Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0c1ef9c6-289f-416a-97db-f9a640a2b2e9/58bc9310-8333-309c-a89b-3169dac43274.roa
File:                     58bc9310-8333-309c-a89b-3169dac43274.roa (raw, json)
Hash identifier:          8+7plFq50uwfxdA/axDuf53s4nU4jDbXiUq2AEnB+R8=
Subject key identifier:   FF:CF:DC:FE:A4:C1:20:73:28:54:17:26:EF:5F:9F:DF:71:B0:8B:61
Certificate issuer:       /CN=0c1ef9c6-289f-416a-97db-f9a640a2b2e9
Certificate serial:       010D0C9F43285848090FBB4B5983B19661187200
Authority key identifier: 69:39:63:95:DD:5D:34:75:A2:16:12:5A:CC:D1:89:4D:58:47:9F:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0c1ef9c6-289f-416a-97db-f9a640a2b2e9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0c1ef9c6-289f-416a-97db-f9a640a2b2e9/58bc9310-8333-309c-a89b-3169dac43274.roa
Signing time:             Fri 29 Nov 2024 02:00:39 +0000
ROA not before:           Fri 29 Nov 2024 02:00:39 +0000
ROA not after:            Thu 27 Feb 2025 02:00:39 +0000
asID:                     15718
IP address blocks:        185.115.152.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:09:0f:bb:4b:59:83:b1:96:61:18:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c1ef9c6-289f-416a-97db-f9a640a2b2e9
        Validity
            Not Before: Nov 29 02:00:39 2024 GMT
            Not After : Feb 27 02:00:39 2025 GMT
        Subject: CN=e79ca510-2872-4822-b489-7b9b0291a4f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:06:6e:d1:fb:6b:82:90:d7:2c:87:c1:2a:c5:
                    5d:21:e3:25:8a:66:6c:b2:4e:3b:06:07:d3:5b:1d:
                    ff:55:95:10:d1:22:ac:ed:94:e9:1a:5c:a4:69:53:
                    00:55:af:17:aa:5f:08:40:b6:53:49:b8:a4:25:6a:
                    0c:20:52:58:77:7c:3a:91:ef:36:34:f7:35:d1:56:
                    9b:70:aa:2c:45:12:bb:b0:84:70:ea:c1:e2:33:59:
                    a1:4d:15:ae:da:f8:fa:ed:56:97:43:ea:20:d8:bf:
                    13:21:dc:17:3b:19:91:4f:f3:f8:c3:4b:00:1c:d7:
                    23:d7:7f:ed:f2:5c:ed:e7:ef:16:fa:5b:1f:e7:7f:
                    d6:23:da:1f:59:1b:57:7a:f7:fc:d8:88:ae:a7:75:
                    9b:97:69:65:26:2d:7b:3b:01:89:94:c9:c0:fa:b8:
                    bb:7b:96:e5:2c:ba:08:e3:85:bd:d5:1f:65:fb:88:
                    f4:3f:f9:b3:4d:50:d5:c4:11:72:33:1b:49:af:4b:
                    a6:bd:46:35:a1:ec:d5:d8:0d:11:22:9b:6e:4d:28:
                    20:02:b8:30:dd:98:49:5b:f9:0e:36:f2:14:83:1f:
                    65:29:04:ee:b7:7c:75:86:4a:2c:90:bd:ce:2f:9e:
                    b4:f0:68:6b:6c:c5:1c:ff:66:1d:75:33:5b:92:b0:
                    47:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:CF:DC:FE:A4:C1:20:73:28:54:17:26:EF:5F:9F:DF:71:B0:8B:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0c1ef9c6-289f-416a-97db-f9a640a2b2e9/58bc9310-8333-309c-a89b-3169dac43274.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0c1ef9c6-289f-416a-97db-f9a640a2b2e9/0c1ef9c6-289f-416a-97db-f9a640a2b2e9.crl

            X509v3 Authority Key Identifier:
                keyid:69:39:63:95:DD:5D:34:75:A2:16:12:5A:CC:D1:89:4D:58:47:9F:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0c1ef9c6-289f-416a-97db-f9a640a2b2e9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.115.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:7c:e1:0c:2c:d1:77:f9:4b:fa:52:69:7d:eb:7b:8a:b8:8a:
         07:b4:72:b4:38:01:80:b4:7b:2f:69:9b:ec:26:8a:e5:40:c4:
         72:ad:04:1e:19:af:70:fb:71:40:cd:fc:cb:15:3a:22:4e:47:
         43:bb:4d:c7:8b:ec:1d:51:76:6f:47:b0:c5:a4:d3:5f:e3:e3:
         c0:62:e5:d5:33:b4:9a:87:75:bd:5a:80:db:87:21:da:27:d2:
         34:4d:9c:5d:b8:94:2d:9e:0b:0d:24:d5:84:ff:d5:32:43:f4:
         c6:4e:13:a5:31:63:63:e4:0e:c1:15:6d:8b:9a:43:5e:66:29:
         64:8b:80:08:69:c3:2d:77:86:3b:1a:4e:a8:e0:2d:47:32:83:
         e6:5a:2d:99:5b:d1:79:c8:6a:64:eb:ce:a4:f7:27:cf:68:3f:
         8a:97:ce:39:62:81:e0:7d:ac:0c:30:9a:92:9b:92:88:df:6e:
         07:6d:83:84:43:c5:bb:f0:54:5e:2c:c8:a0:ad:91:e7:9d:30:
         cd:92:58:25:42:58:35:f1:f5:77:e8:46:76:10:80:e6:cf:d5:
         f9:9b:c5:53:76:f2:e7:4a:06:88:85:ce:3f:db:8a:85:00:6f:
         1b:f4:c0:d2:9f:19:34:0a:51:02:bf:4a:3e:92:59:8f:01:4d:
         11:cb:ce:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----