Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/ac545d8c-567f-3bd2-9de4-897132765b2a.roa
File:                     ac545d8c-567f-3bd2-9de4-897132765b2a.roa (raw, json)
Hash identifier:          ARUT3L1hKMf16TC40oWhLmLMPk2fAwbyi8d+VUSHxlA=
Subject key identifier:   4C:C8:7F:9C:35:48:51:50:EB:31:01:1D:5A:C9:A5:E5:3D:11:A8:C9
Certificate issuer:       /CN=5d9499a7-dd73-4d28-b3ad-2813e1421c64
Certificate serial:       010D0C9F4328584839EAD042EEE146F2A4794680
Authority key identifier: 06:EB:41:40:D5:10:2C:DB:7C:0D:8C:E2:7B:07:16:5A:DB:30:92:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/ac545d8c-567f-3bd2-9de4-897132765b2a.roa
Signing time:             Mon 16 Dec 2024 14:00:51 +0000
ROA not before:           Mon 16 Dec 2024 14:00:51 +0000
ROA not after:            Sun 16 Mar 2025 13:00:51 +0000
asID:                     22135
IP address blocks:        173.242.8.0/24 maxlen: 24
                          173.242.9.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:39:ea:d0:42:ee:e1:46:f2:a4:79:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9499a7-dd73-4d28-b3ad-2813e1421c64
        Validity
            Not Before: Dec 16 14:00:51 2024 GMT
            Not After : Mar 16 13:00:51 2025 GMT
        Subject: CN=78a3ca98-0762-4bc1-99f4-f794c392799e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:33:71:fa:f2:cc:2d:d8:2b:ef:f6:2f:e9:1f:
                    c6:60:8c:be:96:aa:1c:81:4a:f1:2f:1c:b4:de:36:
                    75:21:1e:13:d6:e4:92:5c:62:bd:37:0e:76:ec:ab:
                    c8:a7:09:00:8f:c1:55:cf:bb:eb:80:da:75:fa:22:
                    43:c6:34:ea:d5:53:22:b6:3e:3f:c6:a2:cb:0d:8e:
                    1a:b0:79:7b:e0:3b:5a:83:b5:50:34:d3:bd:f9:ce:
                    7a:ce:ae:7e:2f:95:9a:d8:46:1f:dd:57:14:0d:e7:
                    0a:8b:1c:5f:e1:3e:4d:53:91:06:27:2e:fe:c9:8f:
                    c6:69:33:07:97:9d:0e:66:39:55:c7:46:15:05:46:
                    0d:91:72:3e:36:b2:05:96:fa:7f:c7:9c:1c:d6:e5:
                    b3:10:13:c6:8f:78:4a:0c:d1:9b:53:fb:c4:75:f4:
                    a9:dc:56:df:b1:c8:a4:47:e4:56:cf:bf:8d:41:03:
                    f8:a2:06:a9:35:d6:0c:9e:e8:ae:9e:4d:5e:02:0e:
                    a3:5b:c2:cf:85:e4:6f:a4:5b:6d:cf:b8:58:97:29:
                    b9:c9:a2:d5:ed:37:8d:01:fc:83:38:d7:87:23:7d:
                    7f:ad:1d:bd:d0:a6:1c:54:8f:56:21:5a:ac:e0:6f:
                    f6:1f:b0:31:14:ab:fe:47:5b:8e:a3:b8:37:d8:fa:
                    1b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:C8:7F:9C:35:48:51:50:EB:31:01:1D:5A:C9:A5:E5:3D:11:A8:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/ac545d8c-567f-3bd2-9de4-897132765b2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/5d9499a7-dd73-4d28-b3ad-2813e1421c64.crl

            X509v3 Authority Key Identifier:
                keyid:06:EB:41:40:D5:10:2C:DB:7C:0D:8C:E2:7B:07:16:5A:DB:30:92:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.242.8.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:a7:1c:4f:e6:c3:c7:01:db:fa:38:04:3f:e3:8b:0d:72:fd:
         42:6e:3d:13:d0:d4:40:f0:34:8a:c5:b7:90:eb:29:1e:04:cb:
         0d:b1:25:4f:95:f7:a7:0a:8e:7d:f6:db:97:31:fe:5e:03:79:
         8e:b4:32:12:6b:3c:8c:8f:e1:09:6d:17:ad:94:91:9c:04:4a:
         c9:c9:93:1a:19:2d:64:1d:a6:45:6e:a4:d5:04:4c:45:5a:4f:
         2f:25:0d:97:bf:bc:d3:8d:5a:da:3b:3e:95:7d:eb:cf:8c:26:
         bc:26:b1:c4:2c:03:4d:a8:ff:6b:98:f5:17:46:14:b8:76:61:
         e2:82:ff:d2:37:b9:32:d4:fc:e6:84:d3:15:12:ba:1e:d2:2d:
         24:b5:d5:1a:d1:3d:09:83:e3:e1:8c:27:eb:6c:31:30:f5:88:
         34:4e:04:bf:af:b3:3d:e8:bb:9f:4e:54:95:2c:0a:71:ec:f9:
         04:db:49:6b:fb:b9:46:a8:60:e2:bd:4b:a4:c4:d0:a0:08:91:
         0b:f4:bd:55:45:42:46:bb:83:54:d2:f8:c7:18:2f:f5:c2:80:
         fe:63:62:9c:ef:6d:16:c0:07:04:ef:38:05:66:68:f7:49:eb:
         98:b1:42:bf:5b:f6:e9:f3:28:6d:e5:a9:29:b1:83:80:2e:a3:
         05:8c:8a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----