Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/2230d932-8be2-39f0-ade3-412ab37a6431.roa
File:                     2230d932-8be2-39f0-ade3-412ab37a6431.roa (raw, json)
Hash identifier:          PSCv1bA7cmNbzK84ZEMPk3PXt3bPEFZq49iN5PsqvfQ=
Subject key identifier:   DA:9A:4E:60:5C:09:F0:EC:38:CB:2C:11:68:A7:80:78:0A:53:A3:20
Certificate issuer:       /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial:       010D0C9F432858484C1017B32477C26F3709E500
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/2230d932-8be2-39f0-ade3-412ab37a6431.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     12083
IP address blocks:        66.216.214.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:10:17:b3:24:77:c2:6f:37:09:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=de3ad1d6-74ad-4455-84f6-c09c51253a67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:8b:8f:40:c2:5e:6f:75:44:00:a8:2b:27:f0:
                    1a:bc:39:57:0a:9e:ce:84:80:e1:0e:cb:02:70:9f:
                    2c:6f:fb:fe:4c:89:16:51:8f:86:1e:19:32:34:a1:
                    7d:c5:8e:aa:7f:b6:ee:c1:5b:48:35:eb:39:35:c1:
                    b1:42:a2:d2:63:fe:38:e5:0f:5c:ea:03:05:be:b6:
                    8c:8a:a1:d7:b5:fd:ff:d8:d2:6a:20:b2:e8:d1:9d:
                    df:0d:16:63:55:de:79:5c:0c:b3:2c:dc:a6:8c:0c:
                    0b:cd:d6:ae:99:8c:65:9d:0c:70:9c:dc:a8:9f:1e:
                    ba:e0:15:2f:a7:b0:06:19:46:b4:58:c5:54:d0:91:
                    4a:42:ac:35:cd:dc:97:60:c7:24:bc:77:84:2e:dc:
                    6a:a7:40:1d:bb:0a:5b:91:e9:b2:c7:cb:3b:5b:39:
                    82:bc:7e:2e:52:81:ce:92:fc:7f:a6:c0:72:44:04:
                    42:c5:86:51:4a:89:40:c2:4f:b4:5f:fd:ad:c5:e6:
                    24:d6:1c:0c:e0:fb:ac:e6:c0:20:ad:fb:37:af:99:
                    13:95:70:5c:54:53:f6:c9:fe:0b:15:f5:14:73:73:
                    f9:88:c8:fc:11:a2:ab:cf:e2:ae:df:9b:f0:5f:5a:
                    77:dc:a2:02:4b:7e:a1:a3:7b:ea:58:82:7a:53:65:
                    80:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:9A:4E:60:5C:09:F0:EC:38:CB:2C:11:68:A7:80:78:0A:53:A3:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/2230d932-8be2-39f0-ade3-412ab37a6431.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl

            X509v3 Authority Key Identifier:
                keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.216.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:b4:01:8e:ca:15:08:51:e0:57:d2:f0:35:ab:ba:f5:40:8e:
         7c:0a:a4:9b:22:04:4a:e5:f6:46:10:40:f9:ae:b0:d1:82:54:
         0c:6d:75:95:84:c3:03:dd:b8:7d:9a:f0:d8:bf:60:16:ab:1e:
         41:2f:b8:f8:9c:91:88:25:dc:73:3c:fe:bc:af:4c:06:13:f7:
         a1:4f:f5:eb:b8:19:83:fe:94:7c:c3:e6:09:0a:fc:fa:8b:ea:
         66:de:c7:8f:bd:8a:e9:1a:b7:c7:af:34:1e:83:84:23:2f:3f:
         44:c1:dc:e6:11:9f:6a:06:81:2e:e1:a9:65:38:fb:56:aa:af:
         1b:03:29:a4:36:12:5b:3e:c6:a7:2b:90:d6:d8:9c:f8:5b:ad:
         a0:cd:df:94:1c:78:6e:f8:a6:e6:7d:2f:21:30:1a:9e:ab:5b:
         12:8a:51:d1:09:6a:e4:a8:45:06:06:fc:1c:3a:ac:12:47:ed:
         2e:15:9b:cd:fb:6c:ee:c1:2e:e3:1c:8c:11:42:a3:9d:16:4f:
         22:26:71:1f:74:f8:47:3f:11:84:0b:bd:08:83:3f:e9:6a:c9:
         65:75:dd:8a:84:70:03:40:89:14:c7:dd:fa:f4:9d:34:2e:d2:
         6e:a2:84:ea:30:21:dd:7b:21:e6:26:ed:d2:9a:b1:ef:67:d1:
         3c:26:d7:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----