Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/560fbb91-f83d-3892-beaf-d8e22fe6acbc.roa
File:                     560fbb91-f83d-3892-beaf-d8e22fe6acbc.roa (raw, json)
Hash identifier:          sFdCILu1Hbv/sUbzLkTV9Rppu61jBaNvEQojGRNUYIQ=
Subject key identifier:   51:C1:1D:C6:07:19:A9:A8:CA:BA:41:41:E9:EF:17:DD:EF:01:F4:A5
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858480BDA5884724E8380B9B01480
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/560fbb91-f83d-3892-beaf-d8e22fe6acbc.roa
Signing time:             Sat 30 Nov 2024 02:00:39 +0000
ROA not before:           Sat 30 Nov 2024 02:00:39 +0000
ROA not after:            Fri 28 Feb 2025 02:00:39 +0000
asID:                     7029
IP address blocks:        172.121.130.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0b:da:58:84:72:4e:83:80:b9:b0:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Nov 30 02:00:39 2024 GMT
            Not After : Feb 28 02:00:39 2025 GMT
        Subject: CN=0db95689-c719-43c1-a81b-b98ddb9a2fda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ea:c6:9d:ef:17:76:57:f6:ce:7b:cd:7f:d5:
                    74:41:d5:b9:f0:0e:ea:eb:8d:c1:6a:d5:76:e0:a3:
                    66:7d:ff:75:73:46:06:b7:2b:a5:a0:42:c0:94:fb:
                    3d:ff:87:43:fb:1c:c4:ba:ea:0a:cd:f6:70:54:30:
                    d5:84:a5:0f:5e:88:54:0f:50:3c:3c:1a:f6:1f:03:
                    99:d2:79:a0:a2:4f:51:d6:8b:42:38:05:c8:56:a0:
                    77:06:8b:ff:4f:89:af:5b:e7:fb:f6:ae:8b:6c:33:
                    e6:1a:cf:51:23:2f:c6:17:b7:2d:b6:2d:b8:4c:bb:
                    ed:35:9a:0c:f0:22:d4:1c:93:f1:4c:38:76:c4:e0:
                    3b:5d:0b:89:b0:72:d7:b1:a9:87:92:19:a9:01:f9:
                    24:59:3d:e6:d0:5f:fb:67:b5:a7:c6:46:70:c6:7d:
                    78:da:9d:a7:e6:77:8c:e0:62:e6:d6:f0:e6:5b:77:
                    01:06:19:ca:bd:8e:2d:de:85:4d:df:e8:f9:4d:2a:
                    63:22:0b:9f:06:5b:c8:54:3a:b8:ff:01:ec:c8:dc:
                    ba:99:2f:af:a1:de:a6:16:98:20:b8:8a:09:3d:fb:
                    c6:a4:2f:0e:1c:8c:16:c4:cb:67:c7:05:4c:5d:1d:
                    2e:05:a9:3f:75:e3:33:d5:cf:4d:cc:ea:22:ee:8a:
                    9e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:C1:1D:C6:07:19:A9:A8:CA:BA:41:41:E9:EF:17:DD:EF:01:F4:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/560fbb91-f83d-3892-beaf-d8e22fe6acbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:7e:c2:d1:66:e8:2f:91:11:60:53:41:c3:7b:e0:18:df:c1:
         ed:62:bf:19:77:c2:19:29:24:2b:91:09:e0:e7:a2:bb:0d:12:
         8e:d8:f0:11:39:81:99:65:df:0e:f7:66:9d:cd:55:2a:9a:88:
         1c:15:1c:ef:30:b7:e0:91:97:7a:18:81:a1:cb:ce:89:82:e2:
         e1:34:2e:80:b7:2c:32:95:d5:6e:a1:a6:2d:db:fd:17:d4:90:
         93:d4:6a:0a:60:22:2a:3f:57:14:92:d9:36:40:be:2f:5f:a0:
         4f:04:ee:38:d6:c9:f5:67:8b:cc:36:6d:47:36:ab:9a:fa:ee:
         4b:43:05:20:55:31:31:1f:6c:66:d4:0e:89:91:3c:25:39:79:
         8a:cb:08:31:87:3b:5d:c4:24:8c:86:e1:c4:07:46:8f:1c:47:
         49:70:51:00:ec:4e:7a:50:bf:51:24:c5:13:8a:f2:84:3d:3b:
         df:f4:b5:99:08:1a:20:3a:4a:2b:8c:1e:20:2d:87:b0:b8:ed:
         40:f1:b7:b6:ac:f6:b8:e7:d1:37:a4:51:6d:3d:d0:f0:ae:89:
         c9:2e:f8:fc:12:6a:40:b0:fd:dd:60:1c:17:9c:31:28:d4:5c:
         1c:46:29:43:45:d1:07:8a:ac:ee:f0:07:90:72:0d:24:92:07:
         28:f9:d2:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----