Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/70b34a7f-46b7-31a3-9db4-62ee9a7297a5.roa
File:                     70b34a7f-46b7-31a3-9db4-62ee9a7297a5.roa (raw, json)
Hash identifier:          iq4yAKpf1WoO5FEhPBTuGz6jU4X/KIpfLkuNQxAot9Y=
Subject key identifier:   0B:EB:A5:A4:B2:E7:E5:1F:D2:53:CA:E5:2A:DD:89:F0:1E:69:44:0E
Certificate issuer:       /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Certificate serial:       010D0C9F432858487E5068B726EA8A552469E400
Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/70b34a7f-46b7-31a3-9db4-62ee9a7297a5.roa
Signing time:             Fri 10 Jan 2025 02:00:40 +0000
ROA not before:           Fri 10 Jan 2025 02:00:40 +0000
ROA not after:            Thu 10 Apr 2025 01:00:40 +0000
asID:                     399185
IP address blocks:        16.7.32.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7e:50:68:b7:26:ea:8a:55:24:69:e4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
        Validity
            Not Before: Jan 10 02:00:40 2025 GMT
            Not After : Apr 10 01:00:40 2025 GMT
        Subject: CN=65b67aad-eb5f-49d4-9954-705d83845c36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d6:72:f0:78:b1:74:51:87:b1:07:0f:09:68:
                    4a:bc:86:53:f8:15:71:af:c2:e3:f0:65:cf:a2:e1:
                    30:fc:d6:49:48:5f:fd:20:3c:b1:2b:0d:76:a1:2a:
                    2a:cb:49:7f:28:fc:54:11:2f:a6:e6:53:26:96:23:
                    db:76:f1:cd:aa:f0:e2:74:4a:58:d4:04:99:65:cb:
                    4e:83:1e:a4:95:fa:14:bb:b9:53:51:bb:f0:c3:58:
                    06:a2:51:e1:4d:c4:88:8b:07:eb:86:fc:19:bb:de:
                    4f:d0:ab:d3:c9:1e:d7:4c:e2:44:e1:fe:20:75:69:
                    8b:73:99:ae:50:b6:e1:8b:46:d8:2f:e4:ff:08:eb:
                    e3:e1:f2:01:4f:1c:0d:db:ef:6b:bc:ea:75:13:71:
                    55:85:8c:fd:7b:6c:89:8c:da:cf:b6:ee:0f:07:e3:
                    03:34:77:aa:b9:9a:3e:dd:53:a4:5f:e0:f8:fe:44:
                    51:19:a3:cd:6d:fb:e5:9a:77:de:2c:fe:7b:c2:8e:
                    79:ab:78:99:d2:30:58:5f:6a:48:de:f8:c5:73:83:
                    28:35:a5:0f:27:5f:28:6f:81:1a:07:92:3b:53:58:
                    27:ba:cf:eb:fc:a9:d1:ba:52:d9:2c:2a:12:28:bd:
                    c7:bb:95:04:c4:de:69:da:21:88:d5:2f:ac:37:ef:
                    8c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:EB:A5:A4:B2:E7:E5:1F:D2:53:CA:E5:2A:DD:89:F0:1E:69:44:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/70b34a7f-46b7-31a3-9db4-62ee9a7297a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl

            X509v3 Authority Key Identifier:
                keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.7.32.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:71:46:45:b6:03:b0:d3:d0:d6:33:9e:06:14:9c:c0:72:4e:
         bf:fd:fa:9f:90:98:54:a1:4f:97:b7:8b:f1:af:9b:42:67:e9:
         e9:4d:37:14:41:cb:6c:f1:59:70:82:8f:9c:b5:2d:20:cd:ef:
         20:f2:56:30:67:7b:40:83:31:60:23:11:53:77:5b:99:a3:c2:
         14:d2:16:7e:d1:bc:12:08:aa:29:e5:0e:55:77:0c:b7:c2:81:
         0d:54:6e:51:78:ed:eb:ca:03:15:c4:ae:c1:2b:20:56:b7:37:
         a9:8e:6f:a1:17:29:fa:22:1e:13:f8:3d:72:35:b5:d7:36:72:
         b5:cc:77:7d:45:9f:c4:56:48:d5:14:10:58:34:4b:7d:45:c5:
         af:a7:34:b2:eb:c4:58:9d:df:7f:28:f4:d5:0c:e2:d3:79:8e:
         28:4f:57:93:16:07:ba:42:4b:18:b9:5e:c0:4e:1b:79:17:b2:
         a6:ed:4c:6e:e4:c8:a9:9f:96:9e:26:18:ff:e3:b2:80:f6:08:
         9e:3e:d4:fa:51:89:cd:1d:30:01:ae:4e:78:08:0d:52:b7:f1:
         63:60:69:8d:05:2c:8e:2d:0e:dc:d9:85:c5:74:7c:45:8a:25:
         79:dd:45:cc:0b:3f:ba:74:da:da:6a:d6:68:0c:67:16:4b:d1:
         1c:0b:e4:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----