Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c7fdc099-2cda-3d29-9113-013ca0b1a884.roa
File:                     c7fdc099-2cda-3d29-9113-013ca0b1a884.roa (raw, json)
Hash identifier:          B/Z9MGj0yhsn1vSeh7TqswtB9KHB9smJ+uUoTvKKiuA=
Subject key identifier:   01:4B:96:B8:50:E1:CE:92:E9:D7:0A:D0:1F:AF:58:A8:DB:D9:D1:FA
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285847EE8A37D40588B751EF71931A
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c7fdc099-2cda-3d29-9113-013ca0b1a884.roa
Signing time:             Tue 19 Nov 2024 14:00:39 +0000
ROA not before:           Tue 19 Nov 2024 14:00:39 +0000
ROA not after:            Mon 17 Feb 2025 14:00:39 +0000
asID:                     7029
IP address blocks:        173.189.216.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ee:8a:37:d4:05:88:b7:51:ef:71:93:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Nov 19 14:00:39 2024 GMT
            Not After : Feb 17 14:00:39 2025 GMT
        Subject: CN=9bb5c639-3a00-4754-a7cf-aff3eb0d2362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e7:fa:21:f4:f0:ab:3a:89:2a:79:0c:6a:f6:
                    5b:31:02:39:0e:d9:3b:d9:29:17:f3:db:54:fc:6d:
                    d6:c8:5d:c3:2d:ad:aa:cb:33:64:d3:c3:1f:39:4d:
                    a4:6a:0f:44:8a:14:c1:25:ad:a1:c2:93:a6:8d:1f:
                    82:08:b8:56:35:d8:0e:0c:f9:cf:30:1a:2f:0f:ff:
                    0a:aa:ff:fb:ad:54:e6:3d:9d:54:43:56:74:53:9a:
                    e7:a3:c1:ce:f1:1f:b4:58:32:7e:5a:3a:2a:11:f7:
                    08:51:f2:58:67:79:6a:53:b1:e9:7e:e5:d1:9a:25:
                    e9:d3:71:66:b1:45:f8:e8:c5:81:f7:a5:ed:95:21:
                    2f:c8:12:de:b5:90:88:76:53:dd:49:5a:e6:0c:e2:
                    47:b4:2b:4c:eb:f7:84:54:e6:3b:8f:08:7c:93:58:
                    5a:12:8d:00:b5:52:4a:62:52:0e:30:d5:77:fb:17:
                    14:75:49:95:16:d5:5b:7a:d6:d3:08:ed:2a:e6:83:
                    76:ef:56:0e:48:80:10:7d:2f:25:d7:93:a8:f7:14:
                    e6:36:74:0a:b4:6e:8d:80:3b:b8:5e:14:0a:63:f4:
                    b4:61:e3:d4:84:e5:c1:16:09:9f:28:6a:03:4d:66:
                    e9:4c:e1:c2:8f:6c:04:9e:03:22:55:d6:2d:9b:a1:
                    51:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:4B:96:B8:50:E1:CE:92:E9:D7:0A:D0:1F:AF:58:A8:DB:D9:D1:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c7fdc099-2cda-3d29-9113-013ca0b1a884.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.189.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:34:e7:fe:7b:93:9d:c6:bf:39:82:19:a6:01:c9:34:77:95:
         b4:e6:b1:0a:5c:b6:62:02:2f:11:48:2c:a4:31:1d:c0:84:f2:
         da:81:57:81:d4:76:be:78:47:2d:2d:ec:fe:10:d8:1c:4c:7a:
         65:ec:e1:8b:e2:46:34:07:db:4a:98:84:e3:a2:33:fc:d9:38:
         0a:25:ef:d3:6d:41:4d:ab:c7:a6:bb:7c:37:dd:e7:11:d7:b8:
         2a:ed:0f:65:8d:f8:36:89:6f:4b:ee:51:00:cc:1f:c2:34:28:
         a3:65:4c:08:3a:f8:56:47:c9:a8:96:64:31:79:c2:93:15:e9:
         4b:e3:ba:b3:9e:b0:29:05:d8:dd:5f:22:72:26:28:42:a5:ed:
         5e:04:13:8c:91:91:b2:dd:1c:5b:54:75:a1:0b:4d:e8:8a:2c:
         f9:e8:a1:38:54:a8:d8:3a:39:54:25:61:90:6a:81:cd:17:28:
         40:ec:83:34:a1:71:e5:ef:75:70:cc:e3:d8:3a:5e:0a:a8:0c:
         0f:27:1f:3e:e9:3a:e3:f5:e6:5c:97:d2:5b:3a:b7:a6:89:10:
         08:55:ec:09:08:25:f0:69:77:a8:63:b5:42:d1:05:5b:02:93:
         61:76:ee:74:1a:a2:17:79:2a:54:fc:bc:cf:9f:f1:5a:a3:a5:
         a2:5f:b6:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----