Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5db0cc17-c481-407d-9215-071377019c04/837e29cb-5617-3d2b-b86f-d5176cfdd3af.roa
File:                     837e29cb-5617-3d2b-b86f-d5176cfdd3af.roa (raw, json)
Hash identifier:          pmuaFHflCh6Z5REcFkv1YEV+/5yF9kg2J5WqLY0QICU=
Subject key identifier:   71:35:49:71:5C:B0:98:81:E7:F7:33:1B:16:A8:C1:C0:81:59:9D:F9
Certificate issuer:       /CN=5db0cc17-c481-407d-9215-071377019c04
Certificate serial:       010D0C9F4328584835BA9AD48F63A938775BE580
Authority key identifier: C4:0D:B8:8E:8F:C2:2A:16:E2:19:1A:4A:F0:3C:84:CE:F6:78:5B:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5db0cc17-c481-407d-9215-071377019c04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5db0cc17-c481-407d-9215-071377019c04/837e29cb-5617-3d2b-b86f-d5176cfdd3af.roa
Signing time:             Sun 15 Dec 2024 02:00:39 +0000
ROA not before:           Sun 15 Dec 2024 02:00:39 +0000
ROA not after:            Sat 15 Mar 2025 01:00:39 +0000
asID:                     22252
IP address blocks:        2001:19a0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:35:ba:9a:d4:8f:63:a9:38:77:5b:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5db0cc17-c481-407d-9215-071377019c04
        Validity
            Not Before: Dec 15 02:00:39 2024 GMT
            Not After : Mar 15 01:00:39 2025 GMT
        Subject: CN=40f65601-531c-41e6-8060-c7b51ec0f0e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:94:3b:ff:4d:fe:11:4f:d0:92:66:ef:4e:77:
                    ad:aa:2a:a7:2f:16:d6:6a:33:4a:9b:0a:bf:b4:2f:
                    ef:a3:95:90:b1:bf:e3:9d:2c:ce:e0:a3:cb:10:e5:
                    c8:ef:64:28:fc:2a:a3:30:9c:d9:9e:1f:5b:56:eb:
                    21:52:37:74:4c:97:62:8a:32:d1:76:ca:99:44:dd:
                    59:25:cb:73:63:66:29:69:62:f5:ea:2a:7d:7c:70:
                    3f:3a:1f:ac:25:96:bb:7b:5e:45:b4:37:e8:05:5b:
                    c2:ca:88:dc:d4:93:88:6c:68:10:ac:31:06:3e:cf:
                    6b:ef:e5:7c:bd:89:89:9e:a6:03:0e:a9:87:93:89:
                    91:a0:dc:f8:77:53:38:86:9e:ee:80:4c:65:cd:d4:
                    31:1d:ba:34:d4:78:84:33:75:7d:61:c7:ad:d8:1e:
                    48:1e:2a:1e:fe:08:6d:05:9b:cb:e7:0b:aa:a6:15:
                    5b:79:8d:84:2c:2e:75:5c:46:b7:7e:2a:7c:d3:2b:
                    75:83:e5:a6:6f:c1:a3:ba:b9:18:7a:52:4f:4c:32:
                    1f:c2:7b:75:86:36:cf:b7:73:bd:b1:8c:50:9f:96:
                    48:90:5d:30:db:52:00:3e:7c:cb:72:5e:53:42:a1:
                    fd:fa:b5:fb:cc:f7:fe:14:9e:b1:c7:f0:6b:a9:ad:
                    60:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:35:49:71:5C:B0:98:81:E7:F7:33:1B:16:A8:C1:C0:81:59:9D:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5db0cc17-c481-407d-9215-071377019c04/837e29cb-5617-3d2b-b86f-d5176cfdd3af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5db0cc17-c481-407d-9215-071377019c04/5db0cc17-c481-407d-9215-071377019c04.crl

            X509v3 Authority Key Identifier:
                keyid:C4:0D:B8:8E:8F:C2:2A:16:E2:19:1A:4A:F0:3C:84:CE:F6:78:5B:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5db0cc17-c481-407d-9215-071377019c04.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:19a0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:e5:d7:3e:7e:c2:41:e4:09:7b:1f:5c:49:76:ad:83:94:e0:
         c1:1b:71:bc:80:ff:fd:0d:00:bf:3a:a3:e3:e6:e3:e6:a9:68:
         e9:23:db:b1:37:b8:8d:b4:35:c6:9d:8e:4b:4c:3f:70:48:46:
         b7:75:b2:a6:1e:e3:42:66:cf:39:48:7b:f0:05:7c:5e:45:ce:
         f3:b2:52:78:4b:97:c6:4b:ab:f2:f2:ed:30:40:45:0d:29:6b:
         61:53:db:a2:5b:6d:35:6a:21:0b:c0:50:58:73:1e:54:4a:1a:
         3f:0b:66:96:01:18:fc:2a:30:af:34:3d:3b:04:7c:78:64:7f:
         57:39:42:c8:b2:1d:dd:68:5c:99:46:bc:22:21:4b:6a:20:cb:
         7f:44:ee:8e:21:73:d8:2f:24:92:4e:19:43:76:73:22:64:41:
         93:fb:3c:bd:68:76:7f:02:5d:b2:03:b9:85:32:0a:da:1a:00:
         3d:72:75:98:a2:83:6a:21:e0:a3:a8:a9:72:dc:6d:14:18:cf:
         46:d2:74:21:fd:ba:db:0d:20:7e:ca:73:8c:3c:34:55:9f:ec:
         41:d5:5f:39:8d:54:eb:a2:24:69:70:be:f5:80:5b:71:0b:76:
         0e:5a:6d:fe:5e:e6:2f:cf:be:6f:c8:1c:7b:41:20:86:b9:5f:
         93:45:1a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----