Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/c94833e2-0b44-31e2-8156-8ab40893b376.roa
File:                     c94833e2-0b44-31e2-8156-8ab40893b376.roa (raw, json)
Hash identifier:          qxa08QVYvVV9I8iw1WNgpHwJQB8pkGx3/XKdRXD+R7U=
Subject key identifier:   B4:DF:60:74:92:E8:A1:8F:35:2D:12:61:83:EF:67:AF:5B:F4:51:D7
Certificate issuer:       /CN=5dcf6139-5993-4941-a803-3ff450a6149e
Certificate serial:       010D0C9F432858483B500A95934968EB3E7877C0
Authority key identifier: 2C:B7:E5:0B:14:FA:3D:96:BC:0C:17:17:D4:AE:3F:DF:26:6D:66:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/c94833e2-0b44-31e2-8156-8ab40893b376.roa
Signing time:             Tue 17 Dec 2024 02:00:38 +0000
ROA not before:           Tue 17 Dec 2024 02:00:38 +0000
ROA not after:            Mon 17 Mar 2025 01:00:38 +0000
asID:                     211192
IP address blocks:        64.113.4.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3b:50:0a:95:93:49:68:eb:3e:78:77:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dcf6139-5993-4941-a803-3ff450a6149e
        Validity
            Not Before: Dec 17 02:00:38 2024 GMT
            Not After : Mar 17 01:00:38 2025 GMT
        Subject: CN=18fea17a-acfc-4bbf-9bed-dbbce187dd89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:0d:d6:f6:f0:9e:f6:e5:d3:1c:8a:cd:87:74:
                    62:03:90:5a:16:71:c8:e0:5f:47:19:31:d5:04:73:
                    94:7b:b0:46:d1:b3:98:6b:39:15:ae:b6:94:68:0f:
                    79:9c:95:c1:c8:94:53:4f:ea:3a:a2:af:8a:01:37:
                    85:65:a2:07:c7:bc:11:ab:bf:70:a7:94:1b:cb:ef:
                    90:08:86:f3:bb:6f:0b:c0:f8:9e:6f:b7:3e:9b:39:
                    ad:12:c6:24:a4:0b:fe:6e:38:e1:1e:d0:79:79:8c:
                    88:73:43:7f:7d:58:e4:f6:5f:c0:92:e2:96:6b:6a:
                    67:0f:89:0c:5c:88:d6:41:ec:c7:a1:b7:ac:b6:74:
                    6a:92:c6:d3:5a:51:bc:82:4f:c7:de:cc:af:02:44:
                    00:43:b8:84:b5:ce:78:2e:67:45:d7:3a:6c:6b:b3:
                    fb:1a:e6:5a:39:71:35:ba:1f:89:8c:97:e7:ce:14:
                    58:eb:ec:db:48:f6:2d:3b:52:2b:c9:ae:16:ef:8d:
                    c1:de:48:7a:ad:5d:d8:af:b4:2e:c1:85:b4:f4:3c:
                    aa:ed:07:30:10:a7:54:49:5d:ac:d9:3e:b8:bf:c7:
                    2d:14:ed:21:ac:e4:5c:b8:3e:12:cf:2d:cd:da:de:
                    d3:4f:74:ba:f4:50:9e:2b:20:e1:5d:8d:b3:35:ab:
                    e1:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:DF:60:74:92:E8:A1:8F:35:2D:12:61:83:EF:67:AF:5B:F4:51:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/c94833e2-0b44-31e2-8156-8ab40893b376.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.crl

            X509v3 Authority Key Identifier:
                keyid:2C:B7:E5:0B:14:FA:3D:96:BC:0C:17:17:D4:AE:3F:DF:26:6D:66:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.113.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:a1:93:89:89:cf:88:3d:9a:a5:11:fe:46:63:c3:05:33:6c:
         f7:1d:71:19:b0:07:5c:15:1a:8c:1d:22:93:4f:3c:d4:42:85:
         a4:c3:72:7e:d3:3e:6f:39:b0:60:58:98:0e:74:34:c0:97:ec:
         0f:15:e9:54:84:5a:04:d4:30:4f:9e:0c:60:dc:1b:6c:e1:6e:
         65:27:ec:5f:25:1b:d7:ca:0b:c4:e0:8e:12:36:85:58:73:72:
         61:f0:4a:fd:28:8f:23:91:92:80:88:76:25:2c:98:1c:ac:37:
         3a:18:11:7c:d7:88:b0:d4:a2:03:3f:fc:6e:90:03:ed:d5:25:
         1c:a7:c7:05:eb:7c:12:71:d4:53:eb:58:00:4f:12:2b:a2:16:
         c5:a7:c5:36:d2:e4:d0:1e:24:28:5f:66:90:2d:2c:89:7d:fb:
         98:8c:e8:34:69:82:56:0a:f9:b0:69:d2:e5:ef:72:c0:59:25:
         ff:cb:a4:34:7a:be:c6:81:57:22:b6:50:7c:2c:f6:15:21:48:
         9f:85:27:7f:42:c6:f2:0a:b8:23:8b:21:25:97:00:d5:56:4f:
         01:e3:a4:03:e2:56:8f:ca:a1:32:c8:e2:89:9c:47:ef:a2:50:
         d7:e8:48:3e:1b:4a:9f:74:8d:7d:e8:3d:4d:f4:57:d1:7a:7a:
         56:ae:2a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----