Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6b479303-ed3b-3b70-b038-38d3dcb51958.roa
File:                     6b479303-ed3b-3b70-b038-38d3dcb51958.roa (raw, json)
Hash identifier:          obhSdGwkvZCHqKdXDcmop6zKjPLFvtNjU5Lv/eh5Ero=
Subject key identifier:   63:B8:14:00:B4:F7:C4:A1:35:1B:10:4D:E7:D4:D4:00:F6:CA:FC:40
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584835BAA5037C33A29116498CC0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6b479303-ed3b-3b70-b038-38d3dcb51958.roa
Signing time:             Sun 15 Dec 2024 02:00:39 +0000
ROA not before:           Sun 15 Dec 2024 02:00:39 +0000
ROA not after:            Sat 15 Mar 2025 01:00:39 +0000
asID:                     13335
IP address blocks:        204.195.196.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:35:ba:a5:03:7c:33:a2:91:16:49:8c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Dec 15 02:00:39 2024 GMT
            Not After : Mar 15 01:00:39 2025 GMT
        Subject: CN=4ff66dc1-daf3-4a62-9867-d74736e36428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7e:42:ec:66:0b:3b:87:b0:ca:b6:bb:f2:9d:
                    5f:43:a2:db:40:1d:0c:fc:cd:42:b3:11:62:82:66:
                    b8:bd:5f:f7:7f:ed:a7:16:96:b7:1c:79:e0:0c:5f:
                    fe:0a:5c:ad:69:9c:34:62:6e:29:54:41:b7:9c:0a:
                    8d:be:0d:24:3d:cd:5e:5e:68:1e:7c:7b:c3:c1:da:
                    57:63:9a:8e:55:c0:77:31:ec:6e:d1:99:e8:7e:2a:
                    5b:d2:ce:ef:a9:2e:e4:ec:51:98:5b:48:1a:41:ef:
                    af:d9:db:49:5c:7f:b0:47:8f:bc:f8:c0:07:2b:63:
                    e5:a5:51:6c:b0:07:fb:88:33:8a:87:d0:80:12:b6:
                    27:83:c0:99:e8:6a:a6:a1:28:66:a9:33:8a:85:38:
                    bb:d1:77:c4:46:79:3e:e6:fa:c9:72:92:db:29:9e:
                    bf:b1:42:a9:0d:91:af:dc:67:8f:d7:00:18:4a:73:
                    f6:c3:60:9e:f2:35:fa:e7:44:73:81:11:4d:e4:f2:
                    1e:12:dd:3a:61:a8:e1:b2:3c:3c:d1:4e:28:12:02:
                    df:1e:b3:e7:0b:ad:cf:30:13:54:0b:ce:6a:e3:f3:
                    ee:82:6a:0d:65:38:21:fc:ca:fc:e9:0f:04:b3:b0:
                    a8:8a:f3:dc:f3:e5:69:e4:e1:e6:f7:c9:f7:a8:e0:
                    58:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:B8:14:00:B4:F7:C4:A1:35:1B:10:4D:E7:D4:D4:00:F6:CA:FC:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6b479303-ed3b-3b70-b038-38d3dcb51958.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.195.196.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:38:90:e9:1d:0a:e2:ee:e2:9c:71:28:fd:8e:9d:db:8c:74:
         09:4b:81:a9:43:7d:8b:7c:f1:e7:cf:ed:e1:3d:23:b1:b3:13:
         6c:4a:ce:29:7b:7b:7d:a7:67:12:34:09:62:57:27:ec:79:cf:
         aa:19:86:55:31:2e:a3:8a:52:3a:72:28:0f:1b:5f:34:b0:48:
         78:7e:90:69:de:34:af:1c:3e:81:9d:30:ae:be:dc:8c:bd:8f:
         7e:7f:31:bc:8c:5a:d6:fa:cb:d8:77:40:d6:f4:fb:99:fe:d3:
         65:3c:71:b0:92:06:78:e2:f5:6a:bc:0e:d3:c2:82:fe:d8:2b:
         3e:31:71:3d:59:d3:9c:30:32:00:fa:14:79:d7:90:02:0d:9a:
         9b:96:2c:4d:cd:9c:22:24:0e:d8:d9:80:c0:8b:db:c3:48:d5:
         cd:63:a1:22:85:38:18:b2:b0:12:93:db:cd:d2:45:21:cc:86:
         4b:25:e7:32:0d:79:ff:83:5c:f9:6b:ff:ae:d9:97:06:97:51:
         91:3f:52:3b:14:54:f6:68:14:1d:26:85:70:5a:7d:06:14:f5:
         51:b4:d3:ce:dd:0c:c6:f7:95:91:3d:10:94:c0:8e:1b:53:a0:
         7e:e5:e9:87:db:6c:60:64:0c:37:8d:c3:46:e5:a0:6c:8c:56:
         46:67:4c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----