Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d0525016-35ef-331a-b351-e486a8f46550.roa
File:                     d0525016-35ef-331a-b351-e486a8f46550.roa (raw, json)
Hash identifier:          InxvQ0GnGJFqCxqs7sXUp6n+QW+leFD5TPh0tbnSrLk=
Subject key identifier:   8B:CD:F2:B2:BC:4F:CC:7B:AF:0A:C9:ED:21:59:B8:1E:5F:53:19:75
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858488E0F750E132D9FB952943F80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d0525016-35ef-331a-b351-e486a8f46550.roa
Signing time:             Wed 15 Jan 2025 17:22:49 +0000
ROA not before:           Wed 15 Jan 2025 17:22:49 +0000
ROA not after:            Tue 15 Apr 2025 16:22:49 +0000
asID:                     214238
IP address blocks:        23.230.230.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8e:0f:75:0e:13:2d:9f:b9:52:94:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jan 15 17:22:49 2025 GMT
            Not After : Apr 15 16:22:49 2025 GMT
        Subject: CN=05deb339-768c-4306-847f-f848d271a227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:3f:dd:6a:00:b6:d6:9d:79:a7:e2:9a:02:9b:
                    f0:b5:b2:bf:ce:d5:67:58:cb:35:37:bc:21:5e:6d:
                    69:c3:77:45:00:d7:c2:90:c0:7d:d1:11:07:e9:22:
                    26:40:f4:e6:0f:23:4b:b5:ba:7c:f7:a2:0a:66:79:
                    26:67:c4:a6:9b:bb:79:08:2f:4f:10:db:05:00:7d:
                    5a:6c:49:d1:b1:d3:a2:b9:41:c3:7b:31:6f:31:27:
                    d3:ad:0c:bd:f1:fc:1f:33:e1:6a:cc:80:13:bc:b7:
                    2a:e4:3b:09:b2:15:86:58:80:ec:34:22:47:79:ad:
                    65:8c:be:d2:6e:78:84:63:df:44:b4:66:df:9f:73:
                    c9:47:cf:fa:b4:57:65:87:9f:18:e1:fb:34:7d:ba:
                    d6:57:bb:44:dc:02:01:f5:fa:0a:a8:7d:1d:41:a2:
                    f9:0a:1d:0e:34:2a:b0:41:51:83:94:e6:a3:e0:8f:
                    63:58:1f:23:4b:ef:ad:18:9f:01:9b:74:d3:e4:a9:
                    b6:e3:94:5e:d6:5c:e9:50:48:3b:1f:7d:3c:8b:b8:
                    de:4c:30:8d:db:b2:7b:15:38:9e:e6:de:21:7e:50:
                    90:54:2b:e5:b2:4a:89:af:3c:34:fa:78:07:93:7d:
                    6d:bf:78:73:8a:54:8d:b5:1d:20:0b:cf:a2:56:a0:
                    57:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:CD:F2:B2:BC:4F:CC:7B:AF:0A:C9:ED:21:59:B8:1E:5F:53:19:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d0525016-35ef-331a-b351-e486a8f46550.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:51:a4:42:73:b6:3a:8e:7e:13:d5:32:73:68:b8:b0:e0:a9:
         85:3f:f2:9e:1f:b3:28:81:a3:b2:99:f9:7a:cb:f9:6e:bf:f2:
         b3:c3:b0:27:fc:b0:d2:42:93:c2:a6:e6:4a:53:e3:9d:b0:20:
         95:93:fe:c1:b2:4e:c7:a2:e0:b6:bc:54:d0:09:e5:fb:f0:fa:
         4d:9f:74:7d:64:17:6b:2e:9e:d7:2b:c3:f4:04:9e:e2:4a:67:
         95:1a:f4:30:93:39:38:0e:00:9a:e5:16:34:a1:53:4c:c0:14:
         65:10:71:50:ad:f6:0d:c6:c7:bc:91:bf:07:d5:7c:e7:4f:54:
         22:7f:2d:3e:29:e9:ad:d7:21:17:d7:45:48:f4:fb:a8:7c:cb:
         b5:ce:eb:43:1d:9d:c4:c0:c3:c6:de:46:9e:88:54:4f:fe:a0:
         30:ba:0b:fc:e1:45:5f:b7:92:bf:b0:87:9b:b1:f4:66:95:ab:
         68:bc:1b:6a:f1:c1:b4:7f:c0:40:1d:33:04:f5:3f:6a:1e:b6:
         15:90:30:e5:65:4c:ed:bf:b2:86:b8:bf:55:21:34:96:1b:e6:
         ba:bb:cb:ed:7f:cd:c9:b5:9a:1e:3d:60:56:14:8b:c7:da:d4:
         85:b7:9d:85:c3:41:7b:a7:94:7e:e0:64:37:bf:c0:80:13:85:
         2b:9c:27:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----