Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/cc509968-63d9-33f6-b60c-2664e0511e7f.roa
File:                     cc509968-63d9-33f6-b60c-2664e0511e7f.roa (raw, json)
Hash identifier:          BgSrzHGM6aF44lvjXA/dcTSQXxBsJCwYmZUo+3dssVA=
Subject key identifier:   CA:BA:7E:78:5F:A1:45:5A:B1:39:95:AE:62:D6:FA:37:F1:83:95:21
Certificate issuer:       /CN=8b53f56f-a586-4e85-9c61-c3a278e13120
Certificate serial:       010D0C9F4328584804DFBDF2864D5D12D15FE140
Authority key identifier: 21:7B:D3:C9:3D:20:C8:3E:73:66:85:64:B4:A7:2E:8D:45:27:DF:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/cc509968-63d9-33f6-b60c-2664e0511e7f.roa
Signing time:             Wed 27 Nov 2024 14:00:52 +0000
ROA not before:           Wed 27 Nov 2024 14:00:52 +0000
ROA not after:            Tue 25 Feb 2025 14:00:52 +0000
asID:                     16509
IP address blocks:        144.81.152.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:04:df:bd:f2:86:4d:5d:12:d1:5f:e1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b53f56f-a586-4e85-9c61-c3a278e13120
        Validity
            Not Before: Nov 27 14:00:52 2024 GMT
            Not After : Feb 25 14:00:52 2025 GMT
        Subject: CN=f6ff6744-46cf-4047-84f1-6ab02cc14007
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:74:9a:e5:53:63:df:56:b9:97:23:92:6b:6c:
                    1e:65:91:6c:d5:57:d0:a4:4a:8c:97:80:23:59:b8:
                    8b:ba:ba:38:e2:93:03:ec:86:c1:8b:63:3c:97:70:
                    61:37:f6:59:e8:61:1c:5b:77:99:fb:4e:23:8a:02:
                    44:e8:b4:9e:47:4f:72:df:4a:fd:e8:ee:af:a4:0e:
                    f6:1a:f5:e5:33:4e:22:84:ea:6f:52:10:6f:d8:f2:
                    ff:1d:5e:9b:42:3e:66:b8:f4:c8:8b:d2:be:ab:a2:
                    c7:9f:8c:93:b7:fa:28:6c:6a:bf:2b:cb:55:bf:ed:
                    ab:dc:d5:f9:74:4c:97:5f:ba:d6:54:18:c0:bf:a1:
                    92:c9:ac:a2:9e:43:ad:d8:09:63:d5:13:15:4f:1d:
                    44:14:36:2b:47:81:76:f0:93:30:f0:f4:d4:7c:e3:
                    4f:4b:56:22:12:bb:59:fc:96:2b:81:97:89:71:5a:
                    c2:92:23:51:a4:44:44:99:e9:35:95:00:06:32:80:
                    1c:6c:d8:91:b1:e0:32:57:ac:21:54:2b:5d:d6:e9:
                    bd:41:b5:52:10:b1:f0:9f:d0:48:ff:b7:9e:f1:dd:
                    d7:5b:9e:1a:70:ac:94:7f:41:b3:b7:d8:24:e2:50:
                    63:22:ff:ac:2f:17:78:8c:e3:17:88:ad:1d:21:9f:
                    fa:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:BA:7E:78:5F:A1:45:5A:B1:39:95:AE:62:D6:FA:37:F1:83:95:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/cc509968-63d9-33f6-b60c-2664e0511e7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.crl

            X509v3 Authority Key Identifier:
                keyid:21:7B:D3:C9:3D:20:C8:3E:73:66:85:64:B4:A7:2E:8D:45:27:DF:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.81.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:b8:33:32:f6:bf:32:75:46:38:9c:53:50:23:76:fc:ef:ba:
         18:14:50:6a:c9:85:5e:5b:8e:7e:73:78:8f:04:b9:75:5a:27:
         ec:46:b3:b9:20:ab:3b:54:fa:d1:2d:6d:ee:9f:ae:b4:9d:87:
         d0:2e:ee:a1:43:82:10:5f:bd:ba:7b:12:2b:c0:35:00:8c:01:
         23:d1:3c:42:62:7c:68:fe:3a:86:3f:e2:c8:bc:1b:8c:eb:1c:
         fd:dc:90:0f:3c:3b:c7:a5:9a:fc:64:d7:45:e2:7c:90:31:2a:
         ba:8a:a6:c5:bc:d0:d2:6f:52:74:73:33:24:cc:9a:ec:b0:6c:
         6c:ef:26:6d:a2:69:aa:33:ac:96:7f:97:68:3c:c2:67:95:06:
         90:c0:86:4d:66:9f:5d:57:d8:a1:1b:ae:ac:f6:0e:d3:33:2d:
         e5:da:35:ae:b1:14:50:b7:55:1a:8f:0b:03:93:52:79:99:75:
         41:53:7c:5a:78:96:a1:ec:3c:b4:e5:bf:51:81:5d:8b:c6:5b:
         0a:cf:e6:01:a0:21:d1:f3:b6:ac:02:13:3b:22:6f:f3:ef:be:
         77:38:ec:22:50:32:07:f6:1f:14:31:b8:bb:cd:2f:ce:2e:52:
         85:ef:1b:1e:53:d6:20:bc:ea:0b:f2:15:be:d9:45:63:65:71:
         6e:4c:a7:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----