Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/ea64d2d0-0a26-336f-b0c7-b26de050542b.roa
File:                     ea64d2d0-0a26-336f-b0c7-b26de050542b.roa (raw, json)
Hash identifier:          DvoYv33SaTcP6SsodxZebVVJk4MkzHe4If9cPEAsuQM=
Subject key identifier:   99:C3:50:04:9F:67:42:F4:AD:37:65:D1:BF:F3:21:C5:84:8D:6F:D5
Certificate issuer:       /CN=112c6636-0b34-4e47-95cc-29a6b53a3388
Certificate serial:       010D0C9F43285847E78F641C6E4CBAEF8D2FF560
Authority key identifier: E5:26:64:A3:77:43:CC:BD:49:D5:1E:16:43:82:15:8F:D7:87:BA:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/ea64d2d0-0a26-336f-b0c7-b26de050542b.roa
Signing time:             Sun 17 Nov 2024 02:00:28 +0000
ROA not before:           Sun 17 Nov 2024 02:00:28 +0000
ROA not after:            Sat 15 Feb 2025 02:00:28 +0000
asID:                     4766
IP address blocks:        161.195.135.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e7:8f:64:1c:6e:4c:ba:ef:8d:2f:f5:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=112c6636-0b34-4e47-95cc-29a6b53a3388
        Validity
            Not Before: Nov 17 02:00:28 2024 GMT
            Not After : Feb 15 02:00:28 2025 GMT
        Subject: CN=c55f7502-4f4a-4fc4-9e3d-7877f5bae822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:72:cb:2c:c8:41:39:e6:f5:de:9f:14:fb:29:
                    c0:99:29:8a:40:d5:c7:1c:b2:99:5f:3d:04:5f:11:
                    c1:9a:12:53:fc:c2:56:78:2f:5b:6e:b3:4c:46:0a:
                    30:22:85:36:a5:1f:45:8b:6a:22:79:e2:51:40:75:
                    ba:be:b0:37:b4:8d:eb:f5:ad:85:73:d2:8e:44:5d:
                    ed:e2:96:b4:bd:5c:e6:59:02:84:2b:a4:4f:5c:da:
                    ef:73:11:c7:49:83:62:13:84:77:78:49:f8:3a:82:
                    5f:6d:3d:eb:02:c4:19:f5:27:49:45:d1:65:77:26:
                    63:b4:ae:f4:6d:7a:bd:02:b7:ee:5e:90:09:d3:9b:
                    a4:d8:29:73:7b:a6:b5:1c:46:af:c3:07:5a:0f:f7:
                    bc:b6:1a:80:de:48:4d:51:47:50:bb:6b:4c:ba:af:
                    44:ed:b7:29:f9:e5:a3:e2:3e:ac:9f:94:31:3e:ff:
                    83:c6:f7:54:ea:4e:7b:c7:34:fa:18:fa:ec:34:a9:
                    39:7d:c8:d8:7e:fc:2e:70:b1:72:83:89:d6:28:95:
                    ad:02:42:f4:76:1a:32:6a:70:33:c7:ee:3e:b1:20:
                    de:38:0a:b0:11:23:48:97:b7:21:74:b9:c7:40:e8:
                    0e:b8:dd:fa:d5:41:41:5e:62:35:8a:ec:14:c8:f1:
                    d0:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:C3:50:04:9F:67:42:F4:AD:37:65:D1:BF:F3:21:C5:84:8D:6F:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/ea64d2d0-0a26-336f-b0c7-b26de050542b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/112c6636-0b34-4e47-95cc-29a6b53a3388.crl

            X509v3 Authority Key Identifier:
                keyid:E5:26:64:A3:77:43:CC:BD:49:D5:1E:16:43:82:15:8F:D7:87:BA:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.195.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:58:e4:ed:19:39:7c:49:09:ca:e8:4b:4a:66:64:c1:5a:7a:
         08:56:18:a7:a4:29:fa:fc:8f:83:71:2c:4b:37:10:4d:eb:7f:
         83:5d:e5:a8:df:50:2c:86:91:c6:a3:80:64:d1:35:62:dd:90:
         bf:67:74:fe:17:62:6c:77:9f:db:68:bb:f5:e0:b5:e9:84:c3:
         e8:45:c2:2d:ae:b6:d4:52:83:66:e9:2f:3b:76:cb:f3:f5:64:
         91:7c:2d:9f:c3:92:cd:c0:dd:f6:4c:8c:0e:f5:a7:1e:4a:ee:
         f3:07:96:61:cb:c2:95:10:90:ea:05:6d:2c:48:01:d3:69:ce:
         28:66:0e:cb:02:db:f7:3b:60:a6:c2:8d:dc:6f:06:8f:2e:b5:
         68:94:20:b4:a6:2d:b0:ee:81:59:41:99:0d:a8:42:78:4c:a9:
         e4:6c:a2:db:2e:51:dc:8d:a8:ce:90:f1:ed:ac:f0:20:c3:39:
         ff:71:29:cd:49:ee:2e:5d:76:c2:96:20:f2:16:7a:69:ff:51:
         a2:92:50:ab:e8:9c:fb:7f:b4:61:63:6a:1f:43:61:ab:e0:e5:
         69:65:5b:a7:4c:98:c0:21:d1:71:19:3c:bf:ef:6d:7a:10:3c:
         8c:bd:8f:c1:fd:8e:1e:8e:b4:65:16:1a:ba:0f:68:02:9c:07:
         07:05:72:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----