Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78faa5a1-84ab-3174-a7fe-63a1519aafb3.roa
File:                     78faa5a1-84ab-3174-a7fe-63a1519aafb3.roa (raw, json)
Hash identifier:          CRACVlysS6KLVStGvf22u5mAjY5RJFNGm6nMLN+C+Jw=
Subject key identifier:   DE:5B:23:09:B5:B7:6C:0E:A1:17:4F:81:8C:75:86:2E:1E:6F:8C:4C
Certificate issuer:       /CN=78369c58-f0b4-454b-ad08-df84f1fd007c
Certificate serial:       010D0C9F4328584839EABC7A0E8133F4BAA5BBC0
Authority key identifier: DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78faa5a1-84ab-3174-a7fe-63a1519aafb3.roa
Signing time:             Mon 16 Dec 2024 14:00:51 +0000
ROA not before:           Mon 16 Dec 2024 14:00:51 +0000
ROA not after:            Sun 16 Mar 2025 13:00:51 +0000
asID:                     22822
IP address blocks:        2001:504:1c::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:39:ea:bc:7a:0e:81:33:f4:ba:a5:bb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78369c58-f0b4-454b-ad08-df84f1fd007c
        Validity
            Not Before: Dec 16 14:00:51 2024 GMT
            Not After : Mar 16 13:00:51 2025 GMT
        Subject: CN=df33194c-0639-4bc1-9918-55249101cc6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1e:cf:52:cd:a3:60:2b:58:07:61:c1:82:bb:
                    a3:c4:73:e5:49:eb:85:9f:6d:ec:55:7e:72:21:32:
                    ba:08:28:b6:73:64:5f:ef:7f:a6:99:9a:fa:3b:10:
                    68:a7:41:37:11:93:3c:08:a5:c2:88:83:0b:dc:98:
                    13:14:f1:82:8c:f2:68:70:d7:e1:0a:1e:69:3f:59:
                    f8:98:53:5f:a6:eb:c6:ff:a5:0f:1b:7d:03:8c:75:
                    10:b5:13:70:7d:b8:a6:10:18:8f:ef:04:1e:e2:d2:
                    0f:19:e2:da:a5:4a:ef:e9:2d:83:38:5b:6c:c0:e3:
                    8f:d7:dc:fb:c8:4a:63:0c:73:e4:94:e7:c4:7a:b2:
                    90:0d:5a:83:e1:53:89:7d:87:4b:38:4f:4a:5f:e5:
                    03:c0:86:a6:7a:5d:e6:8a:f5:f5:61:2c:36:e0:0d:
                    23:62:d3:e9:d4:f8:5a:e0:36:9f:bb:e2:eb:b3:41:
                    0e:f4:a0:82:fa:7e:f9:83:1b:ee:2b:d6:0e:b6:31:
                    63:42:e4:1f:03:d9:01:7f:e2:13:9e:d2:fa:21:ef:
                    0c:cc:d9:7f:9a:72:8d:3f:2c:ff:35:96:84:2e:c6:
                    b0:c1:16:f5:6c:8b:51:b7:86:f5:c4:5d:e1:c1:f3:
                    5f:58:9a:98:88:ff:b1:cc:76:7a:ce:d9:d8:13:2e:
                    a6:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:5B:23:09:B5:B7:6C:0E:A1:17:4F:81:8C:75:86:2E:1E:6F:8C:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78faa5a1-84ab-3174-a7fe-63a1519aafb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl

            X509v3 Authority Key Identifier:
                keyid:DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:504:1c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:27:6f:97:d9:ca:13:d7:49:a5:a5:83:ce:52:aa:41:66:cb:
         6a:89:5f:e5:14:a9:07:37:bd:af:af:96:25:b0:de:13:a2:ac:
         1d:2e:f4:7b:6c:92:8c:25:f8:91:ad:ba:8e:4a:3b:d9:bc:62:
         4b:0a:79:84:84:d7:95:b1:59:09:f5:84:c5:66:9c:14:2c:37:
         ce:03:9c:56:87:96:73:eb:da:b6:49:45:1a:e7:4d:25:2a:b9:
         c8:b2:36:1c:ed:50:51:f1:ff:e0:75:48:4c:c4:83:a2:23:ea:
         e7:d1:b5:76:35:58:ac:dc:b7:ab:fa:6b:fd:29:00:8f:88:05:
         8b:d2:82:fc:35:77:77:33:c6:c8:b1:bd:8d:5f:a6:d6:13:88:
         b6:25:fd:65:d0:61:b3:6a:4e:d3:b2:78:ce:ff:c0:c1:8c:29:
         cd:63:5f:96:42:9e:e0:82:1e:e1:bd:36:77:02:e6:c8:34:3b:
         2f:bd:05:5d:e3:d5:a1:46:7e:ae:c6:fe:d9:63:d9:fa:3a:b3:
         e6:cb:9f:04:90:4e:7f:89:ad:9a:84:57:2a:1f:c6:96:03:b9:
         fa:d6:a4:69:ff:c7:9e:d3:e5:01:9f:fa:1b:6d:00:87:e9:ce:
         f3:68:dd:ea:6c:13:5c:40:e8:a2:a0:3d:a2:1b:de:c7:ce:bb:
         c4:9a:40:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----