Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/75de36a7-aa0c-36cb-a43d-c4e798deb00d.roa
File:                     75de36a7-aa0c-36cb-a43d-c4e798deb00d.roa (raw, json)
Hash identifier:          GyNWD3DixcGKtQe8USldJ43p89nZyOEzNC/2LgVSoIU=
Subject key identifier:   DC:63:81:9D:1F:63:27:A6:53:D2:0F:2E:7F:C1:28:7D:68:FB:88:0E
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285847F692658C4CDA3BBF57811480
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/75de36a7-aa0c-36cb-a43d-c4e798deb00d.roa
Signing time:             Fri 22 Nov 2024 11:03:46 +0000
ROA not before:           Fri 22 Nov 2024 11:03:46 +0000
ROA not after:            Thu 20 Feb 2025 11:03:46 +0000
asID:                     204957
IP address blocks:        172.120.182.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f6:92:65:8c:4c:da:3b:bf:57:81:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Nov 22 11:03:46 2024 GMT
            Not After : Feb 20 11:03:46 2025 GMT
        Subject: CN=b33730f6-3c85-42e0-a0f9-823cf2a7084d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:bb:c0:b2:cb:55:6d:cf:9a:4b:ee:ec:d2:6c:
                    01:46:9f:2d:05:76:7b:34:3c:fe:7a:2f:d1:2f:67:
                    9a:07:d5:f0:bb:40:9a:9b:7b:c0:bf:14:62:94:e4:
                    51:b4:89:a7:ec:dd:41:b1:71:60:ff:0f:5e:47:16:
                    2f:99:19:37:59:e5:8f:cf:3f:1c:50:36:b5:a7:fd:
                    61:25:61:db:cc:3a:16:d2:b6:de:59:65:d1:d5:f4:
                    09:b3:1d:db:e8:26:dc:04:50:7f:d9:6e:2b:65:7b:
                    58:7e:47:26:a2:1d:fb:0e:ab:10:03:e1:a0:89:a7:
                    0e:78:06:84:5c:f2:dd:af:74:ed:a6:36:5e:61:98:
                    9f:82:ea:1c:54:93:3f:a6:4d:88:14:63:b6:15:76:
                    30:ff:41:6a:88:25:74:62:11:ec:21:7f:a2:05:47:
                    a6:f0:99:4f:b5:4e:43:b4:c7:55:c7:65:48:fd:4f:
                    42:31:3f:57:14:46:55:96:16:53:0a:79:b7:79:e6:
                    2b:70:17:51:25:5e:24:fa:51:86:70:e6:a9:f7:ff:
                    8d:63:10:6f:e3:f6:5d:95:8d:f0:25:7f:27:2b:64:
                    f9:ac:bf:38:78:2d:4a:69:3f:36:5a:5c:7f:73:d0:
                    fc:13:00:d9:fc:1d:0f:40:6f:17:51:35:85:87:19:
                    ea:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:63:81:9D:1F:63:27:A6:53:D2:0F:2E:7F:C1:28:7D:68:FB:88:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/75de36a7-aa0c-36cb-a43d-c4e798deb00d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:45:87:80:6a:d6:a7:b9:78:24:e2:d5:59:b1:e2:aa:56:93:
         35:62:a2:ed:81:09:6a:35:2f:b6:ba:dd:17:f3:48:cb:9d:bd:
         79:11:7d:8d:db:e8:f1:60:e3:89:95:48:9a:4c:08:04:22:af:
         b8:d5:17:37:13:d0:43:6e:bb:73:f9:5a:92:96:3c:9b:9f:36:
         cd:0c:df:10:ca:2f:5f:da:8a:fc:5e:85:3b:63:e2:c1:d5:f5:
         db:b3:9b:67:5e:7c:2d:bc:15:36:0f:c3:18:26:6f:21:11:38:
         21:1b:62:ab:b4:7e:08:b0:77:33:99:93:45:cc:c4:8e:82:09:
         c2:e9:d6:e4:da:14:2b:b3:98:78:21:88:2b:e5:df:82:34:87:
         18:4c:58:e6:06:fa:f4:e7:9a:ea:5c:73:39:e8:7e:ff:53:82:
         15:64:ae:0d:4a:04:91:a1:8e:11:d3:3b:8b:85:1f:aa:37:85:
         2f:60:b3:6e:4f:28:6e:78:cf:33:5a:00:2c:e6:16:29:26:b6:
         2e:1f:5e:36:4e:f3:f5:7d:b3:09:98:8e:28:ab:d5:5b:61:6e:
         cd:4f:85:3c:0b:f1:9c:7d:79:7a:e7:0a:a5:87:84:90:30:14:
         b4:51:43:51:4f:15:b1:cd:01:fd:f5:30:85:98:f5:42:a5:4a:
         e1:a0:44:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----