Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/59307af2-e991-39c9-a2a1-03bf609cac79.roa
File:                     59307af2-e991-39c9-a2a1-03bf609cac79.roa (raw, json)
Hash identifier:          lK+0Vio3/zwajFEMoin6HcFaB6WajaQzr7Pdmd8JL/w=
Subject key identifier:   60:CF:B5:6B:87:1B:52:22:39:6B:10:2A:C4:4B:F4:F3:14:98:44:7F
Certificate issuer:       /CN=84304b6a-cd4a-40f2-b142-5f44e824b547
Certificate serial:       010D0C9F432858483E1AB1A9A470FBE040925380
Authority key identifier: 3D:FD:65:91:53:86:67:35:20:D0:5B:2A:BC:53:C5:17:A8:94:8D:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/59307af2-e991-39c9-a2a1-03bf609cac79.roa
Signing time:             Wed 18 Dec 2024 02:00:39 +0000
ROA not before:           Wed 18 Dec 2024 02:00:39 +0000
ROA not after:            Tue 18 Mar 2025 01:00:39 +0000
asID:                     62575
IP address blocks:        192.243.88.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3e:1a:b1:a9:a4:70:fb:e0:40:92:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84304b6a-cd4a-40f2-b142-5f44e824b547
        Validity
            Not Before: Dec 18 02:00:39 2024 GMT
            Not After : Mar 18 01:00:39 2025 GMT
        Subject: CN=0b57dbb2-7010-4b09-90a8-1335635d463a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:37:a5:c4:c4:c8:8d:5f:52:32:88:f3:bd:2a:
                    8a:83:49:ef:60:5f:bb:de:39:07:88:f8:0c:23:55:
                    22:60:25:7e:fb:6d:78:d1:20:d7:5c:6b:5e:fe:7f:
                    db:3f:da:db:83:b3:09:36:8c:8d:a5:97:df:47:c1:
                    fb:23:d7:78:53:e7:75:39:94:8c:e5:a6:63:94:51:
                    4f:f8:6c:aa:c9:a6:84:4f:de:d4:32:56:fa:99:ae:
                    a9:8f:eb:e8:cf:cd:c6:92:fb:9a:8c:0a:45:e6:e4:
                    a2:49:32:f0:cf:3e:a2:8a:a8:0a:b0:dc:8d:80:64:
                    e2:9f:4b:f3:4b:b0:27:cd:24:48:f0:1e:ca:b1:db:
                    03:14:38:9c:e8:e6:1d:4b:48:f5:ac:4b:0b:ec:da:
                    1c:ba:b4:88:96:9c:34:36:55:41:49:90:02:94:f0:
                    6e:a4:d3:78:f7:4e:75:66:a7:3f:4e:0a:48:f8:53:
                    0f:26:ea:bc:a1:48:ce:74:26:7a:b1:13:91:4e:ab:
                    ac:34:9d:72:a3:88:c9:6d:04:a7:59:a4:f5:78:ab:
                    9f:80:d1:88:3c:ae:21:01:a2:32:a8:ed:b6:28:c5:
                    2e:43:af:de:1a:fb:22:23:19:b1:43:ec:42:34:62:
                    22:65:3a:ba:42:33:65:ff:15:d0:ca:6c:bc:ea:c6:
                    3c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:CF:B5:6B:87:1B:52:22:39:6B:10:2A:C4:4B:F4:F3:14:98:44:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/59307af2-e991-39c9-a2a1-03bf609cac79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/84304b6a-cd4a-40f2-b142-5f44e824b547.crl

            X509v3 Authority Key Identifier:
                keyid:3D:FD:65:91:53:86:67:35:20:D0:5B:2A:BC:53:C5:17:A8:94:8D:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.243.88.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:fc:76:11:9a:41:68:62:f0:b5:6b:af:d1:27:5e:d9:b2:98:
         d1:ce:34:7f:96:03:4c:1f:1b:39:76:0e:74:24:a8:d1:26:2f:
         e0:1d:84:2e:44:f6:b3:2b:17:27:28:c9:c3:d2:a8:08:a8:03:
         0c:5e:ec:e0:0d:32:63:a0:29:5c:8c:46:aa:30:29:ef:0d:9b:
         64:23:92:d9:1d:ac:ef:69:35:a2:ed:7d:37:6c:42:cb:f0:c8:
         68:45:61:aa:03:95:65:e7:bb:e4:52:66:13:38:7f:c8:cf:a5:
         d9:9b:6d:e2:f4:ae:32:59:0c:a0:a6:8a:9d:2f:84:92:63:ab:
         c6:ec:8e:6f:1e:42:87:23:13:88:2b:2b:ce:7d:71:16:fe:63:
         87:0d:c5:c8:81:68:b6:a9:72:ba:e5:13:f2:5c:81:8f:b2:55:
         35:de:ae:e9:75:76:6d:e2:b2:ca:b4:78:c2:f1:04:07:7d:bf:
         fd:a3:49:7e:75:7e:78:ac:eb:47:90:2d:2f:0c:e3:91:3c:29:
         9e:8e:4b:c7:2f:d7:6b:5b:50:7d:ca:78:b9:f5:8e:ed:05:19:
         18:6c:d8:49:1a:86:3a:68:3f:c4:81:94:5d:33:75:7f:7f:f2:
         05:23:cc:e9:b8:66:a6:65:c8:90:a2:2d:c4:41:21:60:73:45:
         23:19:45:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----