E:EF:31:D1:81:63:43:3D:32:72
Certificate issuer:       /CN=e7bb9775-9631-4be4-a9c6-11b8ddfe6247
Certificate serial:       010D0C9F4328584812D531EFE8A8EACC3D7F97A0
Authority key identifier: 42:CE:C2:66:75:1E:F3:81:F0:25:35:81:40:83:B0:04:D7:68:EB:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247/710ca580-1dad-387f-97c9-134d9d0a2ed7.roa
Signing time:             Mon 02 Dec 2024 14:00:51 +0000
ROA not before:           Mon 02 Dec 2024 14:00:51 +0000
ROA not after:            Sun 02 Mar 2025 14:00:51 +0000
asID:                     17216
IP address blocks:        67.212.0.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:12:d5:31:ef:e8:a8:ea:cc:3d:7f:97:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7bb9775-9631-4be4-a9c6-11b8ddfe6247
        Validity
            Not Before: Dec  2 14:00:51 2024 GMT
            Not After : Mar  2 14:00:51 2025 GMT
        Subject: CN=4d44eb12-502b-4012-a7b7-30744dd2db21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:f8:69:eb:1d:7e:2d:75:0d:f0:d6:c9:20:a3:
                    96:17:09:59:96:d4:7f:ee:23:30:2a:17:c0:03:11:
                    ea:a2:87:a6:3d:d5:8f:ad:d9:56:05:e0:7e:6c:ee:
                    04:a6:48:83:dc:8a:a4:34:49:3c:02:9f:ea:d1:ca:
                    e9:b4:61:68:08:46:c9:59:a7:ff:07:d4:48:47:9f:
                    12:87:cd:3d:78:a0:8b:c2:0b:8c:48:ba:bc:4f:d0:
                    44:d2:27:36:15:15:be:e0:f3:46:ef:36:a8:22:26:
                    a7:8e:f0:03:0e:8d:c0:16:ed:48:ac:ed:6d:e6:c6:
                    8a:51:8a:e1:1b:9b:5b:e9:8b:57:74:03:f5:1b:28:
                    78:12:8d:d7:71:5d:2c:d4:60:f8:89:63:ea:c1:1a:
                    22:44:9a:07:da:ec:8d:b5:b0:55:e3:3d:4c:ee:29:
                    46:52:b1:3d:43:b3:d9:83:10:51:25:bd:56:62:e8:
                    3e:fe:e7:c0:4a:1e:7f:a2:ee:ad:00:14:5a:ad:20:
                    42:4b:19:40:f6:39:49:b4:20:20:8c:7e:d4:4c:4d:
                    c3:c4:3f:f0:8d:e7:f5:92:8a:8c:d9:63:ea:9a:5b:
                    9c:45:c7:5e:ad:e0:9f:ad:93:37:9f:28:44:68:9c:
                    fa:29:00:23:41:d8:27:3f:fa:c3:84:54:a8:ac:aa:
                    8e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:3F:9F:B0:FB:3C:3C:75:71:5E:1E:EF:31:D1:81:63:43:3D:32:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247/710ca580-1dad-387f-97c9-134d9d0a2ed7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247/e7bb9775-9631-4be4-a9c6-11b8ddfe6247.crl

            X509v3 Authority Key Identifier:
                keyid:42:CE:C2:66:75:1E:F3:81:F0:25:35:81:40:83:B0:04:D7:68:EB:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.212.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:59:8c:14:2b:04:a7:82:00:bf:84:0b:d4:e3:23:c4:2a:ad:
         55:a0:e8:91:63:3e:ce:68:1a:10:d7:e0:d9:e6:18:33:62:ac:
         38:b7:05:4b:3e:a8:3a:29:a0:38:da:00:18:c8:24:3f:f2:c0:
         f2:63:8e:af:3e:d5:1f:2b:55:9f:b7:49:af:94:b9:0a:9d:59:
         8a:44:fa:ad:44:86:98:0a:71:b4:50:fe:3d:8c:17:14:0b:82:
         48:3b:b2:d3:e4:11:e0:ca:ac:94:98:ad:f2:80:14:43:e9:ed:
         41:d3:38:81:4b:9d:e9:9a:79:01:01:d7:10:43:08:8a:ee:cd:
         45:b1:37:57:5a:6b:de:d2:59:7b:a1:b0:56:47:80:7b:91:75:
         05:d6:80:4c:bc:ee:a0:c0:91:e0:5f:88:f2:1d:15:15:99:28:
         6e:2d:7d:da:35:5f:d0:5c:29:b2:3b:22:9f:07:0a:65:d1:7e:
         ee:f6:fe:b4:5e:dc:11:c8:9c:de:21:8b:ff:49:31:df:e2:81:
         be:0b:d4:34:e8:33:18:b2:85:93:f3:91:f9:60:7f:f8:05:ce:
         e4:a3:84:c3:18:40:37:50:24:c7:4e:89:fc:5d:20:3f:be:52:
         ef:13:61:22:83:87:e4:66:e0:26:bc:09:ab:f5:86:fc:f2:22:
         38:a3:c1:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----