Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/c75b412a-1d88-3830-ad50-cd7950cc3ab2.roa
File:                     c75b412a-1d88-3830-ad50-cd7950cc3ab2.roa (raw, json)
Hash identifier:          m/mwY6arIs1UX3TTRXFMjrOF7UKB9EBgZma1r/NMdg4=
Subject key identifier:   DD:76:F8:DC:F7:67:60:EF:08:0F:31:96:AB:1F:CA:1E:EA:F0:98:C3
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F43285847FF4A45BBC89C028CBE59A580
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/c75b412a-1d88-3830-ad50-cd7950cc3ab2.roa
Signing time:             Mon 25 Nov 2024 14:00:39 +0000
ROA not before:           Mon 25 Nov 2024 14:00:39 +0000
ROA not after:            Sun 23 Feb 2025 14:00:39 +0000
asID:                     61317
IP address blocks:        94.72.178.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ff:4a:45:bb:c8:9c:02:8c:be:59:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: Nov 25 14:00:39 2024 GMT
            Not After : Feb 23 14:00:39 2025 GMT
        Subject: CN=e7a0faac-fb3c-4f05-aecc-f390ce82eddd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c3:30:14:02:77:38:41:24:33:b5:81:70:4e:
                    c9:1c:87:5a:d6:57:30:57:2e:b1:53:ed:31:02:2d:
                    52:e8:12:de:89:44:93:dc:e5:ac:4a:94:37:89:57:
                    f8:ab:66:6e:30:75:4e:24:d2:79:01:3d:7c:16:cc:
                    fb:ec:0b:24:9e:84:dc:63:5b:5c:a0:9e:41:e6:3e:
                    fc:78:c3:45:1d:43:46:a2:03:7a:22:8c:7a:83:c7:
                    b7:75:8a:35:52:51:07:67:08:a9:e9:a9:de:e6:ff:
                    6f:20:17:b2:dc:a7:c6:52:1d:4d:b0:88:5c:5c:dd:
                    58:9a:a0:ac:15:f7:cb:8d:74:8a:16:79:a0:63:11:
                    37:30:00:83:6f:fd:f5:98:fb:32:40:83:1b:70:2f:
                    ea:55:9a:57:25:3a:e8:da:20:45:03:85:2a:ff:d6:
                    6e:41:cb:64:1c:e9:f4:0a:f5:bf:fd:ac:53:9f:27:
                    6c:59:48:20:20:68:c7:f1:84:c4:8e:6d:4a:68:58:
                    c8:34:69:1b:f4:26:fd:72:d0:7d:35:c2:4c:e3:bb:
                    0d:31:8f:15:d8:2a:2c:fd:84:e3:e0:51:4d:11:6b:
                    6b:a2:25:1a:ed:80:b1:d6:b7:06:9e:02:db:ed:0f:
                    a0:e3:cb:69:58:89:1d:6c:6c:7c:2d:f4:27:2b:ec:
                    a9:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:76:F8:DC:F7:67:60:EF:08:0F:31:96:AB:1F:CA:1E:EA:F0:98:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/c75b412a-1d88-3830-ad50-cd7950cc3ab2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.72.178.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:f3:fa:26:92:61:ac:0f:7a:bd:3e:90:db:45:ad:00:0a:39:
         02:1c:d0:bd:12:1e:16:2a:10:60:a0:98:13:1a:a0:f3:a5:c9:
         17:05:8f:02:4a:f6:85:8d:f4:28:3d:29:c9:4c:13:26:92:66:
         e6:9f:0e:fb:c5:c2:68:a2:ec:4a:f4:43:c2:e0:3f:86:3f:43:
         e9:d2:79:c5:e5:d8:a3:b7:af:86:d4:d0:97:e2:76:48:a2:40:
         1d:b7:5f:f3:3a:99:46:ba:e1:01:d4:6a:a3:b6:bf:82:33:d3:
         d3:96:5a:cb:ec:d5:24:6b:ed:66:5e:03:7f:b6:ba:2d:f4:d5:
         e9:ea:f7:21:57:b2:a5:89:2c:3a:de:47:ab:f7:cf:f2:92:ba:
         e8:0c:cb:cc:87:de:66:e6:5d:c7:26:61:f5:44:43:13:cd:d5:
         9c:bc:49:88:15:fc:5f:ab:85:6b:e8:59:df:f9:54:db:9c:d0:
         fe:6c:0b:82:9d:83:c2:1f:51:2e:4d:e2:bc:70:92:71:e5:75:
         cd:8f:04:40:e2:3b:02:25:b9:7a:6d:29:12:cb:30:f4:d0:63:
         f0:cb:4c:3b:72:16:47:ac:7c:88:a1:02:fe:22:89:33:60:27:
         2d:68:bb:20:42:ad:cf:ee:7d:c7:ed:56:f4:4a:41:49:0f:19:
         10:e8:39:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----