Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1ac76977-6f93-3319-957b-c51938c0b9f0.roa
File:                     1ac76977-6f93-3319-957b-c51938c0b9f0.roa (raw, json)
Hash identifier:          sJKDzSEHeul6wiPLEBm/SbwhcgLwYgDwYKruX3xLurk=
Subject key identifier:   BB:E5:AD:FC:58:C4:E4:8C:DA:17:37:B7:20:BC:E5:26:5B:DE:84:2B
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285847E03AC9D13018260F86F2BFC0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1ac76977-6f93-3319-957b-c51938c0b9f0.roa
Signing time:             Thu 14 Nov 2024 10:59:28 +0000
ROA not before:           Thu 14 Nov 2024 10:59:28 +0000
ROA not after:            Wed 12 Feb 2025 10:59:28 +0000
asID:                     3257
IP address blocks:        142.252.117.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:3a:c9:d1:30:18:26:0f:86:f2:bf:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Nov 14 10:59:28 2024 GMT
            Not After : Feb 12 10:59:28 2025 GMT
        Subject: CN=43d1fc9d-8eb7-4f66-ab51-df4db864093e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:74:19:53:bc:5c:09:61:43:9f:33:42:1c:a7:
                    2e:b3:e5:4d:f4:8b:35:a7:a4:bd:b7:eb:55:6f:07:
                    04:46:dc:fe:83:b4:ef:73:5c:7e:5b:d2:ca:a9:85:
                    50:ca:fe:87:b5:3d:c3:9c:d0:3f:1b:72:b2:ce:02:
                    2a:a9:50:bd:a5:35:69:c3:e7:2d:45:32:0c:48:88:
                    3d:47:b5:2b:5a:37:6c:fe:99:0d:6f:04:8f:ad:91:
                    aa:e9:26:31:b2:b8:95:f5:fa:f9:91:46:ea:1e:39:
                    b8:78:af:ec:f8:5c:28:7f:de:89:83:72:9e:bc:19:
                    7c:c1:c1:45:3a:3c:70:04:32:cd:3b:f4:6f:81:df:
                    75:ca:2d:5b:d0:73:7b:d9:d2:43:95:8d:94:de:fb:
                    3c:57:1f:30:4c:d4:ff:cf:d9:25:a2:d0:30:82:81:
                    7b:5a:97:45:9f:4c:3c:97:20:4e:43:d3:35:6b:10:
                    5f:44:8c:36:94:93:d1:c0:f1:a4:24:90:b2:d6:6b:
                    12:ad:f8:06:4e:60:7b:8c:49:2d:56:89:e7:54:ed:
                    45:21:c3:db:61:35:12:ac:f2:79:5f:99:7d:fc:62:
                    c0:0d:d6:d6:c9:45:3d:2d:6a:0e:a9:13:aa:c7:a7:
                    d8:5a:19:b2:54:c9:d0:95:34:26:eb:f8:66:4f:ee:
                    3f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:E5:AD:FC:58:C4:E4:8C:DA:17:37:B7:20:BC:E5:26:5B:DE:84:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1ac76977-6f93-3319-957b-c51938c0b9f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:ab:3d:50:ff:05:64:f9:fd:08:c9:da:9f:ec:d6:2c:f2:11:
         19:fc:11:6c:dd:8a:3f:60:46:54:6f:e1:df:33:fe:ea:4d:99:
         b4:fa:f3:3f:b5:e8:d4:0a:94:71:e6:cf:de:07:6f:aa:29:4d:
         8f:94:49:7f:06:6d:9e:5a:47:14:b6:5d:46:a1:fa:7f:a5:bb:
         e9:b2:76:b8:81:49:ae:ec:f8:fc:c7:d9:a9:41:43:cb:d4:02:
         c1:d6:71:d9:f2:2a:2c:f2:e5:dd:57:3d:97:1a:1b:1c:27:dc:
         45:fc:03:9b:e0:6c:fe:d4:21:5f:ca:26:7a:b9:d6:d0:1f:6c:
         8f:4e:0c:1b:c9:38:da:bc:cc:9f:16:b5:7b:d2:11:7a:48:79:
         e1:9f:c7:34:e1:00:d0:78:92:a4:06:ad:60:2f:14:25:07:96:
         e5:61:3a:f3:6b:93:cc:eb:d4:5b:28:fe:31:f1:2d:41:05:42:
         96:da:25:da:d4:b2:cc:78:64:6f:2b:1e:23:4d:2a:81:ee:f3:
         5c:b5:6f:de:18:9b:a6:a9:27:b6:76:36:de:11:2c:86:06:90:
         eb:8a:5d:7f:1a:fc:9d:33:8d:b3:fb:27:5f:20:b1:55:8c:3f:
         09:9b:db:b3:60:cf:2b:de:71:42:c1:10:08:1a:35:e5:08:66:
         8b:31:be:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----