Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319/9a7e5d05-11c2-3851-b038-2bcc4e5cdafb.roa
File:                     9a7e5d05-11c2-3851-b038-2bcc4e5cdafb.roa (raw, json)
Hash identifier:          xdwW9hCbQP2N1qTMQzD1d084a2ZciO4ScV0izGRC6aM=
Subject key identifier:   60:1E:F2:9D:57:E3:07:E3:1B:E3:CE:36:AD:08:49:7F:49:E9:6E:23
Certificate issuer:       /CN=700690a7-1957-45e2-8744-ee9735b07319
Certificate serial:       010D0C9F432858484EDACBBB301C74ADB015CAC0
Authority key identifier: 21:A9:9A:BD:45:2A:D2:F3:5C:22:2C:1F:F0:D9:98:B9:70:DA:DA:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319/9a7e5d05-11c2-3851-b038-2bcc4e5cdafb.roa
Signing time:             Tue 24 Dec 2024 02:00:38 +0000
ROA not before:           Tue 24 Dec 2024 02:00:38 +0000
ROA not after:            Mon 24 Mar 2025 01:00:38 +0000
asID:                     36289
IP address blocks:        209.209.24.0/24 maxlen: 24
                          2602:fcb8::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4e:da:cb:bb:30:1c:74:ad:b0:15:ca:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=700690a7-1957-45e2-8744-ee9735b07319
        Validity
            Not Before: Dec 24 02:00:38 2024 GMT
            Not After : Mar 24 01:00:38 2025 GMT
        Subject: CN=6726b1ae-aef3-4225-97c4-5b1b60db84ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f1:13:5a:48:5f:90:8b:13:cf:40:3c:ca:9e:
                    d9:4a:08:8b:10:bb:9c:ba:cb:32:8f:4b:1c:cd:c5:
                    9d:0f:f0:52:7b:6b:4f:97:e9:ae:47:54:24:b7:56:
                    6f:86:9f:96:aa:6c:55:16:02:fe:76:46:80:49:51:
                    7f:9f:4b:1b:cd:c4:0a:ae:15:77:5d:64:65:bf:8e:
                    7b:f5:1d:98:4e:95:b1:0c:1d:a3:71:ed:f6:16:c6:
                    fa:ae:67:2b:4a:43:fa:fe:54:d5:14:de:a3:a6:7e:
                    67:e2:4f:0d:9b:12:15:f7:36:25:33:79:7d:7f:b6:
                    96:7c:f1:1b:96:57:fe:a8:67:61:5b:97:73:70:c8:
                    b2:92:49:19:2a:dd:f2:98:ae:0b:7f:17:ea:c3:97:
                    a6:a7:15:bd:b7:84:e4:59:9c:20:48:b9:40:63:7f:
                    df:3f:68:e5:bb:91:c7:6b:16:58:39:e7:00:b4:a9:
                    2b:8d:f0:0f:91:af:6d:ff:d9:ad:c4:de:7e:56:8e:
                    27:d7:b6:f1:47:cc:ec:cd:f9:88:81:a0:92:e7:88:
                    57:ed:99:8e:bd:85:3d:df:b9:6a:fd:77:b4:ac:45:
                    f9:a1:79:c8:9c:4a:13:42:8b:e3:3d:00:4e:d2:67:
                    b1:6a:50:fb:3c:f5:82:10:97:34:23:f0:29:bb:16:
                    86:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:1E:F2:9D:57:E3:07:E3:1B:E3:CE:36:AD:08:49:7F:49:E9:6E:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319/9a7e5d05-11c2-3851-b038-2bcc4e5cdafb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319/700690a7-1957-45e2-8744-ee9735b07319.crl

            X509v3 Authority Key Identifier:
                keyid:21:A9:9A:BD:45:2A:D2:F3:5C:22:2C:1F:F0:D9:98:B9:70:DA:DA:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.209.24.0/24
                IPv6:
                  2602:fcb8::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:10:ba:55:26:c2:80:9c:c4:ce:b1:67:27:1b:bf:b5:43:0c:
         84:bc:f2:62:9b:6f:20:42:03:61:ae:e5:8c:7b:a5:88:9a:26:
         de:5a:16:6a:2e:bc:4f:85:6e:02:af:20:9c:c6:93:3b:87:37:
         89:87:9c:36:ee:ee:98:36:7d:d3:43:87:a4:58:c1:37:67:9c:
         dd:2e:da:32:11:3b:e8:2b:f0:41:7b:02:3d:23:e9:47:05:7c:
         c9:5b:18:81:11:0b:df:66:42:ab:ad:69:7c:7b:29:12:cf:2b:
         eb:09:b8:4f:c3:ea:aa:92:04:83:61:88:f3:0d:d5:1d:7c:4e:
         8a:9f:00:a6:b3:f3:b8:88:7d:cc:5f:91:8c:4c:b1:8f:b1:90:
         b5:87:62:ab:5d:51:9b:04:07:1b:bc:9e:60:41:ba:c6:5d:0a:
         78:28:da:28:f4:8e:b4:eb:3a:ec:88:1b:7b:72:a8:a3:d3:53:
         4f:d7:28:bc:0c:bf:4e:1b:f5:a7:88:37:0e:18:cc:0d:b6:8b:
         60:20:dc:03:ea:8f:ec:0a:a0:04:5d:73:7c:1c:b0:d1:24:d6:
         76:47:2f:2a:2b:fe:58:b0:54:27:37:7d:05:5a:c0:15:ad:29:
         69:9f:f8:04:50:cc:e6:18:0a:88:f4:6b:b1:40:6b:85:13:e0:
         29:74:ec:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----