Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00561825-d26a-4ad1-954b-7ae435a3f4a1/11cc0e0b-51a0-3df7-922c-3cb3413ba35d.roa
File:                     11cc0e0b-51a0-3df7-922c-3cb3413ba35d.roa (raw, json)
Hash identifier:          NWKdaLjFkX4ELhh+trNNV+Vp+oQ8iwjtlxS1qTU45Es=
Subject key identifier:   E3:32:51:DF:B7:9A:B8:6B:2B:68:09:F8:B1:4B:16:75:65:59:2B:1D
Certificate issuer:       /CN=00561825-d26a-4ad1-954b-7ae435a3f4a1
Certificate serial:       010D0C9F43285848504033D7B59122144C4988C0
Authority key identifier: B0:0D:9C:45:A3:C3:AC:C4:5B:88:EB:6E:EF:E7:EA:71:C4:1A:CE:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00561825-d26a-4ad1-954b-7ae435a3f4a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00561825-d26a-4ad1-954b-7ae435a3f4a1/11cc0e0b-51a0-3df7-922c-3cb3413ba35d.roa
Signing time:             Tue 24 Dec 2024 14:00:53 +0000
ROA not before:           Tue 24 Dec 2024 14:00:53 +0000
ROA not after:            Mon 24 Mar 2025 13:00:53 +0000
asID:                     40127
IP address blocks:        134.174.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:50:40:33:d7:b5:91:22:14:4c:49:88:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00561825-d26a-4ad1-954b-7ae435a3f4a1
        Validity
            Not Before: Dec 24 14:00:53 2024 GMT
            Not After : Mar 24 13:00:53 2025 GMT
        Subject: CN=be120416-736f-410b-8df3-aa89ea1fe674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:fd:7d:bb:15:9e:3a:66:9d:7a:01:4f:ff:41:
                    c4:6c:1d:33:21:c5:8d:d3:05:c2:a7:20:e7:42:f8:
                    55:96:59:38:0b:b0:a1:b0:ba:3c:d6:2f:62:70:b7:
                    cb:35:2d:67:74:d0:8f:73:58:90:93:30:61:f9:7b:
                    df:91:b8:6c:5c:30:49:4d:c5:e3:82:e5:8f:79:e6:
                    1e:92:e8:12:97:de:f5:7b:04:c5:13:85:88:96:5e:
                    0d:e4:6c:ef:6e:dd:e3:8b:ba:90:36:d9:ef:78:07:
                    f5:3e:f3:45:5d:5b:81:da:d0:9d:e9:64:e5:03:77:
                    ab:2d:20:c3:7e:92:ec:58:9f:f3:ca:30:c7:b8:49:
                    b0:81:f3:54:23:b1:f5:bf:36:18:33:98:c4:cb:8e:
                    0a:0f:f6:81:b7:2e:1b:a5:19:1f:36:54:67:45:75:
                    a2:8a:3c:da:ea:4b:59:1e:2e:62:e5:85:ca:b4:bf:
                    e6:6a:ef:e0:48:3b:6f:0a:a3:c8:62:97:2c:e4:94:
                    04:23:29:42:de:bd:13:12:7f:8f:c5:0e:c3:cd:a4:
                    cb:a3:57:5f:7f:46:52:47:20:28:ef:71:f6:b8:3a:
                    c6:f9:3c:a0:96:19:5f:60:25:58:87:4c:d8:b6:49:
                    fe:b5:99:aa:25:b3:8f:34:95:0d:54:31:24:fd:63:
                    f1:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:32:51:DF:B7:9A:B8:6B:2B:68:09:F8:B1:4B:16:75:65:59:2B:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00561825-d26a-4ad1-954b-7ae435a3f4a1/11cc0e0b-51a0-3df7-922c-3cb3413ba35d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00561825-d26a-4ad1-954b-7ae435a3f4a1/00561825-d26a-4ad1-954b-7ae435a3f4a1.crl

            X509v3 Authority Key Identifier:
                keyid:B0:0D:9C:45:A3:C3:AC:C4:5B:88:EB:6E:EF:E7:EA:71:C4:1A:CE:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00561825-d26a-4ad1-954b-7ae435a3f4a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.174.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:0e:a5:d9:8f:15:de:6f:6d:dc:48:a3:d2:85:6f:c1:9f:24:
         8b:ea:60:78:b3:28:5c:75:48:30:a2:b9:76:17:7e:08:e7:fa:
         96:5f:00:b5:a8:e7:87:8b:9e:c6:19:4d:bf:a1:d8:cd:20:8f:
         0e:2b:3e:e4:fc:a1:77:29:26:50:d5:fb:50:86:05:15:b8:a3:
         21:7c:24:43:58:e9:7c:37:92:e2:52:13:d4:40:8d:ae:ee:59:
         72:79:d0:9f:a5:61:61:7a:3b:f6:df:70:ba:ef:60:ac:01:ce:
         f4:4d:1b:8d:11:ce:5f:b9:1a:5e:2c:bf:e1:f5:04:16:c2:1d:
         c2:32:df:02:49:f1:98:7a:0d:16:a8:ad:aa:67:27:b6:6d:dc:
         5b:76:ee:1c:0c:06:54:d9:28:ab:be:c9:60:a9:94:c6:c4:7b:
         5e:2c:78:3d:db:2a:44:39:01:1f:83:77:6d:f5:80:c5:bf:1b:
         b2:2e:e8:65:cf:2b:3e:8f:75:ca:b5:24:be:d5:16:e7:da:ea:
         6e:3b:7a:e0:48:aa:c1:e7:23:88:18:8b:fd:77:d4:f3:1a:38:
         6c:f5:95:e3:b6:36:8d:0b:92:39:85:35:d8:b8:e1:7e:16:0e:
         89:6c:d6:e1:bc:a1:d8:10:ca:0e:1e:a3:04:36:d7:a7:1c:59:
         03:c4:81:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----