Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/38596e48-a4eb-3908-88f2-59cda477d727.roa
File:                     38596e48-a4eb-3908-88f2-59cda477d727.roa (raw, json)
Hash identifier:          uTxOiSA5zigNCrNZPxO1qj7QJ+D/cEMFsoUDYU1sBz0=
Subject key identifier:   B2:05:B2:76:E5:6C:81:03:06:A6:A2:60:D8:CC:F2:20:FE:1D:D7:85
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F43285847E62B2F6601240DF96BED05A0
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/38596e48-a4eb-3908-88f2-59cda477d727.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     36040
IP address blocks:        208.117.224.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2b:2f:66:01:24:0d:f9:6b:ed:05:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=d50e76bf-5a08-4f67-b168-056b63b55e69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0a:8f:43:90:4f:fa:b0:35:4c:c0:36:6b:9a:
                    dd:ce:7a:77:50:9b:8a:76:d9:83:c2:9d:a7:37:2d:
                    d4:84:67:fd:01:88:bf:2f:39:9f:42:8e:52:18:d8:
                    dc:c0:eb:97:38:04:63:76:8a:1c:7e:3e:35:60:85:
                    12:90:7c:80:d7:fc:fd:d0:2e:69:34:44:73:db:ab:
                    21:0b:7e:ba:2b:fd:40:cd:54:6a:e3:8c:a0:2f:c1:
                    7c:72:1f:58:97:6c:e9:f9:58:24:51:f7:c7:69:52:
                    11:ba:16:56:a5:00:2c:0a:fb:08:27:f1:08:df:2f:
                    39:bc:8d:8b:a2:d7:e6:b3:fa:ec:72:64:0b:8a:c4:
                    07:e8:08:42:10:c0:67:31:22:c9:b1:e0:9b:9e:81:
                    1e:16:5c:1f:d8:d1:22:8b:d8:be:c8:87:1b:7b:9a:
                    0b:f5:09:fe:89:95:69:8d:ac:09:5c:86:1e:b3:42:
                    70:5b:b3:64:e3:8f:33:47:c8:2d:57:74:b1:d4:bb:
                    79:61:a0:11:37:f1:7a:b3:16:93:0b:f4:49:df:1d:
                    e2:d7:a4:a6:f2:35:b0:0b:26:14:b2:a9:9e:a0:af:
                    a9:c3:75:88:33:ef:7c:e1:9a:29:e3:41:fe:71:dd:
                    bc:a9:de:32:e1:b1:18:62:81:68:93:a2:00:79:d8:
                    b2:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:05:B2:76:E5:6C:81:03:06:A6:A2:60:D8:CC:F2:20:FE:1D:D7:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/38596e48-a4eb-3908-88f2-59cda477d727.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.117.224.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:bc:84:6f:73:7f:ec:47:94:0d:da:6b:7b:f7:d6:d0:83:d5:
         03:35:df:b1:40:78:46:d3:ba:3a:f3:56:d5:91:d5:7c:3f:41:
         b8:63:f8:03:70:ee:4f:4e:58:da:2f:a0:a0:81:73:d3:26:cf:
         e2:c9:39:04:de:2f:f8:9b:c3:b6:d1:03:49:07:3d:2d:dc:61:
         3d:66:a8:50:a6:2e:37:38:96:29:e3:e0:cc:9c:3c:d1:de:bf:
         a2:ca:88:f3:8b:25:56:29:fa:8f:75:c1:bc:4f:f2:1d:c3:d7:
         3e:24:e6:db:1e:f4:ca:87:70:ee:9c:8d:9a:34:bf:33:51:a8:
         fa:f2:3e:2e:4d:4f:97:5b:fe:58:f6:57:fa:3d:d2:22:77:06:
         3f:71:7e:e9:4d:0d:8f:55:dc:04:fd:e9:1e:56:99:af:15:52:
         64:1f:a8:03:1d:2e:ee:76:d2:ff:33:88:c6:4a:9d:53:5f:c8:
         9c:84:b7:63:11:84:4c:56:31:f6:b6:53:ff:7c:a8:2d:6c:60:
         7d:74:b2:82:81:61:07:70:18:ac:4c:2f:b0:56:a3:c3:de:1b:
         3b:75:a8:d3:03:60:ca:a6:eb:19:8d:fa:34:8b:cc:b4:0f:e4:
         11:f5:c3:7f:9a:09:cd:db:f6:d7:8e:26:07:8d:66:b3:0e:fc:
         06:1a:82:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----