Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/10029257-bda1-3754-b670-e0c603bafdfc.roa
File:                     10029257-bda1-3754-b670-e0c603bafdfc.roa (raw, json)
Hash identifier:          C9P7ntR1mxHsVpqvJtzCnK1GLFmvBKqtI17UJkV/ybw=
Subject key identifier:   1B:ED:71:C0:59:19:C0:D0:33:85:1B:6D:73:07:78:A5:28:8A:21:B7
Certificate issuer:       /CN=1cf435c0-9d28-477a-90a9-1b4fd75cda76
Certificate serial:       010D0C9F432858483F80166470D732A45F2A2C00
Authority key identifier: D5:3F:14:5F:41:53:5A:F0:41:C2:D2:BF:7D:3B:50:E6:35:32:FF:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/10029257-bda1-3754-b670-e0c603bafdfc.roa
Signing time:             Wed 18 Dec 2024 14:00:52 +0000
ROA not before:           Wed 18 Dec 2024 14:00:52 +0000
ROA not after:            Tue 18 Mar 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        199.187.168.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3f:80:16:64:70:d7:32:a4:5f:2a:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cf435c0-9d28-477a-90a9-1b4fd75cda76
        Validity
            Not Before: Dec 18 14:00:52 2024 GMT
            Not After : Mar 18 13:00:52 2025 GMT
        Subject: CN=a7fe54c7-ab73-484c-a7ef-b8a8e944825b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:61:57:c2:43:8f:f3:ab:72:ab:a1:78:9c:03:
                    e8:79:f3:e4:b5:b4:c2:85:bd:cf:a4:ed:05:30:64:
                    8e:cb:ac:1e:07:7b:34:4c:d8:6f:c3:43:1a:9b:1b:
                    14:88:1c:c0:c4:df:79:a0:0d:c1:65:b5:7d:20:47:
                    4e:f9:55:44:f4:ee:4a:3f:d0:9d:6e:20:f6:f7:1b:
                    95:45:54:67:f9:9f:62:bc:67:a7:2a:03:16:a5:17:
                    5c:c4:46:93:9b:9f:16:5c:a5:f3:57:52:7c:f9:e7:
                    6f:3c:1f:82:88:8c:ce:a4:dd:6a:0c:54:e6:67:a1:
                    fc:d9:21:2f:d8:ed:df:b5:04:6b:ec:2a:9e:7f:92:
                    d7:f1:1a:92:c5:32:58:dc:43:b2:11:f1:5a:81:c9:
                    37:6e:60:85:a7:84:90:c7:97:2b:20:dd:93:93:3d:
                    ad:20:27:b3:a1:3a:19:15:0e:f6:52:28:44:e0:9b:
                    6d:f0:c4:ae:da:cf:0f:7e:36:36:0f:8b:22:c4:0f:
                    62:98:7a:0c:90:05:29:dc:2a:cf:dd:a0:5e:1c:d1:
                    b8:cc:bb:de:fc:09:5a:6b:5c:11:fd:18:26:13:23:
                    d6:e8:29:32:3c:f2:40:ca:9b:0a:e4:ca:b7:99:4c:
                    f7:c7:4e:5c:74:49:cb:c6:4b:ea:58:52:68:1a:69:
                    7c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:ED:71:C0:59:19:C0:D0:33:85:1B:6D:73:07:78:A5:28:8A:21:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/10029257-bda1-3754-b670-e0c603bafdfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.crl

            X509v3 Authority Key Identifier:
                keyid:D5:3F:14:5F:41:53:5A:F0:41:C2:D2:BF:7D:3B:50:E6:35:32:FF:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.187.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:39:33:14:5b:ea:96:f0:3c:fb:dc:c2:8f:05:b0:47:fd:97:
         ec:16:ca:b4:f6:1b:fb:0d:35:97:cb:db:b7:a7:69:86:17:09:
         61:4e:67:ca:9b:8b:6d:91:fb:b7:fa:38:2f:88:c6:79:21:90:
         e1:16:ed:4d:92:a6:0a:50:20:18:0f:fc:57:27:ef:89:3a:0d:
         88:6d:8c:f3:db:b2:1f:30:d0:d0:b4:9c:cf:50:10:78:e9:e9:
         77:82:fb:e4:24:7e:c5:1c:bf:37:2e:48:b2:26:42:af:e4:5e:
         eb:7b:65:fe:34:0b:dc:af:c8:37:a5:68:f5:89:b4:07:a6:e1:
         a9:9a:3e:e1:be:e2:fa:64:b1:67:f8:8a:2a:07:bd:3c:2c:74:
         1f:20:e2:06:d8:ff:67:64:f1:02:3f:eb:5c:87:a4:e2:f2:53:
         2a:e1:73:93:f3:1a:b1:c8:61:c9:6c:d9:d4:21:c1:f0:d7:9a:
         a2:4b:00:28:bb:17:5a:f0:5a:04:d4:e9:0f:37:20:6e:5b:db:
         ec:1c:e8:b1:33:6d:b0:ac:ca:7c:9c:c1:a7:76:7e:e1:24:4f:
         e1:3f:88:09:42:04:d1:54:26:34:c9:4c:8b:0b:8a:40:f0:01:
         a5:58:1b:e3:5d:82:3a:95:71:a8:c2:15:dd:73:18:b2:00:f4:
         d8:14:aa:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----