Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/21e688b6-2a04-378e-bad3-44d4590c55d6.roa
File:                     21e688b6-2a04-378e-bad3-44d4590c55d6.roa (raw, json)
Hash identifier:          +pBQr1E43OP7d5rWr8CQw2Fqd+kHrRIOXFpe6vJimzY=
Subject key identifier:   8C:3C:AE:16:A5:B7:30:49:5D:5C:D1:7E:E6:78:E0:EA:D6:8D:F7:4E
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F43285848617C3BBCE10D73F1B840E700
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/21e688b6-2a04-378e-bad3-44d4590c55d6.roa
Signing time:             Mon 30 Dec 2024 18:10:37 +0000
ROA not before:           Mon 30 Dec 2024 18:10:37 +0000
ROA not after:            Sun 30 Mar 2025 17:10:37 +0000
asID:                     81
IP address blocks:        198.86.16.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:61:7c:3b:bc:e1:0d:73:f1:b8:40:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Dec 30 18:10:37 2024 GMT
            Not After : Mar 30 17:10:37 2025 GMT
        Subject: CN=4af03b5e-24a2-4a69-a61e-ee9ad8fef83d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:af:97:dc:37:c2:de:4e:3f:5a:d7:0d:0f:ad:
                    54:3c:42:f5:00:65:47:e8:db:0f:64:cf:bc:63:7e:
                    89:4b:b1:7c:de:ca:2d:7e:38:e5:8b:12:eb:ac:e0:
                    69:64:22:5e:da:c0:16:d3:71:21:6e:df:02:bd:a0:
                    a7:46:b5:eb:2a:8e:61:f9:7c:4e:e2:66:e0:fc:75:
                    b4:9f:cc:c3:dd:ea:70:ce:75:d7:cf:a1:9c:9f:f0:
                    0e:c1:3b:0a:09:b8:bc:4e:6b:7d:c4:42:93:5e:90:
                    28:86:27:21:a8:ce:54:bc:de:7a:ca:c2:c2:50:b5:
                    19:60:76:65:d9:84:36:f1:68:d2:51:00:54:e8:8f:
                    08:78:55:3f:4b:a8:7a:ac:f5:e3:f0:b2:e1:57:45:
                    60:ee:64:df:dd:46:50:71:b2:ad:ca:84:b0:66:a4:
                    8a:1d:d2:e4:0c:82:b1:a6:b3:cd:8f:a5:f8:bd:b6:
                    da:1f:77:e1:c7:a2:56:33:28:14:84:02:ab:49:e9:
                    e4:69:e7:02:34:46:b6:7c:02:6d:ab:b5:b6:ce:2c:
                    44:79:67:fc:64:a8:6b:da:10:a1:4a:d3:cf:36:d2:
                    db:c2:4e:d9:3d:32:d4:9d:f9:7c:13:40:79:0b:92:
                    a5:1a:57:4e:a8:e6:57:1d:dd:6b:65:46:9d:47:f7:
                    bb:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:3C:AE:16:A5:B7:30:49:5D:5C:D1:7E:E6:78:E0:EA:D6:8D:F7:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/21e688b6-2a04-378e-bad3-44d4590c55d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.86.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:1e:d5:f7:87:25:31:81:71:75:a4:68:8f:92:0e:9a:08:cd:
         ac:36:8b:63:23:2b:ab:92:3a:b4:54:a2:d7:e8:67:9a:2c:d2:
         62:89:5b:7c:c6:f1:a1:b1:b9:98:9a:b0:0a:c1:6b:11:80:c6:
         2c:17:ca:28:5f:cd:dd:9e:03:b2:3e:5c:18:45:e6:a3:12:f6:
         ce:54:cb:99:1c:02:c4:ef:53:a5:e3:84:5c:75:78:2f:3c:eb:
         b9:3a:85:fe:0d:f4:11:77:10:fc:83:e5:a8:20:81:0f:78:10:
         5a:77:cb:99:4b:e3:19:2b:bd:94:5d:dd:eb:10:8c:0d:42:c1:
         92:36:0f:fd:df:88:35:46:ad:87:25:73:62:3b:a4:7e:84:7a:
         d4:e2:22:aa:1c:48:5e:9f:99:55:64:53:b1:9d:eb:a6:e9:9d:
         3b:6d:17:18:45:e3:b3:31:1f:04:27:0f:8b:7f:d8:2c:9b:d0:
         00:bf:07:78:d8:a4:7c:79:c9:16:cb:81:f2:02:dd:b5:38:05:
         24:a9:bc:00:65:ca:43:85:8d:34:6a:59:11:b3:00:b4:71:72:
         22:63:cc:7d:3a:06:11:8f:51:7d:7d:90:2e:98:65:4d:98:df:
         05:9e:1a:6d:76:c4:6a:32:f4:2f:ff:e1:d9:8f:22:15:c0:c8:
         fa:55:f4:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----