Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0c9941a8-fb10-3e1d-b9b6-1e5109915c3c.roa
File:                     0c9941a8-fb10-3e1d-b9b6-1e5109915c3c.roa (raw, json)
Hash identifier:          y9W+ZkbLWwxfmGrSLezW3/tzvTZTU4DcL0vmWq/pmnA=
Subject key identifier:   BB:97:EB:C2:3B:06:93:D2:38:58:FE:39:8B:EA:FE:20:64:6E:DE:68
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F432858480D3FC3F416041F5C67529A80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0c9941a8-fb10-3e1d-b9b6-1e5109915c3c.roa
Signing time:             Sat 30 Nov 2024 14:00:50 +0000
ROA not before:           Sat 30 Nov 2024 14:00:50 +0000
ROA not after:            Fri 28 Feb 2025 14:00:50 +0000
asID:                     7029
IP address blocks:        69.66.46.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0d:3f:c3:f4:16:04:1f:5c:67:52:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Nov 30 14:00:50 2024 GMT
            Not After : Feb 28 14:00:50 2025 GMT
        Subject: CN=4e1738b6-950f-45b7-b841-89904888ca8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7d:de:db:99:c0:38:9e:6e:ec:ad:ac:6e:08:
                    d5:c0:63:fd:5a:6c:28:d1:58:02:ed:6d:09:53:2d:
                    a9:55:6b:be:72:5e:35:3a:85:bc:93:97:b4:83:49:
                    4d:39:f7:ea:f4:48:7b:99:d2:dd:1d:0a:f8:d3:9d:
                    61:6f:7e:a6:8d:40:49:94:6c:e5:01:7b:01:44:a7:
                    0d:56:85:6f:53:b7:74:e8:ca:d8:fd:37:87:a4:62:
                    84:f9:fc:d1:8a:88:1f:ce:ae:ad:e4:c3:aa:25:20:
                    0a:2a:37:fa:6d:12:f6:ec:a7:06:c2:e4:f5:82:2c:
                    08:97:71:1b:8c:55:e1:30:93:1e:36:c6:d8:2a:c4:
                    33:4b:80:6f:83:73:da:54:e7:99:d2:02:6e:13:af:
                    48:d7:88:b3:89:b1:cf:0b:e3:33:eb:91:34:5a:80:
                    03:5e:9e:83:8e:df:80:4d:86:16:e8:ab:c8:fa:2d:
                    5c:b4:76:56:e7:00:92:ab:5f:17:15:7e:06:f6:c5:
                    b1:9b:f2:12:88:4b:6b:88:88:c4:60:49:99:59:19:
                    e2:b3:d0:c4:d4:c4:3f:b8:4c:22:f4:3e:97:b4:b9:
                    b9:2d:61:b7:5e:ce:03:bf:62:33:c7:3f:54:12:d8:
                    c4:ad:3c:f9:93:2d:db:d9:ea:b6:dc:e3:31:db:27:
                    8e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:97:EB:C2:3B:06:93:D2:38:58:FE:39:8B:EA:FE:20:64:6E:DE:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0c9941a8-fb10-3e1d-b9b6-1e5109915c3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.66.46.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:f0:8c:c3:33:fa:31:69:7e:60:42:47:24:ee:38:9c:eb:41:
         bf:e1:bd:89:58:13:93:69:82:f5:06:84:0e:5d:90:1a:fe:53:
         f2:dd:20:41:a3:c9:16:d1:0b:6c:3f:3b:db:02:38:0b:c5:02:
         e3:f9:08:10:be:76:08:42:e3:45:f4:9e:dc:e4:f3:9c:88:8e:
         52:53:d8:5f:a4:6f:d5:6d:b1:b6:04:41:2a:7a:af:a3:d7:49:
         91:35:b5:db:61:26:69:74:f4:6b:d6:d4:d0:5b:e0:56:0d:32:
         1a:4e:68:e8:58:de:91:a5:3b:93:85:88:c5:4b:f9:80:7e:e5:
         7a:10:5f:c2:de:86:e0:cc:dc:c2:fa:51:89:91:a1:79:65:fd:
         b3:90:c4:95:f5:d5:6a:52:78:2b:a2:53:ca:e1:81:1f:90:dd:
         d3:ab:29:7c:e5:a7:d8:93:6c:1d:bf:c3:14:73:ce:83:2b:30:
         c6:20:c8:1f:9d:92:35:ce:db:ad:b1:2f:50:fb:02:52:00:c0:
         d1:2f:9a:22:ce:44:c5:96:2d:ee:08:ce:39:2d:e2:b3:00:0a:
         ae:2b:c6:7e:48:cb:dc:59:f5:a8:d8:29:29:2f:24:88:45:85:
         61:d0:e5:d7:e6:96:ab:26:7e:65:ad:5a:e6:47:51:ef:9c:6f:
         d6:0c:66:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----