Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/561680dd-d76f-3173-b887-f57d9e178ec2.roa
File:                     561680dd-d76f-3173-b887-f57d9e178ec2.roa (raw, json)
Hash identifier:          Vxmxycp6nxCyQbsFcSMwAbtPsWPKk3zsiVaKu4HNdMM=
Subject key identifier:   CF:33:6D:96:70:FD:CB:DD:11:85:E8:B2:1B:C1:49:F7:A6:20:EF:8D
Certificate issuer:       /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial:       010D0C9F43285847DBFEA5177B55E5354363DC80
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/561680dd-d76f-3173-b887-f57d9e178ec2.roa
Signing time:             Tue 12 Nov 2024 22:35:03 +0000
ROA not before:           Tue 12 Nov 2024 22:35:03 +0000
ROA not after:            Mon 10 Feb 2025 22:35:03 +0000
asID:                     394437
IP address blocks:        72.20.140.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:db:fe:a5:17:7b:55:e5:35:43:63:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
        Validity
            Not Before: Nov 12 22:35:03 2024 GMT
            Not After : Feb 10 22:35:03 2025 GMT
        Subject: CN=3f450f4a-3e02-490b-8f82-77875dcf0fe1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7c:58:38:ea:c7:a4:ac:47:7c:91:a8:d0:4d:
                    19:5c:50:6f:6b:a2:61:8a:3a:68:74:52:df:35:0f:
                    0a:78:13:fc:89:0d:6a:4a:93:2d:3d:61:e1:8a:ff:
                    d6:35:1b:b6:a6:73:49:cc:d1:37:6b:c0:a9:0a:4a:
                    90:8a:a6:7a:76:15:b2:21:c6:b3:db:ea:6e:ae:72:
                    d7:17:a1:2e:61:74:ed:78:3a:06:ea:92:5c:d5:c9:
                    e6:61:d0:06:e7:6c:94:0a:9e:f0:f9:aa:79:7e:5c:
                    5f:eb:ac:d2:3f:ec:ba:8b:7d:0c:64:eb:bd:79:b6:
                    07:e2:1d:eb:a4:05:fb:05:bb:18:34:32:66:6a:54:
                    95:d9:c0:9d:09:17:9e:32:17:6d:68:4c:cd:ce:1e:
                    b6:df:65:d2:3b:2b:6b:33:2a:d8:ce:dc:43:5b:ee:
                    ec:90:71:d7:c7:55:77:f6:b0:cb:10:5e:4b:9f:70:
                    51:f0:0b:68:4a:aa:61:a1:78:eb:a1:4b:c0:40:e6:
                    ea:32:e9:30:ab:dc:b7:2b:1d:d8:6c:f7:36:c9:68:
                    d0:29:60:bb:32:11:9d:72:d9:36:c6:ff:27:86:0a:
                    b8:be:00:90:1d:02:28:3f:4f:0c:ef:37:16:8b:b8:
                    bb:e9:2d:af:b9:9f:a0:18:48:b2:dd:2c:c0:d2:55:
                    02:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:33:6D:96:70:FD:CB:DD:11:85:E8:B2:1B:C1:49:F7:A6:20:EF:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/561680dd-d76f-3173-b887-f57d9e178ec2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl

            X509v3 Authority Key Identifier:
                keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.20.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:90:cc:d6:ce:b7:b1:36:c4:0a:66:0c:de:91:a3:00:e8:bc:
         67:00:6c:d9:77:41:98:ec:cb:1c:49:22:fb:8a:80:01:54:27:
         b9:8e:c2:32:a2:d0:d6:f6:6b:1c:05:4c:4e:78:c2:c7:03:90:
         05:e0:0a:07:66:f1:e9:f0:29:a9:eb:c1:e5:2c:5e:1e:58:c6:
         2c:17:58:ef:98:28:13:24:84:46:4a:6c:70:fb:8f:79:0b:5e:
         56:d4:a6:b3:17:7b:8f:5c:a8:e2:38:62:bb:b5:07:bc:b6:2f:
         a3:4b:d4:f2:36:dd:df:0b:cb:1a:93:54:f4:cd:1b:b1:f0:4a:
         10:50:04:8f:bd:3d:81:a8:b2:4c:55:1c:93:80:54:3d:a4:ef:
         cf:33:2f:39:6c:94:89:35:28:37:2e:57:4c:c0:32:e5:e0:59:
         66:e9:81:45:8a:3b:22:76:2a:0c:ec:ad:d0:d8:68:b1:6a:ed:
         3d:e0:27:94:b6:27:cf:b0:27:13:50:06:93:2d:0a:e7:c5:bd:
         ca:ca:d7:13:d4:cd:7a:6c:43:ea:1f:28:3c:3a:6a:98:0f:70:
         2f:9a:ab:c3:bd:0e:a8:6c:91:76:0e:ba:44:aa:63:15:f5:08:
         eb:cd:1c:46:32:b7:0b:23:79:da:ca:63:7b:b8:27:12:c8:fb:
         fa:ff:43:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----