Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/6c372e93-c67b-3e1e-a6f5-a68504c4f532.roa
File:                     6c372e93-c67b-3e1e-a6f5-a68504c4f532.roa (raw, json)
Hash identifier:          Jy8VcrUWfZ2t4PeYCF+za6KQEDZ0O2I58/ncCJuiQ7E=
Subject key identifier:   14:4D:DE:B7:CB:44:33:19:4F:F5:07:DA:74:E8:34:C3:88:3B:29:13
Certificate issuer:       /CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3
Certificate serial:       010D0C9F4328584839EACBB9295FB288EBFCFF98
Authority key identifier: BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/6c372e93-c67b-3e1e-a6f5-a68504c4f532.roa
Signing time:             Mon 16 Dec 2024 14:00:51 +0000
ROA not before:           Mon 16 Dec 2024 14:00:51 +0000
ROA not after:            Sun 16 Mar 2025 13:00:51 +0000
asID:                     22765
IP address blocks:        72.20.202.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:39:ea:cb:b9:29:5f:b2:88:eb:fc:ff:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3
        Validity
            Not Before: Dec 16 14:00:51 2024 GMT
            Not After : Mar 16 13:00:51 2025 GMT
        Subject: CN=027f9441-2429-4f43-b5f2-adac7f57f47c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:37:4a:d7:f6:ef:75:b2:36:e2:c5:55:7f:8a:
                    6a:31:54:e1:8a:c6:38:af:de:81:fb:18:dc:ed:22:
                    eb:b2:2c:1a:b4:1e:07:73:c4:e1:6a:33:ce:b5:e3:
                    a1:46:ff:cd:53:fc:41:3d:c9:9b:b7:1c:7d:3c:6e:
                    fa:bc:c6:e1:47:ee:ff:a5:8c:b3:0a:64:a9:38:67:
                    e2:bb:59:a7:9b:20:be:2b:a9:64:ff:c7:0b:d2:8a:
                    d5:e9:8a:1b:39:3e:31:c5:52:ef:17:41:eb:47:59:
                    70:eb:0a:83:76:06:bd:7c:7d:ae:e1:a0:3d:1c:19:
                    af:04:9e:34:fc:45:40:06:5f:e3:86:9e:d0:41:5d:
                    24:8f:9f:6b:7e:66:8d:e3:db:83:71:14:c0:fd:d2:
                    e3:50:95:02:d3:06:8b:ca:7c:9a:22:61:b9:27:1d:
                    91:c6:3d:c5:cb:1f:01:0a:7c:40:1a:58:f5:82:25:
                    11:b9:df:6d:14:db:fd:ba:3e:a6:40:17:64:b7:80:
                    2c:ef:15:ad:f6:2f:37:24:af:bd:d2:5d:a6:54:06:
                    f8:f0:ab:9e:5f:29:23:20:29:f0:09:fa:24:3f:00:
                    fb:23:3e:6c:9d:b3:7c:13:9b:97:5d:d0:c6:75:27:
                    e3:36:ed:96:4f:ea:96:3b:2c:e0:35:a9:af:e1:3e:
                    0c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:4D:DE:B7:CB:44:33:19:4F:F5:07:DA:74:E8:34:C3:88:3B:29:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/6c372e93-c67b-3e1e-a6f5-a68504c4f532.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl

            X509v3 Authority Key Identifier:
                keyid:BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.20.202.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:c3:23:31:c6:ae:2e:cc:78:d3:2f:d0:ac:74:9c:7b:22:5c:
         c7:12:09:2a:d4:8f:ec:00:09:76:8b:c4:e0:c5:7a:73:f4:33:
         22:07:9b:12:36:48:11:40:d0:2d:03:ca:4e:cc:d5:fb:39:7e:
         01:dc:bf:84:99:34:c1:72:99:3a:d6:ce:b7:6c:dc:62:91:11:
         75:09:0f:a6:6e:6c:21:54:82:72:f9:e4:99:8e:22:52:3c:76:
         a8:cd:60:b2:ed:56:29:bf:cb:fd:9a:29:24:7f:87:c6:96:2a:
         bd:e9:d6:3f:da:54:ec:97:64:21:6d:90:fb:64:55:bc:ab:bf:
         f8:e0:c2:1d:8f:98:4c:ff:17:c1:f9:66:7b:73:d5:ef:a7:60:
         1e:3a:7e:b9:f9:73:3e:be:c4:90:0f:88:8f:80:14:b4:b8:2e:
         13:97:15:55:a9:60:9b:99:fa:31:99:eb:6e:39:29:3c:41:32:
         dd:87:f9:3e:39:4a:34:5c:e0:8c:84:d2:57:dd:16:b8:7c:fa:
         a5:a5:d8:42:fe:11:4a:6c:a6:72:2b:f8:75:d0:6f:5d:5b:78:
         7c:3f:a8:8c:8e:35:50:64:b7:a1:f2:8c:9a:43:8c:5a:d2:b9:
         fb:97:7c:b5:de:dd:5b:df:2d:2b:9e:65:00:a5:7c:b5:e8:cb:
         3a:34:0f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----