Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/dffc97fb-786e-318b-b4ee-293d1a0f1da5.roa
File:                     dffc97fb-786e-318b-b4ee-293d1a0f1da5.roa (raw, json)
Hash identifier:          0g4or7aRzHqfI5rx8wfBfRFWgHIXBlV//4mDc6k1naE=
Subject key identifier:   04:3C:15:0A:B8:F2:63:85:2D:02:99:70:3D:D2:53:F4:FD:F9:84:37
Certificate issuer:       /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial:       010D0C9F43285847ED24C0878B902773DBB35018
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/dffc97fb-786e-318b-b4ee-293d1a0f1da5.roa
Signing time:             Tue 19 Nov 2024 02:00:27 +0000
ROA not before:           Tue 19 Nov 2024 02:00:27 +0000
ROA not after:            Mon 17 Feb 2025 02:00:27 +0000
asID:                     11090
IP address blocks:        64.4.224.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ed:24:c0:87:8b:90:27:73:db:b3:50:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
        Validity
            Not Before: Nov 19 02:00:27 2024 GMT
            Not After : Feb 17 02:00:27 2025 GMT
        Subject: CN=ff50ad84-aa66-45d9-a756-87fd637a37f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:2c:2f:40:81:c8:f6:22:68:15:b3:af:93:20:
                    98:cf:1e:40:8e:88:c2:10:4b:6b:ed:8d:84:d0:47:
                    6e:c8:7b:5c:76:9f:0a:12:41:eb:1a:2e:5e:02:55:
                    ad:c1:b9:de:08:eb:01:e1:71:a7:ac:83:60:1e:bd:
                    98:17:21:4a:f3:da:1f:69:b4:d3:ac:9b:6a:63:98:
                    92:57:e5:84:e0:6b:30:d4:09:5e:01:27:7d:89:87:
                    8c:d3:9a:b2:dd:81:78:ea:97:fb:4b:5a:bd:25:c3:
                    ba:01:2e:f0:93:5b:51:41:49:e7:56:81:ff:ca:eb:
                    5c:15:a9:2c:92:71:d1:ae:4f:86:9f:5e:27:57:4e:
                    f0:48:fa:9e:e3:4a:4d:b4:58:e5:c8:66:4d:17:22:
                    3d:0c:8f:ad:bc:a3:5d:dd:cc:7c:89:42:48:f4:b4:
                    af:71:c0:58:1c:08:27:3a:dd:74:39:34:a3:62:35:
                    e8:56:fd:22:00:45:15:61:c1:ab:bc:25:de:6c:83:
                    35:b7:b5:0b:84:0e:fd:d6:91:29:56:39:07:15:78:
                    95:f6:b8:53:78:06:7b:b9:05:12:55:f5:ab:e0:02:
                    63:c6:3d:4b:f7:b8:58:6d:3c:ad:ad:88:3f:cf:38:
                    26:52:c0:a3:9f:e6:14:b7:dd:09:c6:bd:3e:0e:59:
                    24:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:3C:15:0A:B8:F2:63:85:2D:02:99:70:3D:D2:53:F4:FD:F9:84:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/dffc97fb-786e-318b-b4ee-293d1a0f1da5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl

            X509v3 Authority Key Identifier:
                keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.4.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:ac:26:95:82:24:13:43:9d:06:80:19:67:53:45:57:d9:af:
         d7:1b:05:35:b6:77:0c:51:f2:dc:ba:ee:d6:00:93:bf:38:4e:
         c7:2f:34:fa:9a:de:5d:e7:58:85:af:4d:f5:d3:7d:67:9d:fb:
         fc:f0:48:a4:d4:d2:7a:22:d5:17:b9:d4:3e:9c:fc:59:46:97:
         13:7b:9b:2f:ce:b0:c2:25:e4:06:b1:e6:66:1e:06:f7:9e:82:
         8d:6e:19:49:b3:04:f3:ea:02:04:22:21:12:96:38:6d:52:d7:
         8a:98:53:09:55:6e:1b:3e:cb:3b:c7:46:cf:92:70:eb:c5:36:
         4f:59:e6:8b:9d:21:a8:cb:8c:5d:a7:93:67:93:9d:06:7e:d3:
         2d:6b:d2:e6:6d:f4:53:eb:ef:69:dd:57:2a:2b:64:fb:31:ca:
         85:2b:ad:54:bf:29:de:f0:e3:f0:1c:cd:cd:e6:18:85:5d:54:
         99:19:b2:c9:d5:97:5c:26:f8:40:66:8c:eb:c0:2d:96:11:f6:
         db:d7:52:01:6a:ff:af:8b:51:18:15:0d:86:12:4d:e2:f5:e4:
         aa:fb:40:b2:de:07:66:20:f7:a6:61:cb:b4:7d:56:6c:60:ab:
         25:0f:b2:3d:0f:df:d0:84:53:9d:c3:e9:29:82:e3:e4:6a:0c:
         b6:5d:68:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----