Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/a1e4c146-0d89-3f2f-90e3-39b6dacb84e1.roa
File:                     a1e4c146-0d89-3f2f-90e3-39b6dacb84e1.roa (raw, json)
Hash identifier:          sPcON9VJmgyN2SV3EOv+wU9HKuYyzcc34cjoRhfCo3Q=
Subject key identifier:   04:E6:CE:E1:11:78:75:0B:8B:C4:B9:F8:51:01:03:CC:42:DD:46:A3
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F43285847E094EFCD36A45A4DD76FA340
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/a1e4c146-0d89-3f2f-90e3-39b6dacb84e1.roa
Signing time:             Thu 14 Nov 2024 14:00:40 +0000
ROA not before:           Thu 14 Nov 2024 14:00:40 +0000
ROA not after:            Wed 12 Feb 2025 14:00:40 +0000
asID:                     36040
IP address blocks:        104.237.168.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:94:ef:cd:36:a4:5a:4d:d7:6f:a3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Nov 14 14:00:40 2024 GMT
            Not After : Feb 12 14:00:40 2025 GMT
        Subject: CN=9d3bcd3e-8d51-4066-bf9e-18022e6e9c49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:54:3c:51:a1:f5:c2:29:95:3f:af:64:52:5a:
                    b1:f2:dd:39:95:51:da:5f:89:75:b0:a8:c3:c8:36:
                    71:60:af:af:0b:f5:76:07:9d:85:f4:6a:b2:a1:1a:
                    8e:60:19:80:55:ea:5d:99:7f:e5:62:7d:41:55:ef:
                    3d:54:fd:1b:e2:fd:33:c4:c0:1d:a3:c7:6f:4b:65:
                    18:de:23:16:8d:c2:60:e2:a2:a9:72:e1:ed:f5:e0:
                    17:83:58:f4:40:e1:f4:05:ea:af:17:e7:ff:7c:0b:
                    bb:0a:08:2e:b7:19:99:ef:6d:b6:54:13:eb:ae:19:
                    1c:ab:cb:f7:b6:6f:ad:58:35:6f:93:e1:57:76:ea:
                    e1:60:90:2d:b3:73:5a:1a:88:93:5a:73:d6:de:da:
                    3c:8f:5a:97:45:c9:81:51:ae:2f:14:f9:1d:49:68:
                    3b:56:d9:fd:56:5e:21:73:35:75:db:fe:95:da:4c:
                    0d:8b:47:63:80:8f:9c:d0:a0:b2:3f:c0:a4:f4:23:
                    c5:04:c7:49:29:76:d8:db:8b:cd:4a:16:60:81:08:
                    b8:24:ea:08:9c:d6:52:93:d5:ac:da:eb:bb:84:53:
                    49:0f:65:f3:0b:7f:46:5f:70:65:ad:2a:a7:1c:19:
                    75:96:c8:9a:f2:c5:ca:34:77:cf:14:96:d6:9a:6a:
                    f4:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:E6:CE:E1:11:78:75:0B:8B:C4:B9:F8:51:01:03:CC:42:DD:46:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/a1e4c146-0d89-3f2f-90e3-39b6dacb84e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:78:c8:f0:70:3f:b5:11:9a:1f:6c:1f:ab:f1:d8:4f:9f:f0:
         65:ff:e0:8f:80:22:e6:cd:a0:c8:9b:c7:1d:ad:da:4d:97:df:
         b6:4e:51:cb:e8:14:45:d7:69:bf:db:eb:ee:c9:e1:1c:d0:aa:
         74:93:a2:75:e4:b4:f1:b3:88:42:23:40:8a:e2:f6:5b:4b:ee:
         05:73:7f:80:70:44:51:a0:45:77:6f:cd:65:32:f6:fa:e7:b7:
         d6:a9:98:d1:80:19:52:48:ff:cb:05:54:97:c3:ff:cb:5a:69:
         d2:62:ea:dc:31:51:bd:10:b2:3a:17:14:1e:a3:05:47:d1:40:
         83:1e:32:42:f9:5f:e0:93:d1:6b:3b:05:8a:0d:0d:b2:2f:8e:
         70:36:d3:21:97:38:40:86:b4:5d:58:a8:3d:a6:f3:00:0c:ae:
         6d:2d:a2:3d:43:94:a7:7e:42:89:0f:50:bb:ae:d6:bc:7f:35:
         2c:dd:fa:0f:ec:e1:3e:e9:cb:2b:57:87:ae:15:70:6f:04:73:
         47:c6:55:95:f7:2a:aa:b9:22:2c:0e:e5:79:2d:8a:7e:75:7f:
         c1:b5:28:77:f6:bd:24:86:7f:c4:1e:49:f2:c9:1d:f3:8b:3f:
         29:e9:6b:22:7f:7a:d1:57:ac:87:c0:98:e6:28:04:28:7f:2b:
         e6:3a:05:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----