Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/8a32dfb0-8cd7-3274-b786-179e5138647c.roa
File:                     8a32dfb0-8cd7-3274-b786-179e5138647c.roa (raw, json)
Hash identifier:          qXmnMyy34dPPH84wxcEH2vD4Erw8kpSYzeMG+tjPmWQ=
Subject key identifier:   1F:A1:F8:9E:F7:08:6D:13:FC:80:1F:CF:BD:7E:EA:1D:A2:BA:F4:3B
Certificate issuer:       /CN=e60884f4-fa14-4a13-ac3b-efb7c9412082
Certificate serial:       010D0C9F432858487E50668D201FDB5B75F25E40
Authority key identifier: 0C:9A:7C:E9:6D:8C:38:48:9A:F3:3B:CA:41:66:F3:89:47:7D:49:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/8a32dfb0-8cd7-3274-b786-179e5138647c.roa
Signing time:             Fri 10 Jan 2025 02:00:40 +0000
ROA not before:           Fri 10 Jan 2025 02:00:40 +0000
ROA not after:            Thu 10 Apr 2025 01:00:40 +0000
asID:                     36184
IP address blocks:        217.10.227.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7e:50:66:8d:20:1f:db:5b:75:f2:5e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e60884f4-fa14-4a13-ac3b-efb7c9412082
        Validity
            Not Before: Jan 10 02:00:40 2025 GMT
            Not After : Apr 10 01:00:40 2025 GMT
        Subject: CN=0cef2032-5a8e-4ae2-8b1b-078ca68411be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:10:a0:fb:15:30:b7:f9:5a:bd:75:df:2d:85:
                    d6:17:47:e9:81:1e:22:d0:e0:e2:67:61:c4:ca:cf:
                    b3:24:fe:ac:d0:59:f4:6c:ca:23:d5:96:ab:cd:b0:
                    8d:8c:e7:32:b0:02:40:8d:de:f2:83:e5:2b:f5:66:
                    76:6b:97:88:aa:4c:b3:ce:81:43:74:ee:3f:11:1a:
                    19:bf:83:91:73:7a:26:df:69:1c:49:13:73:18:46:
                    2c:c8:ec:ea:10:2a:55:e8:24:1e:16:ac:7f:ea:9e:
                    f4:20:b5:a3:37:75:5b:5b:db:b0:80:5e:69:4e:e2:
                    40:0d:da:3a:d4:fd:71:2e:11:59:67:a9:76:82:6b:
                    a2:ab:15:d2:dc:0a:19:58:a6:ae:cd:31:ad:3d:96:
                    1a:5e:2d:e8:00:07:a6:92:57:a0:1f:52:00:88:b4:
                    ef:ca:bc:3f:d3:91:aa:d2:02:1f:fa:6e:b0:b1:49:
                    2b:cf:8e:b8:c8:e4:07:04:37:0b:85:19:5c:e5:71:
                    5c:32:97:71:69:fb:59:c3:29:a5:d0:ae:e4:f5:55:
                    ba:92:b8:5b:71:be:c9:bb:07:12:05:9b:40:43:bd:
                    a2:c6:54:ec:a1:1a:7b:9d:79:3c:e7:fc:56:bf:e5:
                    c2:d9:cc:4f:59:20:b2:ca:ab:4c:0f:9c:e1:01:8f:
                    8b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:A1:F8:9E:F7:08:6D:13:FC:80:1F:CF:BD:7E:EA:1D:A2:BA:F4:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/8a32dfb0-8cd7-3274-b786-179e5138647c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/e60884f4-fa14-4a13-ac3b-efb7c9412082.crl

            X509v3 Authority Key Identifier:
                keyid:0C:9A:7C:E9:6D:8C:38:48:9A:F3:3B:CA:41:66:F3:89:47:7D:49:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.10.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:6d:8f:db:1a:c6:e7:43:00:4d:30:bd:88:37:bc:d5:67:fb:
         f8:81:8f:06:ff:e5:8d:6c:b2:55:3f:11:53:c4:87:07:c5:c7:
         7f:cf:cf:4a:3f:0e:3d:25:8c:3f:7a:74:2c:d0:45:92:6b:fb:
         ab:c4:d3:c2:85:3f:0a:7e:b9:b5:58:29:44:23:fd:9e:ac:c7:
         36:95:f4:f1:48:0a:6a:61:5d:ee:53:97:78:ad:7d:c0:35:61:
         d1:ce:47:53:3e:a4:16:15:7a:52:c4:b3:e2:73:1d:5e:d0:cc:
         4b:47:01:f7:ce:03:5f:6e:8e:f3:b4:42:f5:41:7d:b6:c8:3f:
         c6:e4:ab:96:c6:5e:4a:08:fe:77:31:12:e5:47:74:21:84:fd:
         fb:65:dc:50:8d:91:b8:ea:9e:13:57:87:14:59:3b:26:ae:cb:
         f7:6e:cc:af:6b:4c:0d:ac:7b:25:47:fe:7c:53:69:d0:6e:69:
         9f:6c:75:0f:66:39:85:e2:31:09:71:be:63:d0:a3:b9:bc:75:
         17:2d:21:16:a5:e0:f4:5f:37:a8:c7:5f:2c:9d:d5:b5:dd:bf:
         71:68:3f:88:2f:a0:4e:9d:6f:d4:54:ca:97:c7:40:77:ea:47:
         eb:8f:c2:f5:cd:a8:6c:3a:62:c3:8d:52:f3:9f:82:3e:8c:2e:
         e4:ce:6d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----