Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/ddd0c9eb-846f-3b41-b14d-a18fb029e1e2.roa
File:                     ddd0c9eb-846f-3b41-b14d-a18fb029e1e2.roa (raw, json)
Hash identifier:          y5GeknixttK80vmLe3mRGSWUCuTSHvmZjf1IfAFDF04=
Subject key identifier:   9E:41:67:06:36:F2:7A:A2:0B:6A:50:C7:33:8F:86:EE:E6:EA:4A:E7
Certificate issuer:       /CN=e3fada49-b353-4a69-9b32-1b6ab3729db1
Certificate serial:       010D0C9F4328584845945E3575CCBB2B3309B714
Authority key identifier: 26:E9:72:DD:F2:AB:6A:0B:0F:65:29:13:47:2F:D8:DF:E5:06:3D:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/ddd0c9eb-846f-3b41-b14d-a18fb029e1e2.roa
Signing time:             Fri 20 Dec 2024 18:16:36 +0000
ROA not before:           Fri 20 Dec 2024 18:16:36 +0000
ROA not after:            Thu 20 Mar 2025 17:16:36 +0000
asID:                     3855
IP address blocks:        216.249.32.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:45:94:5e:35:75:cc:bb:2b:33:09:b7:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3fada49-b353-4a69-9b32-1b6ab3729db1
        Validity
            Not Before: Dec 20 18:16:36 2024 GMT
            Not After : Mar 20 17:16:36 2025 GMT
        Subject: CN=4d7a5ba2-39b6-4728-b7be-dca0ec47e6dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:30:ca:95:38:d6:02:6f:a8:df:bc:63:43:b6:
                    d9:17:26:74:aa:5e:19:d6:92:65:95:6a:56:f3:9d:
                    3e:a3:e3:c9:74:fa:8d:ef:dc:b8:1a:72:79:87:7b:
                    21:75:c7:cb:b2:bb:ca:0e:20:c8:08:a7:b5:43:f4:
                    39:5a:29:9b:5b:ca:c0:b7:3b:a0:39:c6:8b:2e:00:
                    14:d8:da:72:07:d3:2e:4a:32:f3:72:24:be:5f:ee:
                    ed:9f:dc:9a:de:2f:f7:f7:a3:b5:bd:68:dc:4b:bf:
                    51:34:9b:39:e2:48:95:09:23:21:88:03:11:a8:a6:
                    63:86:9a:7c:b3:c8:8b:d4:08:84:48:10:0c:5b:d0:
                    56:42:c9:a8:ac:8e:66:42:07:8c:c3:dc:bf:89:17:
                    3f:22:5a:34:0d:14:02:e0:4d:19:ed:74:5d:60:80:
                    94:94:f0:a5:ef:c4:33:68:7a:66:48:07:a1:e1:52:
                    29:d9:c4:d6:05:c3:72:54:cc:83:61:c2:f5:c9:69:
                    9d:19:ba:ca:32:10:51:aa:01:4b:25:33:ca:d5:a8:
                    5a:0d:12:5b:ff:00:26:33:3d:58:90:6e:d4:09:db:
                    37:9c:5b:a9:f6:0c:9f:7e:66:2b:c0:cf:d3:58:68:
                    26:78:fa:14:90:e0:53:c7:12:6f:bd:fe:09:85:ef:
                    88:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:41:67:06:36:F2:7A:A2:0B:6A:50:C7:33:8F:86:EE:E6:EA:4A:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/ddd0c9eb-846f-3b41-b14d-a18fb029e1e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/e3fada49-b353-4a69-9b32-1b6ab3729db1.crl

            X509v3 Authority Key Identifier:
                keyid:26:E9:72:DD:F2:AB:6A:0B:0F:65:29:13:47:2F:D8:DF:E5:06:3D:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.249.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:4d:39:c8:30:37:60:c3:a9:d4:fd:8c:90:fb:1e:47:7d:64:
         b7:87:9a:53:08:1d:c7:2f:f5:55:6e:17:96:e7:12:36:49:e1:
         b0:a8:34:5c:03:35:1f:ab:e5:bb:d6:b4:4d:09:24:8e:5a:4d:
         37:8a:9a:81:a7:a6:04:6d:e3:f4:b9:60:67:32:f3:83:c6:cd:
         01:6b:5a:00:4c:4a:0e:ef:88:6c:85:31:12:00:1b:62:89:39:
         cb:73:ee:b0:b3:83:f2:34:15:89:79:e8:26:fc:8d:46:e4:b6:
         dc:2b:52:ed:aa:66:1f:fa:65:6d:b8:44:a5:7c:80:6d:5e:e0:
         ae:79:c8:ac:9c:56:05:78:a1:72:74:77:24:b7:7b:80:1c:c0:
         3b:3e:7e:40:82:14:2a:5b:56:e5:92:7d:5c:5a:e2:85:0e:49:
         f6:de:1c:5c:66:76:da:f3:17:98:ff:4e:4b:be:aa:fd:e6:e9:
         83:f9:3a:41:e0:c4:1f:cb:e9:42:01:ea:00:bb:19:d8:7b:72:
         36:01:b0:82:4e:e1:b5:72:d2:27:d6:58:e4:55:e5:10:89:67:
         50:ec:f1:af:ef:fa:0f:de:dd:0e:c0:eb:27:94:71:59:5f:93:
         dc:58:05:d7:61:b7:09:47:e5:9e:0a:61:92:84:aa:a1:6b:e6:
         e8:31:15:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----