Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/ea0b5d1f-a505-3821-a67c-b296d071bbbc.roa
File:                     ea0b5d1f-a505-3821-a67c-b296d071bbbc.roa (raw, json)
Hash identifier:          /xt5NK2LBt1ip7gk6tOHoS35FdYX75DxJNUOS6AbhsE=
Subject key identifier:   6D:39:0C:6B:C6:EE:D3:71:82:31:57:C6:B7:16:4B:16:E2:D8:BA:02
Certificate issuer:       /CN=804e20e1-66d3-4b19-8356-82071ce2a249
Certificate serial:       010D0C9F4328584832F02822FD722D5EE0E27C40
Authority key identifier: F7:20:BC:47:88:C0:F0:37:C0:72:F6:E1:E3:89:7C:F5:80:3E:33:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/ea0b5d1f-a505-3821-a67c-b296d071bbbc.roa
Signing time:             Sat 14 Dec 2024 02:00:39 +0000
ROA not before:           Sat 14 Dec 2024 02:00:39 +0000
ROA not after:            Fri 14 Mar 2025 01:00:39 +0000
asID:                     33368
IP address blocks:        208.86.24.0/22 maxlen: 22
                          2620:0:1a20::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:f0:28:22:fd:72:2d:5e:e0:e2:7c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=804e20e1-66d3-4b19-8356-82071ce2a249
        Validity
            Not Before: Dec 14 02:00:39 2024 GMT
            Not After : Mar 14 01:00:39 2025 GMT
        Subject: CN=7de66a3a-1574-49ae-981f-308df487fd6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:75:74:bf:c0:0e:f6:03:0d:7f:61:ac:1d:92:
                    01:67:5e:5f:5b:9e:2c:b0:39:4d:52:71:10:97:40:
                    b9:f6:d6:e0:7a:9a:0c:44:8e:2e:aa:6f:7b:e5:dc:
                    c2:72:f3:de:7d:de:a3:88:fa:24:86:0d:4b:4a:22:
                    56:6e:7b:b1:a6:5d:c6:07:cf:9d:b4:51:7f:09:b2:
                    06:8f:2a:b4:70:58:57:dc:49:bb:bc:e2:bf:4f:3c:
                    11:ef:ff:84:61:7a:de:36:93:49:01:46:5b:24:04:
                    c6:3b:9b:57:76:74:b1:a9:f6:ea:10:c5:8a:97:36:
                    7c:fb:0f:0e:21:57:49:5d:7f:30:2e:f6:48:7a:65:
                    b7:5d:ef:9f:8b:33:53:57:9d:0f:6e:10:a5:d3:c7:
                    66:5e:f2:15:83:6b:a7:ba:23:99:38:52:34:0f:c9:
                    84:5f:97:ab:c1:53:5f:ab:c8:37:4e:a3:d0:83:44:
                    ef:b4:40:06:16:27:b2:81:84:60:fc:08:95:08:89:
                    80:0d:f1:78:15:b3:2a:d7:3e:2a:d2:ca:ff:8f:c9:
                    b4:fd:29:ac:eb:fe:f6:5f:16:6f:b1:49:8c:69:4a:
                    72:9f:ab:f7:75:92:36:49:19:c4:cd:f3:79:48:15:
                    dd:ff:d9:7a:a8:41:8e:36:94:15:7f:d9:53:d3:5b:
                    e8:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:39:0C:6B:C6:EE:D3:71:82:31:57:C6:B7:16:4B:16:E2:D8:BA:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/ea0b5d1f-a505-3821-a67c-b296d071bbbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/804e20e1-66d3-4b19-8356-82071ce2a249.crl

            X509v3 Authority Key Identifier:
                keyid:F7:20:BC:47:88:C0:F0:37:C0:72:F6:E1:E3:89:7C:F5:80:3E:33:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.86.24.0/22
                IPv6:
                  2620:0:1a20::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:10:31:7f:69:d0:57:dc:92:2f:d9:88:8c:87:32:61:71:5e:
         04:dc:b6:cf:1b:d8:0c:4e:0d:54:c2:d2:74:ab:a0:56:55:e3:
         b9:89:29:58:a5:9d:e6:eb:5a:7c:43:80:4d:85:44:19:e9:11:
         1b:a5:5a:d7:cf:f2:14:f2:27:14:80:cf:64:31:5c:ae:46:8d:
         c8:db:cb:08:63:e9:1f:2c:1e:16:02:a7:9a:ee:f0:a1:65:2b:
         47:42:52:b9:7c:d9:9d:a4:41:71:b7:1c:a2:10:ca:be:52:f7:
         eb:04:dc:68:a3:b8:ec:5b:90:2c:c2:8f:1e:2a:a7:20:c6:42:
         76:fa:6d:3e:b4:2b:68:e3:5b:3d:3a:14:50:72:7d:9a:ee:b9:
         6f:77:fd:db:77:25:f0:1d:01:15:20:21:2f:0e:64:28:27:8a:
         a2:34:99:d8:0d:6c:ad:36:91:c9:9d:cd:6d:94:8e:01:c8:68:
         b3:f9:1b:4d:61:65:ad:89:21:84:99:96:f0:fa:25:05:04:66:
         68:c6:42:49:1e:3c:2a:ea:3e:09:28:e6:d2:d2:75:03:4b:33:
         cf:d8:37:99:14:93:3c:36:bc:08:ee:27:c1:d2:3c:26:4e:25:
         77:d8:82:2d:3c:97:fb:55:72:af:ff:5d:54:6c:2f:36:a8:0b:
         f0:39:fa:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----