Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b94accf0-8067-4a9a-ba69-832d3d95402d/5e7201fa-0fc9-3bfb-b150-cb3db51ac63f.roa
File:                     5e7201fa-0fc9-3bfb-b150-cb3db51ac63f.roa (raw, json)
Hash identifier:          LJRsdBbLyuEUmiFnsgbK3rDmIzd1vSzKGcWIvQyiXV8=
Subject key identifier:   9A:E1:62:85:ED:28:45:06:1C:BB:20:D6:CE:43:D5:74:CD:4B:F5:A6
Certificate issuer:       /CN=b94accf0-8067-4a9a-ba69-832d3d95402d
Certificate serial:       010D0C9F43285848424AD60F558222DF0122D3C0
Authority key identifier: AE:8E:16:C6:CD:47:F7:01:8F:62:8D:0C:33:24:C4:A9:A4:5E:6E:2E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b94accf0-8067-4a9a-ba69-832d3d95402d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b94accf0-8067-4a9a-ba69-832d3d95402d/5e7201fa-0fc9-3bfb-b150-cb3db51ac63f.roa
Signing time:             Thu 19 Dec 2024 14:00:52 +0000
ROA not before:           Thu 19 Dec 2024 14:00:52 +0000
ROA not after:            Wed 19 Mar 2025 13:00:52 +0000
asID:                     8075
IP address blocks:        170.62.37.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:4a:d6:0f:55:82:22:df:01:22:d3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b94accf0-8067-4a9a-ba69-832d3d95402d
        Validity
            Not Before: Dec 19 14:00:52 2024 GMT
            Not After : Mar 19 13:00:52 2025 GMT
        Subject: CN=6e282847-07c3-434c-b461-9522445e038c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ae:e0:4e:db:a9:82:52:3f:e3:e1:bd:de:ee:
                    f8:87:0e:85:44:d4:23:3a:3e:89:2d:ba:1f:04:aa:
                    e8:6e:ad:b3:6b:6c:cb:af:ca:0f:64:b9:c0:15:a0:
                    d7:59:2f:6c:e5:a2:c3:93:aa:73:5e:07:18:03:9d:
                    c2:32:20:40:3c:c3:fd:26:e6:fe:2a:00:27:eb:6d:
                    79:01:e0:ec:aa:a2:78:e4:99:9f:71:0e:f2:13:8b:
                    41:c8:17:32:ff:59:dc:5f:fc:51:7a:04:03:0c:ac:
                    69:08:bf:9a:c9:2b:28:dc:88:89:85:2c:87:51:d4:
                    f8:ae:7b:72:87:ca:c0:bd:86:9e:3d:4f:1b:16:90:
                    80:9d:0f:bf:c5:44:22:50:3b:ac:ea:ce:94:8c:9b:
                    d0:7e:96:d7:dc:31:14:20:af:ac:79:5f:91:5d:b2:
                    20:ee:8b:91:c2:7e:38:94:67:d4:d1:0c:46:97:69:
                    37:17:32:61:72:47:7a:88:12:70:49:a6:a6:e9:80:
                    82:d0:e4:81:3e:6a:f8:c2:e0:97:a9:e5:a1:8d:24:
                    34:2c:7a:4d:ea:f0:d3:fb:c1:08:d0:91:fb:5e:db:
                    1b:66:0e:58:bf:80:e8:5d:18:68:3f:4d:fa:e6:09:
                    e6:38:23:0f:c3:9b:84:73:cb:13:b6:e8:1e:f4:9f:
                    81:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:E1:62:85:ED:28:45:06:1C:BB:20:D6:CE:43:D5:74:CD:4B:F5:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b94accf0-8067-4a9a-ba69-832d3d95402d/5e7201fa-0fc9-3bfb-b150-cb3db51ac63f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b94accf0-8067-4a9a-ba69-832d3d95402d/b94accf0-8067-4a9a-ba69-832d3d95402d.crl

            X509v3 Authority Key Identifier:
                keyid:AE:8E:16:C6:CD:47:F7:01:8F:62:8D:0C:33:24:C4:A9:A4:5E:6E:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b94accf0-8067-4a9a-ba69-832d3d95402d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.62.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:a3:43:bf:c1:b3:e0:42:85:98:7a:e9:df:80:05:ed:cb:d5:
         88:ba:d3:aa:ae:88:30:9b:7b:17:fe:e6:fe:e6:0e:e5:53:bf:
         64:42:5c:5c:6a:87:ed:97:1b:6f:bd:5e:41:72:81:c5:58:ef:
         87:0f:a7:6c:74:4c:55:0a:48:a4:00:ae:80:ec:f9:ab:08:c8:
         e1:96:e5:4e:de:57:45:88:f0:96:21:66:36:2c:08:c5:de:bd:
         26:ce:41:f9:6d:f1:a4:6a:3b:f2:20:68:fd:f9:43:ea:92:ab:
         f4:a7:32:1b:2b:ed:91:29:40:f9:95:92:4c:55:64:a4:7e:e1:
         01:6b:db:b7:fe:1e:a9:68:82:1c:da:ba:78:a4:77:6e:0f:14:
         01:c4:87:49:b3:20:d9:79:af:44:29:43:1e:27:75:86:5c:22:
         38:ef:b5:0a:11:71:61:fe:45:74:7e:69:b6:7a:0c:ba:f7:35:
         31:e9:b9:4c:b2:ad:8f:37:fc:69:73:3c:d9:ee:b7:48:73:de:
         ca:0a:73:79:da:56:57:b7:79:bb:23:91:7f:0c:98:b1:f4:99:
         6f:0e:6d:01:dc:d3:08:a8:13:87:2b:22:e8:d8:88:c7:ef:0c:
         d2:1b:b0:b4:9d:58:43:cd:3c:bc:10:f1:7e:8a:23:7b:1a:d5:
         1e:b6:bb:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----