Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/33366e57-3c98-34dd-9cde-0f6424040688.roa
File:                     33366e57-3c98-34dd-9cde-0f6424040688.roa (raw, json)
Hash identifier:          dR9vAbg9UPhL6UL9zwpv8TkEKh4NKRE8UFDY45mlBlc=
Subject key identifier:   9F:8C:E5:EF:F6:CD:37:FD:4D:BD:A6:FB:5E:73:23:ED:B8:1F:99:8D
Certificate issuer:       /CN=143e80c3-86ee-4862-b691-1be82bcbf66d
Certificate serial:       010D0C9F43285848467AB93A243D550E9AB59880
Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/33366e57-3c98-34dd-9cde-0f6424040688.roa
Signing time:             Sat 21 Dec 2024 02:00:39 +0000
ROA not before:           Sat 21 Dec 2024 02:00:39 +0000
ROA not after:            Fri 21 Mar 2025 01:00:39 +0000
asID:                     398156
IP address blocks:        168.220.196.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:46:7a:b9:3a:24:3d:55:0e:9a:b5:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d
        Validity
            Not Before: Dec 21 02:00:39 2024 GMT
            Not After : Mar 21 01:00:39 2025 GMT
        Subject: CN=16266397-5fef-4546-8eb1-31f914305782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:aa:f6:36:3d:2e:4e:bf:67:fa:d0:86:a2:06:
                    b2:8e:93:f5:e5:46:0a:45:cb:f3:7e:8f:51:01:ec:
                    5a:09:7e:83:a3:6f:e1:ca:a1:75:d8:04:40:5a:82:
                    59:c5:fa:2d:a1:b7:ea:78:91:81:43:6a:e2:42:32:
                    cf:98:ef:f4:56:e7:09:11:f0:7b:4f:f1:24:1e:03:
                    9a:18:f1:8a:94:01:9a:91:41:b9:36:6c:65:82:e5:
                    b6:ee:3d:43:21:7b:26:5e:4d:44:a1:2f:89:e2:9a:
                    69:6d:64:f8:86:f5:18:b7:e3:3b:bb:82:58:10:de:
                    44:99:ac:15:dc:c8:d9:ea:89:ec:75:85:7f:86:fe:
                    6a:29:8e:6c:f3:50:14:da:4b:d8:97:a0:9d:81:49:
                    8f:be:63:79:a5:cc:f9:6d:d3:9e:f6:db:1e:56:57:
                    0d:30:11:3a:cb:1c:21:ef:67:5e:53:d2:78:2b:cf:
                    bb:b1:8c:f5:ee:cf:af:b9:39:3c:20:06:71:14:5b:
                    0d:2e:64:16:a3:c0:9b:2b:4a:dd:54:e8:47:ff:4d:
                    00:34:6a:8f:7d:ee:30:71:2e:56:80:88:ca:14:5b:
                    ca:de:e1:59:16:f5:6a:99:e5:b8:f5:cf:e7:0c:03:
                    09:16:27:c9:53:32:bd:c2:51:06:6a:31:17:99:c9:
                    04:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:8C:E5:EF:F6:CD:37:FD:4D:BD:A6:FB:5E:73:23:ED:B8:1F:99:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/33366e57-3c98-34dd-9cde-0f6424040688.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl

            X509v3 Authority Key Identifier:
                keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.220.196.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:43:44:b9:a6:ff:8b:d4:24:bd:d5:8d:41:b0:87:5c:82:bb:
         fc:ca:84:2b:49:88:39:0c:51:88:10:f9:21:c3:f6:0e:ec:8b:
         8d:98:b4:80:87:93:2b:a4:d7:56:35:48:f9:c1:8f:db:50:d3:
         f3:ce:85:c9:d9:61:9f:b1:1e:25:b4:ee:4a:e3:aa:59:8c:62:
         72:69:85:c7:7b:a8:a8:10:47:26:1d:29:2e:2a:6b:6b:05:62:
         4b:d4:7d:e9:d2:84:55:fc:fa:51:46:9f:11:4b:58:21:bd:3e:
         e2:0c:e7:b4:99:37:a3:c3:0b:16:64:44:83:b4:3e:5c:a0:d0:
         32:3d:39:4d:d3:fe:23:b6:2d:0f:24:ec:86:83:e3:98:3d:e6:
         f5:5b:36:74:c7:ea:7a:89:94:3e:50:41:01:95:64:a7:64:e7:
         5a:0e:13:d2:fa:02:87:a2:c4:b8:7a:9c:12:04:17:30:6c:d2:
         f1:d1:89:48:15:5e:da:77:45:81:30:4c:84:ab:6d:61:a0:55:
         b7:6e:10:01:5c:c1:d7:f1:69:10:bb:44:ad:0b:4b:62:59:e5:
         ac:c4:73:7b:b6:dd:2f:06:9e:5a:3f:08:38:3f:d9:a6:e7:a9:
         e4:a7:19:1c:cc:0e:41:22:cc:99:eb:1c:ba:5d:7b:9a:5a:50:
         16:7a:8f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----