Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0d061660-0bee-3652-8a3a-bf7cafdb55df.roa
File:                     0d061660-0bee-3652-8a3a-bf7cafdb55df.roa (raw, json)
Hash identifier:          z5mgQLXcQjEIRfM3qNe2d8EkFLiyx3m+FgETMOL2CLU=
Subject key identifier:   5F:18:C9:88:89:06:AA:D4:C4:0D:71:99:D7:E5:15:D5:62:A3:F7:34
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285847F15509A6F25D3694F20A4A80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0d061660-0bee-3652-8a3a-bf7cafdb55df.roa
Signing time:             Wed 20 Nov 2024 14:00:52 +0000
ROA not before:           Wed 20 Nov 2024 14:00:52 +0000
ROA not after:            Tue 18 Feb 2025 14:00:52 +0000
asID:                     7029
IP address blocks:        209.165.0.0/17 maxlen: 17
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f1:55:09:a6:f2:5d:36:94:f2:0a:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Nov 20 14:00:52 2024 GMT
            Not After : Feb 18 14:00:52 2025 GMT
        Subject: CN=2c671d3c-ff11-43fb-b8ea-a7b4c395abfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:10:93:52:81:b6:c1:b8:6b:01:01:ff:64:cc:
                    6c:65:0d:07:7c:44:c4:3c:b7:de:7b:67:9f:bf:5a:
                    14:91:5a:80:c3:2f:b5:b9:82:53:9e:60:9f:f2:8f:
                    08:f9:cf:f2:20:b4:00:db:4a:e4:59:4e:b5:a4:5d:
                    5f:d8:f2:1b:9d:c3:90:d6:f3:8b:e7:36:88:8f:43:
                    58:35:09:7e:2d:82:f2:04:b1:81:85:e4:e4:f0:39:
                    ba:c6:85:48:91:12:3d:64:7c:26:6e:f9:06:f5:83:
                    fa:a1:42:a4:73:2a:0d:f6:c3:98:9a:14:4a:40:e2:
                    7e:e7:5c:36:34:b8:fb:d5:1f:9f:c0:6c:a7:98:b7:
                    ad:b4:3e:d3:ba:7f:3c:b0:5a:0f:a5:1f:2e:0f:2a:
                    75:1f:20:2a:1d:1b:62:db:f8:8b:4c:3b:eb:93:47:
                    ee:ae:6c:c3:82:08:9e:ff:a1:80:85:2c:52:a5:df:
                    52:d8:5d:59:b2:95:f5:f1:11:38:c0:41:50:46:b2:
                    8c:08:fe:c9:47:0b:81:0c:87:4d:b0:42:51:b6:b1:
                    08:6d:14:e5:1f:b6:42:b6:aa:35:ed:3d:ba:af:b6:
                    34:e0:9b:e7:de:69:c4:c2:b0:78:50:06:da:8c:c1:
                    6d:01:c2:57:dd:36:32:9f:97:58:bb:58:7b:c2:47:
                    80:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:18:C9:88:89:06:AA:D4:C4:0D:71:99:D7:E5:15:D5:62:A3:F7:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0d061660-0bee-3652-8a3a-bf7cafdb55df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.165.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:92:fa:54:07:dc:62:2f:db:4f:d7:ad:fa:63:92:a0:da:34:
         a7:b2:b6:72:a0:3a:da:3b:66:d1:63:8e:1e:2b:1c:55:db:e2:
         e4:ec:42:2e:e7:76:79:06:b1:e3:38:dd:18:76:24:bf:67:5e:
         c6:c1:1a:3e:02:71:ad:d7:f0:a4:89:63:2e:e2:ff:02:75:4a:
         4d:76:a2:19:a8:6f:44:8c:7f:ba:78:37:8a:e8:1b:d0:aa:15:
         e3:38:16:85:ca:d7:d5:a3:e7:ac:68:66:28:85:21:ad:2b:f4:
         37:b6:23:f4:3a:4e:b7:61:92:5e:ad:6a:51:04:eb:e0:ef:7d:
         1e:99:40:2b:76:0e:ce:20:89:1a:df:59:be:88:8c:6d:f6:14:
         85:d6:21:da:25:79:2a:7a:30:39:e4:b9:69:26:0c:8a:e4:32:
         41:df:23:88:33:aa:e5:23:fd:0b:9b:ae:f2:df:6e:0a:22:2c:
         88:ca:41:08:95:e8:09:d4:54:b4:46:75:47:88:d9:cb:70:1f:
         c5:b2:4f:14:9f:04:8e:68:e1:ae:c9:78:ef:9c:fc:7a:91:f6:
         bc:ed:fa:0c:74:f5:b9:5e:97:4a:48:52:c0:c9:54:44:e9:41:
         c6:51:f6:d0:6c:a9:c4:76:d6:8a:dd:2e:15:44:2d:06:99:ef:
         25:1c:b5:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----