Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/b7718956-829a-3e02-9a2b-7cfb84f2012b.roa
File:                     b7718956-829a-3e02-9a2b-7cfb84f2012b.roa (raw, json)
Hash identifier:          4s2j6Td5lMDIlPcZvOpXY2tkE4j3K9cS9L6zFq5VFnI=
Subject key identifier:   12:D2:45:F1:43:05:73:07:3B:06:BC:8E:9F:C5:01:5A:EE:F0:F3:42
Certificate issuer:       /CN=add35f11-0294-4be9-94b7-49cac2bcb001
Certificate serial:       010D0C9F43285848424AD39A84031723D8454F00
Authority key identifier: A5:7A:61:2C:B0:49:28:3C:1F:09:9D:0D:5E:0C:F3:8E:B9:58:F8:CA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/b7718956-829a-3e02-9a2b-7cfb84f2012b.roa
Signing time:             Thu 19 Dec 2024 14:00:52 +0000
ROA not before:           Thu 19 Dec 2024 14:00:52 +0000
ROA not after:            Wed 19 Mar 2025 13:00:52 +0000
asID:                     212149
IP address blocks:        207.167.121.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:4a:d3:9a:84:03:17:23:d8:45:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=add35f11-0294-4be9-94b7-49cac2bcb001
        Validity
            Not Before: Dec 19 14:00:52 2024 GMT
            Not After : Mar 19 13:00:52 2025 GMT
        Subject: CN=312391b1-5489-4ad0-a4ad-9a1656847f5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:7d:49:4b:fd:a4:cd:31:25:11:45:e5:c2:53:
                    c6:c6:e3:56:74:ff:af:98:bf:3b:9e:3c:3b:51:6c:
                    a9:d7:36:50:60:53:dc:a2:ce:20:6f:cf:ac:f4:33:
                    32:8d:97:aa:e2:55:81:fb:78:bd:5c:a3:2c:f4:30:
                    7e:ff:ab:0b:a6:de:e5:aa:ea:f8:05:7c:6a:68:96:
                    dd:d6:0a:fa:17:97:14:b3:d0:7e:0f:b9:f7:e2:f8:
                    57:cd:d2:50:f3:d7:99:6d:ef:1b:85:a4:f9:d6:8d:
                    db:98:2d:5a:56:28:c3:bb:95:df:a8:90:9c:43:6f:
                    bd:c0:74:80:ca:6b:01:65:be:9f:04:09:2e:9a:72:
                    37:df:14:d2:a7:27:9f:4f:8e:1a:07:da:02:82:2e:
                    47:8c:6a:f3:a8:23:04:4d:02:29:0b:9a:b7:8a:bb:
                    ca:c2:33:99:d7:d2:65:d8:b2:51:82:ae:3b:47:cf:
                    a6:9d:83:80:16:23:62:03:c9:cb:ed:d7:af:46:89:
                    f5:21:5d:73:ab:e9:4e:3a:0a:b6:b6:75:67:81:1c:
                    4c:0c:1b:75:32:15:ec:07:5a:73:f6:cc:31:e6:49:
                    cf:6a:ec:02:3d:ed:c3:39:1d:f0:2a:53:ed:4a:d0:
                    e4:ac:7e:32:c8:ac:63:f4:96:c7:39:7c:58:6a:c4:
                    4f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:D2:45:F1:43:05:73:07:3B:06:BC:8E:9F:C5:01:5A:EE:F0:F3:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/b7718956-829a-3e02-9a2b-7cfb84f2012b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.crl

            X509v3 Authority Key Identifier:
                keyid:A5:7A:61:2C:B0:49:28:3C:1F:09:9D:0D:5E:0C:F3:8E:B9:58:F8:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.167.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:2d:32:de:31:d1:d4:50:c3:1f:0a:22:9d:af:6e:f6:bd:d5:
         60:26:d6:21:df:76:48:74:96:bc:e5:4b:35:cf:f2:7c:29:25:
         5f:43:6a:f2:7b:94:23:34:00:a5:11:85:0d:98:cc:0b:e2:d2:
         0b:ce:a6:18:e9:bf:f4:5d:ea:2e:91:6d:1d:57:83:b1:fb:b3:
         f7:47:9a:41:f2:3a:b0:d6:a9:79:f9:82:ee:8c:34:04:17:8b:
         6f:40:d3:08:f5:c0:f0:4e:b9:a9:8a:ce:f2:d3:ae:c6:f1:81:
         a1:36:6e:77:0e:8c:a7:0b:1a:a4:47:25:de:5e:80:b7:c0:e3:
         5f:66:48:4e:de:03:1e:0f:7b:05:1b:e0:5c:40:fd:a6:de:46:
         a9:a6:cf:ff:fa:f6:b0:c4:8a:55:bb:c6:4f:e4:04:fe:15:7b:
         1d:47:32:fe:06:bc:40:05:c5:60:95:2d:d8:d1:82:c2:e5:bc:
         8e:35:ce:b5:19:3e:ae:7a:79:54:12:16:79:61:11:21:fe:85:
         4a:f1:67:2f:af:5f:61:af:c5:6b:99:5d:23:31:71:1f:23:c8:
         90:13:6c:3c:c2:b4:f7:91:0a:f9:6a:de:cc:89:a3:f5:ae:13:
         aa:d1:73:8c:92:a9:72:53:2f:c5:49:d1:cf:05:93:9e:b9:8c:
         2f:85:52:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----