Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0e5b153d-1130-38fa-be18-dafeabd6c2e7.roa
File:                     0e5b153d-1130-38fa-be18-dafeabd6c2e7.roa (raw, json)
Hash identifier:          aMJcIrQk99PNcoEJsH00awuagsEnAue6MWRPxEwKWrE=
Subject key identifier:   67:4A:F6:84:3D:8B:A1:21:7E:4D:96:BC:C3:0A:5C:5A:89:77:74:BA
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584835BAA5119ECC1FC4703B9800
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0e5b153d-1130-38fa-be18-dafeabd6c2e7.roa
Signing time:             Sun 15 Dec 2024 02:00:39 +0000
ROA not before:           Sun 15 Dec 2024 02:00:39 +0000
ROA not after:            Sat 15 Mar 2025 01:00:39 +0000
asID:                     13335
IP address blocks:        204.195.224.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:35:ba:a5:11:9e:cc:1f:c4:70:3b:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Dec 15 02:00:39 2024 GMT
            Not After : Mar 15 01:00:39 2025 GMT
        Subject: CN=3cdda2ba-7dfb-4fc3-b858-896120fc7ca9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:6b:ac:7d:9e:a5:01:ab:9c:e4:5d:d1:15:75:
                    bb:a1:e0:8e:9a:33:d1:92:a5:4e:e1:3a:de:12:56:
                    d3:8e:dc:8e:a3:7b:1a:39:d3:12:9b:4a:34:c1:72:
                    3d:19:07:79:bf:f6:7b:d8:5d:7e:e9:c5:87:17:1b:
                    6e:bd:4b:4c:5c:61:a1:58:12:f6:33:ea:f5:33:70:
                    85:e3:c0:b7:80:c5:07:6b:9c:1e:fc:0e:0f:89:0f:
                    17:9f:c6:86:85:60:a1:6d:b6:08:a3:a0:79:77:0b:
                    e7:0c:dd:67:a7:41:dd:0c:ff:51:0c:d5:19:6c:71:
                    21:7d:b3:22:a3:9c:76:53:19:35:80:d5:9c:a9:8c:
                    8e:1c:12:a7:74:05:66:50:72:ad:a0:6f:aa:a6:49:
                    0b:3d:41:19:e0:55:47:63:59:14:1a:38:89:99:21:
                    1f:a5:19:7d:c0:07:57:a8:b6:33:62:f8:e9:af:23:
                    56:03:1d:6b:04:fe:fc:09:70:58:37:6e:ae:31:dd:
                    12:50:76:bd:bd:8a:27:6d:3b:80:d9:5b:4a:11:05:
                    05:62:22:ad:e0:a1:0d:eb:12:43:db:c6:6b:12:42:
                    2b:f6:3b:58:44:ca:40:80:9d:47:63:67:76:92:01:
                    18:7f:ef:59:e2:30:b6:55:d9:25:20:c0:32:78:95:
                    89:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:4A:F6:84:3D:8B:A1:21:7E:4D:96:BC:C3:0A:5C:5A:89:77:74:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0e5b153d-1130-38fa-be18-dafeabd6c2e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.195.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:bc:d6:fd:43:df:10:a6:c0:fc:2f:ff:fa:ec:68:a2:fe:3f:
         c0:06:b9:5d:c8:06:c1:75:cd:86:00:81:1d:f1:29:bf:f3:3d:
         f7:db:03:7b:a7:5d:45:41:c4:92:b6:56:43:e8:cb:17:dd:38:
         6e:43:82:ba:7e:df:b0:9a:3c:2f:27:15:4f:6d:7c:e0:83:a2:
         10:5f:5f:28:a3:39:fe:23:85:90:27:f4:47:a4:8e:a1:91:96:
         99:64:f4:f6:be:96:f7:e9:e1:8f:f5:73:b4:8a:82:8f:b3:38:
         7f:8f:21:12:0c:dc:13:73:2b:b1:21:5b:84:30:16:ba:e1:51:
         2e:b1:b7:ba:78:ca:ef:a8:45:a1:53:3a:7d:92:99:65:a9:5b:
         18:f3:da:7b:78:70:d1:39:24:b5:5f:64:54:ca:77:eb:5b:5c:
         8d:c0:5c:b5:39:e5:46:ca:06:4f:72:ec:e6:7a:f0:af:24:77:
         df:42:e5:32:b6:a9:e1:a3:8f:f7:d4:3d:ac:21:b3:85:70:d6:
         61:c8:a4:f8:f1:c0:8f:a4:9c:dc:ea:9b:9a:5a:86:e8:97:8d:
         42:5b:f1:a1:57:c6:3d:d3:ed:85:07:6d:4f:b5:f0:70:f6:55:
         c9:76:57:7c:21:1c:8c:c3:ec:9a:80:b2:3b:87:96:7d:34:38:
         9e:9e:17:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----