Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e75d6142-4b98-3319-a5fb-a4ddaf8e27c4.roa
File:                     e75d6142-4b98-3319-a5fb-a4ddaf8e27c4.roa (raw, json)
Hash identifier:          xOuJ5Hf+DTueyAqPnebjICvylpLEC7LXNbEup9DxxHc=
Subject key identifier:   77:79:81:0D:E5:C1:E4:54:F4:B2:44:D6:3D:06:7B:A9:49:18:BD:57
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F43285848617C3DE90E693FAB7CA15CE0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e75d6142-4b98-3319-a5fb-a4ddaf8e27c4.roa
Signing time:             Mon 30 Dec 2024 18:10:38 +0000
ROA not before:           Mon 30 Dec 2024 18:10:38 +0000
ROA not after:            Sun 30 Mar 2025 17:10:38 +0000
asID:                     81
IP address blocks:        204.85.24.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:61:7c:3d:e9:0e:69:3f:ab:7c:a1:5c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Dec 30 18:10:38 2024 GMT
            Not After : Mar 30 17:10:38 2025 GMT
        Subject: CN=4666436d-9e75-4242-b8e1-96fd8f0ef6f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e9:76:53:2d:61:07:a8:0e:3e:9a:7e:13:dc:
                    f7:f3:b8:16:5a:e6:4b:f8:05:6b:ec:5e:29:db:e7:
                    39:7c:47:d4:76:db:61:2f:fd:b1:3a:a6:7e:90:92:
                    0b:eb:40:b9:95:47:72:ba:65:31:c5:59:73:58:c9:
                    de:09:93:b5:71:e5:67:e8:d5:9a:02:66:72:98:0d:
                    8c:0c:32:d1:ab:67:8d:6d:8a:4e:0e:52:8c:9b:c3:
                    17:d0:3f:5e:1d:95:e8:94:75:d3:b8:95:c0:74:8d:
                    50:18:af:c3:6c:6f:df:19:46:ef:83:be:af:df:43:
                    0b:91:93:ed:ce:42:08:aa:e7:d9:20:53:ff:bc:99:
                    9b:3c:f2:51:10:2c:e0:b2:a3:84:20:49:5d:6f:7f:
                    b6:1b:b4:4d:0c:ab:75:5b:d3:44:1c:7e:36:13:05:
                    25:ac:2a:0c:68:1e:04:df:79:aa:c5:d7:ae:e5:cf:
                    15:ac:b8:f7:ee:db:7e:c7:e8:86:c3:e8:93:74:89:
                    01:ca:16:c7:b0:18:e0:16:f7:5e:b2:2a:a8:56:49:
                    bb:5f:70:15:ea:7f:f8:a7:4b:1d:db:44:16:37:0e:
                    5b:77:f9:bf:39:a3:11:ed:d2:dc:77:5f:83:94:f4:
                    1a:c7:6c:05:a1:0e:28:34:c1:24:87:3e:c9:66:0a:
                    0b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:79:81:0D:E5:C1:E4:54:F4:B2:44:D6:3D:06:7B:A9:49:18:BD:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e75d6142-4b98-3319-a5fb-a4ddaf8e27c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.85.24.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:eb:3f:6b:19:ff:22:70:7a:44:3d:0c:ca:84:e3:79:bf:7f:
         a6:b3:03:07:fe:95:7c:b2:cf:93:4b:6a:bd:41:3a:91:b1:06:
         14:b5:1a:74:39:4a:1e:32:77:2b:46:09:c5:28:88:42:3e:14:
         ce:fa:6d:e2:0c:e7:1c:3d:6d:4c:17:f0:f4:48:ec:11:0a:81:
         4e:1d:a0:68:c5:b9:22:37:df:90:e6:9e:6e:7c:83:3b:27:bb:
         36:06:89:50:f5:e7:07:f9:fd:df:28:e6:c0:5d:71:92:12:3c:
         10:14:e0:7b:33:2b:f0:26:c6:9b:e6:7c:5c:98:af:d2:88:d2:
         e3:2b:f3:20:0f:55:28:b7:e2:84:ea:9c:f2:a2:d1:a4:3c:d2:
         71:cb:a5:e0:0f:b4:28:37:2f:12:7e:ba:ee:3a:a1:5e:67:2d:
         3f:0e:26:ea:9b:34:5e:46:18:14:53:c6:74:9d:32:ae:32:22:
         5e:73:27:ee:df:90:51:e0:ec:02:70:76:8e:f2:05:da:21:3e:
         04:f6:76:ec:b8:f2:e1:94:ca:7a:ec:39:dc:5f:93:62:ef:b7:
         da:6f:c3:2f:f9:c6:15:68:d6:1b:57:24:6a:58:ad:81:5c:de:
         26:98:2d:c6:b3:c1:6a:f9:d6:84:ee:43:95:11:6e:8d:68:8b:
         2c:ad:da:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----