Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fe5d3a04-1b5a-3e6a-9a68-0360aaf49906.roa
File:                     fe5d3a04-1b5a-3e6a-9a68-0360aaf49906.roa (raw, json)
Hash identifier:          J3UIzUR3DpnFoPX6IHq76NA1nN38YlAdV4aY7aB9+6I=
Subject key identifier:   7B:86:4C:88:6A:0E:B5:49:DC:A5:EF:80:66:81:C9:61:5A:69:6C:68
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285847F6914E4772223F11B411CC80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fe5d3a04-1b5a-3e6a-9a68-0360aaf49906.roa
Signing time:             Fri 22 Nov 2024 11:01:35 +0000
ROA not before:           Fri 22 Nov 2024 11:01:35 +0000
ROA not after:            Thu 20 Feb 2025 11:01:35 +0000
asID:                     204957
IP address blocks:        172.120.60.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f6:91:4e:47:72:22:3f:11:b4:11:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Nov 22 11:01:35 2024 GMT
            Not After : Feb 20 11:01:35 2025 GMT
        Subject: CN=2fdf8d57-8eeb-43b9-843f-c0efb4cd33fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:b3:79:77:2c:26:f5:d3:47:cc:f0:7e:47:50:
                    bc:1f:a0:88:ab:e6:f2:a1:87:43:af:48:94:da:d1:
                    5a:8f:19:9c:e0:02:43:6c:6b:d1:3b:1a:ec:ed:f0:
                    67:5b:59:22:ec:b6:67:19:07:44:63:df:38:2f:61:
                    09:44:44:2c:26:2a:01:e8:a2:a2:6a:67:6b:62:c3:
                    74:20:f3:1a:db:10:ec:93:f9:59:df:70:df:34:31:
                    8c:0c:a1:36:33:2e:d8:6a:71:a4:37:f4:00:f7:e8:
                    17:eb:c7:79:70:b3:89:ed:e0:ad:b5:5e:36:f6:46:
                    c1:bc:ec:91:c7:54:cf:92:cd:f6:6a:ce:eb:b9:d6:
                    ad:ca:06:33:08:f9:3c:08:f3:a1:93:ba:0e:17:98:
                    37:ac:69:cc:cb:68:63:93:7c:b6:14:d0:4c:07:04:
                    eb:04:c7:9e:68:0d:e8:4d:fc:90:e9:25:60:4c:48:
                    08:bc:01:75:10:08:28:14:b9:9a:4f:bd:88:e1:79:
                    c3:4b:f9:09:78:e2:e4:c0:d0:d9:09:04:28:3b:db:
                    48:b1:9a:c0:fb:b2:c2:ab:3a:6a:40:28:54:af:7d:
                    a7:27:06:64:05:a8:98:97:90:af:25:fb:c2:51:e3:
                    ad:57:20:e0:14:49:1b:4d:ce:b1:25:2f:b1:d9:81:
                    17:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:86:4C:88:6A:0E:B5:49:DC:A5:EF:80:66:81:C9:61:5A:69:6C:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fe5d3a04-1b5a-3e6a-9a68-0360aaf49906.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:6c:b2:d9:3d:10:71:9b:21:45:b8:b6:54:b6:25:71:88:9d:
         de:e1:e4:8d:94:b1:8e:2a:e8:b7:83:be:5f:31:67:9b:94:1a:
         02:fd:ae:d9:c5:34:5e:79:7a:e2:b7:33:32:3c:57:78:7b:44:
         56:07:75:c4:0f:57:d6:b5:ca:39:b1:71:71:f5:c8:88:02:99:
         bf:37:ee:9c:dd:6f:49:cc:4f:e1:a9:9e:03:18:77:c3:8a:72:
         5b:0a:22:71:2d:12:06:2a:59:d1:cb:20:a5:e4:d6:c8:8d:b8:
         70:5d:e9:28:e8:da:2f:8a:52:a3:83:d5:59:ab:31:33:51:6d:
         e9:a9:f8:e5:34:f4:65:12:dc:5b:ad:cf:04:43:48:b0:d4:de:
         83:c8:a2:0d:8c:30:e5:77:ef:9e:c9:86:c1:2b:5b:99:95:e5:
         66:0e:7c:c1:0a:3c:6e:b9:11:29:a7:30:cb:10:1f:31:7c:1a:
         e5:15:fd:95:67:48:e0:55:44:3f:87:7c:21:fe:1f:a2:68:4e:
         a0:a5:87:db:55:fb:4f:11:2b:dd:3c:e7:99:bc:da:a1:ad:8e:
         1c:b2:36:7f:bd:0c:17:c7:a7:d3:aa:33:82:2c:08:b1:63:c6:
         fb:2f:19:fc:e0:59:38:39:1e:49:7e:79:d7:80:8e:92:a6:85:
         be:fd:1a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----