Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c4639595-2b44-38fd-97ce-97429b6a83f9.roa
File:                     c4639595-2b44-38fd-97ce-97429b6a83f9.roa (raw, json)
Hash identifier:          mGQnI5kbkun9c+9a9atxhvtCW8RlUy1hj/XdZch2pbI=
Subject key identifier:   10:FA:41:CF:A2:F6:76:D7:41:1E:5C:1A:B1:6A:42:6A:2D:9D:29:62
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285847E094E397751A7399347EB2C0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c4639595-2b44-38fd-97ce-97429b6a83f9.roa
Signing time:             Thu 14 Nov 2024 14:00:40 +0000
ROA not before:           Thu 14 Nov 2024 14:00:40 +0000
ROA not after:            Wed 12 Feb 2025 14:00:40 +0000
asID:                     54113
IP address blocks:        157.5.114.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:94:e3:97:75:1a:73:99:34:7e:b2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Nov 14 14:00:40 2024 GMT
            Not After : Feb 12 14:00:40 2025 GMT
        Subject: CN=249e0999-c2f3-4496-bcb1-37fd6059d990
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:01:f9:d7:cb:b8:c1:b7:9f:27:ed:77:6b:c8:
                    a5:33:5e:3d:30:18:c3:be:bc:d1:81:94:3e:d8:05:
                    c8:38:a5:54:08:62:b9:9a:f6:bf:31:01:82:f6:55:
                    8e:73:fb:30:b2:64:0c:71:fa:13:f4:6f:71:c4:8f:
                    83:84:db:ea:9f:ee:15:df:ad:6f:a1:e5:0d:cf:f3:
                    18:fa:75:bc:9c:87:fb:20:3d:ba:10:c8:38:99:35:
                    08:dc:2d:47:11:da:8d:c0:6e:fb:22:34:45:3c:34:
                    12:cb:fe:c0:13:05:77:9a:1b:09:34:e1:0e:3a:b1:
                    d0:4e:96:cc:73:cf:3b:c8:2b:79:a7:1f:81:64:1f:
                    6a:92:f5:5f:9a:f6:5a:25:83:57:38:c1:ce:a2:0d:
                    56:05:2b:65:09:62:a7:11:45:a8:76:b1:0e:4e:5c:
                    a2:09:39:75:50:f5:3b:d1:cf:ce:61:e9:7c:91:f9:
                    f6:68:43:93:74:88:11:e5:3a:c7:bc:d2:9d:5e:9e:
                    a5:f6:d5:09:fb:21:55:07:32:17:cf:25:e6:ae:6b:
                    b4:9e:04:fe:36:8e:88:6d:c1:be:78:1f:66:d2:c0:
                    cc:ec:87:79:7c:62:f8:b5:a9:cf:09:72:8d:ff:bf:
                    2d:06:72:5a:fd:1e:77:03:0b:3e:5f:ac:f9:68:90:
                    ba:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:FA:41:CF:A2:F6:76:D7:41:1E:5C:1A:B1:6A:42:6A:2D:9D:29:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c4639595-2b44-38fd-97ce-97429b6a83f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.5.114.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:75:28:74:3f:f3:ff:9b:f6:e7:04:6e:a7:81:3b:58:6d:7c:
         d0:8a:71:c1:cd:0b:d8:93:75:7d:f2:60:74:ae:9f:32:33:db:
         44:57:5b:50:ec:6a:00:14:18:ea:f3:62:08:9c:bc:4f:bb:d7:
         50:2b:58:09:0e:c5:01:40:4c:5e:1b:5c:8f:90:92:fe:b0:c1:
         42:84:e8:d9:59:84:28:ee:24:b6:0f:e1:9e:5c:a4:40:7c:52:
         36:67:e1:1f:60:39:63:5e:1c:fb:cb:f5:57:91:3e:e1:ef:71:
         f1:43:85:10:8f:cf:cc:53:28:5d:3a:5d:76:e7:41:a4:eb:cc:
         bf:af:a1:24:de:b2:34:be:c8:b4:93:ab:2f:aa:86:1c:95:9f:
         e2:18:1b:46:8d:31:74:d1:46:49:86:5e:e4:cb:48:29:d7:a4:
         e1:df:7b:ae:2c:0c:51:f8:d0:93:36:ba:21:e8:6d:08:64:30:
         b6:8a:f4:63:96:af:c6:ed:78:f9:a6:d2:d7:62:dd:3a:a6:a2:
         cd:d0:ff:b3:0c:01:db:e9:30:69:9f:dc:1f:05:1c:33:fa:46:
         35:f7:a9:45:22:2f:83:74:cf:a5:68:c9:50:ef:b7:8a:68:fd:
         b8:fb:e6:88:0f:63:ce:65:e1:65:3f:bc:80:f3:e5:88:36:a2:
         32:c6:58:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----