Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/14f63f23-4dd6-39b4-bee1-1cf1a112b843.roa
File:                     14f63f23-4dd6-39b4-bee1-1cf1a112b843.roa (raw, json)
Hash identifier:          CdOBTJSX4PlWEH6T7VrMj87ah/mxvBpwVdTa3bX1zwY=
Subject key identifier:   5D:39:11:E9:4B:FE:0B:29:8B:D5:5D:44:22:D7:69:BC:4E:85:DD:2F
Certificate issuer:       /CN=b9b87434-00de-4d2f-a45d-abe1efe5ecfd
Certificate serial:       010D0C9F432858483B4FF2EB169BC4425D893E00
Authority key identifier: 67:BA:AB:82:D5:25:B6:AD:DE:AC:2E:FF:27:E5:85:9C:97:CE:3C:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/14f63f23-4dd6-39b4-bee1-1cf1a112b843.roa
Signing time:             Tue 17 Dec 2024 02:00:38 +0000
ROA not before:           Tue 17 Dec 2024 02:00:38 +0000
ROA not after:            Mon 17 Mar 2025 01:00:38 +0000
asID:                     40569
IP address blocks:        23.171.168.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3b:4f:f2:eb:16:9b:c4:42:5d:89:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9b87434-00de-4d2f-a45d-abe1efe5ecfd
        Validity
            Not Before: Dec 17 02:00:38 2024 GMT
            Not After : Mar 17 01:00:38 2025 GMT
        Subject: CN=ad599587-7bc5-4f7e-83c4-fad5ae93651a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:9a:76:7f:c6:07:33:45:f9:8d:e0:35:8e:c2:
                    19:c9:8c:8f:ea:16:43:f0:1f:ce:fb:13:7c:d3:bc:
                    ff:e5:92:15:3a:e7:7d:26:fe:5e:ba:74:8f:1d:08:
                    20:e9:96:4d:a2:d6:2b:53:40:2f:0b:e3:de:4d:4d:
                    d2:61:d9:d1:30:07:87:69:aa:ff:68:1d:e9:cc:cf:
                    49:93:3b:0d:2e:d0:c8:72:da:3c:34:d3:04:8f:b8:
                    ac:49:16:63:84:c0:79:1f:e4:a1:f9:62:e7:08:d4:
                    d7:8d:ac:62:17:26:7f:eb:1e:76:3c:90:ec:3a:65:
                    19:3a:5c:a2:73:69:0d:ae:e5:b6:b7:41:5a:df:8b:
                    8b:16:e8:e4:ef:79:7a:81:a8:5a:12:c3:2a:9d:28:
                    cb:d7:b5:46:f0:06:12:37:57:70:44:db:4f:ec:2b:
                    21:b8:b0:69:f8:c2:eb:57:b8:7c:6f:6b:25:89:44:
                    42:33:ed:8c:05:0b:87:fe:43:1c:d7:2e:5f:15:57:
                    19:19:ac:4e:0e:5c:05:41:e1:9f:3b:eb:f8:13:20:
                    24:82:eb:4e:a5:88:7f:72:75:d7:d2:87:41:81:01:
                    43:4f:ea:11:c4:6e:c9:e1:5b:03:ef:c7:c3:49:b7:
                    42:4b:d5:a9:0a:35:53:b4:8d:dc:53:b5:83:a1:79:
                    ab:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:39:11:E9:4B:FE:0B:29:8B:D5:5D:44:22:D7:69:BC:4E:85:DD:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/14f63f23-4dd6-39b4-bee1-1cf1a112b843.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.crl

            X509v3 Authority Key Identifier:
                keyid:67:BA:AB:82:D5:25:B6:AD:DE:AC:2E:FF:27:E5:85:9C:97:CE:3C:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.171.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:c8:c2:c8:e0:31:d0:8e:bb:68:39:83:a7:28:58:46:89:f9:
         2c:55:f6:68:20:f6:6a:18:2f:6b:ad:d6:00:2a:d2:b0:61:9a:
         93:0c:cd:0e:f9:e6:70:fb:9f:59:16:82:1e:9e:56:81:7c:c5:
         1b:f9:81:ea:9e:31:5c:af:41:a0:03:4b:98:50:4d:fd:4c:b0:
         42:97:55:98:d9:27:e1:4b:e6:d9:a9:9b:3f:2f:37:0c:00:62:
         0b:69:6c:9f:f7:d1:c1:57:76:8f:96:35:b1:35:5e:e7:16:d3:
         4f:44:92:0c:42:93:68:08:3a:77:31:66:df:58:96:17:29:fc:
         3d:c2:16:0f:35:d7:7e:9d:f0:55:a5:81:e8:ea:48:dc:c7:8f:
         fb:f8:3d:cc:48:98:50:a6:95:fe:3e:32:89:56:6d:99:40:a2:
         64:df:d6:86:c4:d5:34:a6:b9:2f:43:fe:d0:7a:b2:6c:46:5a:
         45:cd:84:65:94:53:e7:93:09:3d:31:65:08:e3:37:2f:0f:16:
         83:84:72:85:b8:d9:d1:25:63:6b:96:e1:0b:55:a8:72:78:52:
         b8:0b:b6:c0:83:f7:38:37:b5:0e:a9:35:92:fb:d8:f5:db:f9:
         67:ab:90:f4:96:f6:f9:e5:e8:4a:8b:00:74:d3:70:0c:c8:5a:
         4e:45:08:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----