Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ccfe266-0609-49cd-b2ba-671a64efdc7c/7b6dcc44-5c8f-362d-9c48-be7076ab71df.roa
File:                     7b6dcc44-5c8f-362d-9c48-be7076ab71df.roa (raw, json)
Hash identifier:          khREwi+SNd634AFetf7Nqppb02Kx0L//LOB9IRUAaao=
Subject key identifier:   A3:6C:4E:10:CD:48:35:07:15:23:08:D5:41:C7:2F:30:44:8C:46:73
Certificate issuer:       /CN=1ccfe266-0609-49cd-b2ba-671a64efdc7c
Certificate serial:       010D0C9F4328584851A5721CE3B6060E80FD1280
Authority key identifier: D2:F9:69:B3:D5:80:E9:D5:A6:9F:39:9B:27:89:E8:E2:73:69:11:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ccfe266-0609-49cd-b2ba-671a64efdc7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ccfe266-0609-49cd-b2ba-671a64efdc7c/7b6dcc44-5c8f-362d-9c48-be7076ab71df.roa
Signing time:             Wed 25 Dec 2024 02:00:38 +0000
ROA not before:           Wed 25 Dec 2024 02:00:38 +0000
ROA not after:            Tue 25 Mar 2025 01:00:38 +0000
asID:                     16509
IP address blocks:        142.202.129.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:51:a5:72:1c:e3:b6:06:0e:80:fd:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ccfe266-0609-49cd-b2ba-671a64efdc7c
        Validity
            Not Before: Dec 25 02:00:38 2024 GMT
            Not After : Mar 25 01:00:38 2025 GMT
        Subject: CN=738bb7c8-7ecb-4260-a30b-a6db9a622d46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9d:f1:1b:fa:29:7e:7a:2f:31:27:29:16:06:
                    da:dc:d8:dc:f0:f3:bd:31:20:62:f5:3b:b0:6b:33:
                    cf:d5:04:01:c5:76:fa:d6:33:c6:7c:2c:34:33:e4:
                    6b:ed:ef:a2:ab:dd:c1:b3:cb:1a:0a:f3:6e:2b:52:
                    3e:a4:31:55:e9:7e:d7:38:5c:59:c5:78:8c:98:3b:
                    09:42:f0:af:0e:c3:aa:d6:1a:a3:11:2a:69:b3:14:
                    6b:ee:38:ce:13:ae:bc:61:ae:24:b6:a0:1f:29:47:
                    7f:73:3d:13:48:60:d0:88:ef:4f:a7:89:9a:a5:a4:
                    ef:74:c3:ce:f7:6c:ea:ef:bc:05:97:aa:4b:97:30:
                    9f:e0:bb:53:0c:29:ce:8b:84:72:84:58:92:6c:8c:
                    d5:45:37:98:24:17:f3:94:b5:da:e0:42:43:67:a1:
                    ee:42:99:db:ae:7f:f0:55:c5:cb:ef:a9:72:8d:c4:
                    dc:ef:f3:fc:89:e5:45:81:c0:0e:da:7d:20:cf:d3:
                    93:9f:7a:d2:ce:47:3c:16:85:fe:a1:fe:d0:0b:6b:
                    f5:fa:3f:c5:9e:b2:71:e9:06:da:a8:35:45:2f:9f:
                    2b:22:34:f1:c9:b2:03:15:a6:e5:0a:31:a1:9d:aa:
                    88:9b:4f:e3:65:6b:b8:24:15:29:df:fb:9e:b4:a2:
                    b7:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:6C:4E:10:CD:48:35:07:15:23:08:D5:41:C7:2F:30:44:8C:46:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ccfe266-0609-49cd-b2ba-671a64efdc7c/7b6dcc44-5c8f-362d-9c48-be7076ab71df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ccfe266-0609-49cd-b2ba-671a64efdc7c/1ccfe266-0609-49cd-b2ba-671a64efdc7c.crl

            X509v3 Authority Key Identifier:
                keyid:D2:F9:69:B3:D5:80:E9:D5:A6:9F:39:9B:27:89:E8:E2:73:69:11:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ccfe266-0609-49cd-b2ba-671a64efdc7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.202.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:0e:f0:6d:b5:8b:07:9d:0f:94:76:bc:16:49:b2:fc:72:50:
         cc:c4:26:ac:4e:ef:aa:8b:c6:43:d7:d3:55:62:16:09:9d:86:
         c0:c1:af:02:25:23:b8:18:71:50:dc:ce:01:02:68:2d:c0:8e:
         10:a1:95:38:02:50:d4:94:bf:e7:3f:44:6c:9c:35:b0:45:5f:
         e5:e4:18:f1:9d:f5:d7:cd:0a:7d:66:eb:66:01:13:27:bd:c6:
         f9:b8:af:1e:79:96:fc:c3:9d:97:aa:d3:f3:cf:73:3e:fd:69:
         28:8a:50:e9:63:bc:56:aa:bb:ae:c8:6f:6f:52:20:86:eb:37:
         51:65:ad:e6:3b:a0:b8:18:6e:a5:c5:9b:96:bc:3a:25:8f:58:
         e6:f6:99:5a:2e:79:99:0f:19:7e:55:2d:1d:f6:0d:49:b0:30:
         36:03:e8:fa:bf:55:7b:e1:70:9c:c3:1b:c8:b1:62:c8:36:5d:
         e6:15:66:c0:4d:87:d0:5b:06:57:a2:6d:19:13:6d:e7:90:32:
         7c:f3:22:4b:e1:4d:03:f0:9f:0e:35:c1:f3:4c:cc:df:22:9d:
         69:7c:e5:63:a0:8f:8d:c1:00:84:c8:7d:80:79:8d:e6:2c:9b:
         d5:0f:4b:9a:08:eb:61:62:07:f9:29:91:58:4a:6b:74:2f:35:
         49:c0:4c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----