Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6172d736-c698-4515-a8d5-e8f599b88b89/ef2a1004-236e-3208-8965-a018fd4e3046.roa
File:                     ef2a1004-236e-3208-8965-a018fd4e3046.roa (raw, json)
Hash identifier:          AuSGeyAazUh7i4hu7DBc318qBsM66tKilG51F9auSeQ=
Subject key identifier:   F8:D0:7C:B0:09:40:B9:A8:62:2D:C1:E2:71:CA:22:03:05:C1:B0:F4
Certificate issuer:       /CN=6172d736-c698-4515-a8d5-e8f599b88b89
Certificate serial:       010D0C9F432858484EDAC24B0877F224B8F35B80
Authority key identifier: 3C:38:46:CA:19:55:91:B3:98:5F:70:54:AE:9B:4B:95:7F:7C:59:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6172d736-c698-4515-a8d5-e8f599b88b89.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6172d736-c698-4515-a8d5-e8f599b88b89/ef2a1004-236e-3208-8965-a018fd4e3046.roa
Signing time:             Tue 24 Dec 2024 02:00:38 +0000
ROA not before:           Tue 24 Dec 2024 02:00:38 +0000
ROA not after:            Mon 24 Mar 2025 01:00:38 +0000
asID:                     14618
IP address blocks:        69.67.162.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4e:da:c2:4b:08:77:f2:24:b8:f3:5b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6172d736-c698-4515-a8d5-e8f599b88b89
        Validity
            Not Before: Dec 24 02:00:38 2024 GMT
            Not After : Mar 24 01:00:38 2025 GMT
        Subject: CN=0e16a7c8-c04c-4d64-8a39-62f7a719d5cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ec:ea:b0:a4:e1:f5:18:9a:d6:86:68:6b:e9:
                    f8:2d:a1:a7:00:d8:b8:bf:b1:f2:cd:49:94:5d:63:
                    b0:9f:27:4d:89:46:5c:e4:79:a5:35:f7:22:2f:37:
                    0d:5a:31:35:e5:ec:07:93:14:e8:fc:06:e3:a5:39:
                    97:1c:c0:f4:99:11:e3:a4:f4:a3:eb:30:49:e4:eb:
                    a8:f8:e5:5b:20:63:54:f7:64:4c:a9:40:4b:a5:ea:
                    22:e6:63:12:d0:ec:78:00:89:7c:a2:8d:b9:9a:64:
                    e0:0f:2e:17:09:cb:7e:3a:94:82:90:14:63:82:6c:
                    b3:66:a3:77:42:1d:32:45:9c:02:f4:c0:4e:b0:6a:
                    63:c9:ec:34:79:91:4d:4c:df:9d:62:30:c3:fe:c4:
                    61:75:23:de:61:a3:e0:5f:4f:c4:db:ea:93:64:3d:
                    54:cd:09:fe:7e:64:bd:7b:74:e9:2a:a9:f2:e7:ed:
                    06:19:4d:f4:d6:fd:45:2a:4b:ee:ac:f0:ef:58:c8:
                    3f:73:55:14:b7:6a:c3:82:64:58:84:15:fd:15:13:
                    81:80:2a:11:96:34:d1:22:d1:0e:40:a6:3f:ea:84:
                    36:5e:b8:9c:20:b2:37:b5:65:4d:42:21:d5:9f:01:
                    0b:52:22:50:e0:c1:d9:55:2e:16:ce:42:25:35:60:
                    cd:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:D0:7C:B0:09:40:B9:A8:62:2D:C1:E2:71:CA:22:03:05:C1:B0:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6172d736-c698-4515-a8d5-e8f599b88b89/ef2a1004-236e-3208-8965-a018fd4e3046.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6172d736-c698-4515-a8d5-e8f599b88b89/6172d736-c698-4515-a8d5-e8f599b88b89.crl

            X509v3 Authority Key Identifier:
                keyid:3C:38:46:CA:19:55:91:B3:98:5F:70:54:AE:9B:4B:95:7F:7C:59:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6172d736-c698-4515-a8d5-e8f599b88b89.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.67.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:87:3f:37:cb:3f:ce:bd:8e:4b:ec:b3:57:3d:b1:b6:45:7a:
         3c:82:41:df:72:7d:8c:cf:25:2e:8e:55:1f:9e:ca:df:f0:ce:
         91:3b:96:96:94:f5:37:5f:c0:e8:78:e1:67:8b:1f:cd:1a:9e:
         43:fd:14:85:79:e5:df:60:0f:96:bc:7c:1e:3f:af:e9:13:4f:
         06:2d:55:ad:c0:bb:35:c7:f4:a7:29:01:73:1e:78:5f:e3:1a:
         69:c1:e0:1b:1e:c1:f7:19:c4:e1:3f:1a:37:93:d6:d9:b9:15:
         9b:be:2d:85:42:66:28:6a:f4:da:88:95:ab:aa:19:16:22:ed:
         b1:fe:54:71:c9:13:41:4a:7a:31:58:11:27:c0:10:a6:48:30:
         ee:3d:c3:1b:bb:49:8f:31:9f:ac:db:2f:34:57:ba:6e:da:5d:
         19:86:10:80:a0:5c:70:e3:87:5a:70:f9:07:63:8d:fb:b2:80:
         ad:5a:6c:fa:e6:a5:0f:b7:a0:95:1e:b8:39:4e:4e:f5:1a:ec:
         3d:7e:ea:bf:e5:d0:b5:f7:a0:11:92:61:b5:27:4c:fb:4e:db:
         f2:0e:88:ea:24:f9:47:36:ba:46:4c:1b:74:9e:7b:7b:96:db:
         e5:bd:10:ee:ac:57:08:fe:af:42:f0:78:ac:3c:32:18:20:d4:
         a8:60:42:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----