Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/bdd306a0-ef22-39ec-83a3-45642cb70b0e.roa
File:                     bdd306a0-ef22-39ec-83a3-45642cb70b0e.roa (raw, json)
Hash identifier:          nzBsHEkBhUwyvVv8F+RvNOWJWib4j2YWXs4acdN9iEo=
Subject key identifier:   D6:B0:EF:15:34:C3:60:EC:E8:DE:1D:32:D9:EB:86:77:D2:97:A9:96
Certificate issuer:       /CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca
Certificate serial:       010D0C9F4328584854703B28C5B984980A61EE80
Authority key identifier: BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/bdd306a0-ef22-39ec-83a3-45642cb70b0e.roa
Signing time:             Thu 26 Dec 2024 02:00:40 +0000
ROA not before:           Thu 26 Dec 2024 02:00:40 +0000
ROA not after:            Wed 26 Mar 2025 01:00:40 +0000
asID:                     399575
IP address blocks:        216.205.108.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:54:70:3b:28:c5:b9:84:98:0a:61:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca
        Validity
            Not Before: Dec 26 02:00:40 2024 GMT
            Not After : Mar 26 01:00:40 2025 GMT
        Subject: CN=70e52cc0-8a23-4599-849b-1de33b365f98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6c:dc:23:d4:67:1e:4f:6b:46:20:23:b6:e8:
                    b3:7a:c9:69:4a:1c:c2:9f:66:d0:7f:67:51:23:73:
                    90:e9:10:b9:2b:1e:32:93:b0:5b:7f:8c:e6:8b:0c:
                    ca:30:a1:c8:3f:33:5c:38:8f:9f:fc:6b:16:03:95:
                    61:ef:60:9d:1f:21:8b:6d:b5:59:94:3d:9c:f5:c8:
                    c8:ee:11:85:91:cb:59:3b:16:b0:b1:4e:01:8c:20:
                    d0:7d:17:98:e7:d1:4a:34:24:6b:25:ad:40:74:50:
                    33:26:66:d8:21:07:d6:e2:b8:71:ae:c3:2f:33:97:
                    8d:2d:4f:e9:2a:18:d8:ac:21:7a:94:a2:15:c0:59:
                    5f:b7:d3:f5:09:f2:d7:7c:ed:08:7e:6d:0a:aa:fc:
                    5a:c9:6d:96:d3:cf:a6:f3:68:e5:b6:b5:f0:a7:13:
                    4f:33:de:f5:bf:b9:cf:89:69:e7:c8:8e:1c:aa:86:
                    30:6d:ad:95:12:4a:65:c3:76:3d:9d:7e:06:13:a5:
                    9c:a5:e2:33:05:95:d3:73:4d:dd:d0:3b:e9:17:45:
                    9e:9d:c7:3a:8b:97:9a:3c:07:27:c7:e4:18:a0:04:
                    e6:70:ec:78:9b:f7:f2:64:ba:1c:48:67:a4:75:31:
                    f7:b7:e6:7f:72:30:a8:f4:55:47:bd:a7:72:ce:15:
                    c0:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:B0:EF:15:34:C3:60:EC:E8:DE:1D:32:D9:EB:86:77:D2:97:A9:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/bdd306a0-ef22-39ec-83a3-45642cb70b0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.crl

            X509v3 Authority Key Identifier:
                keyid:BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.205.108.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:3b:4a:4a:a2:d1:df:f1:62:f7:f4:fc:f9:57:eb:b5:d8:71:
         46:ad:a9:2a:5d:e0:d3:aa:4e:01:87:da:d1:c9:45:3b:20:6b:
         0f:09:86:4e:77:ac:0c:68:20:ca:35:b7:17:c0:ba:38:0a:20:
         51:54:2c:76:30:67:7b:24:3b:d3:f0:11:ff:30:d6:25:15:50:
         b4:c1:5b:e4:b6:00:a0:43:ce:8b:e5:5b:f3:9e:67:8d:48:03:
         f3:58:81:bf:fb:bb:f9:e6:86:58:fd:ec:44:e6:d9:11:e7:67:
         63:31:45:21:f8:fd:06:6f:4b:cb:00:5f:fe:e2:90:a6:d4:ab:
         a9:5b:5e:5a:d0:c2:65:22:79:e8:8b:07:40:23:6d:4b:f1:cd:
         40:f0:27:fc:5f:81:20:a5:d0:ef:dd:29:2a:38:55:ee:e9:1a:
         e4:4c:d9:9d:4a:05:0f:2f:f6:b5:49:d3:9f:ba:7a:25:c1:42:
         52:42:ff:10:6c:44:b6:27:e6:16:6a:26:27:3b:ec:8a:b0:92:
         07:c8:c8:a9:fa:c0:4f:cb:9a:a7:02:3b:8f:37:89:57:0d:dd:
         d6:e6:a3:65:9a:af:72:26:45:86:95:b2:b8:0e:06:08:77:0b:
         5c:ac:ad:27:54:15:1a:d7:fe:89:43:36:16:99:0c:97:09:1b:
         4c:8e:55:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----