Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/16b291e9-133c-3be1-8f96-f23e2853a067.roa
File:                     16b291e9-133c-3be1-8f96-f23e2853a067.roa (raw, json)
Hash identifier:          exTebjoQyQDUUl++n1GLPcmYAsW3Qsk3YW01VDd57g8=
Subject key identifier:   5C:21:BE:07:1F:CD:A5:23:17:1C:E8:7B:54:05:B5:1F:B2:C9:AE:19
Certificate issuer:       /CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e
Certificate serial:       010D0C9F432858489075EA70B5856006A3F45FC0
Authority key identifier: 0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/16b291e9-133c-3be1-8f96-f23e2853a067.roa
Signing time:             Thu 16 Jan 2025 14:00:50 +0000
ROA not before:           Thu 16 Jan 2025 14:00:50 +0000
ROA not after:            Wed 16 Apr 2025 13:00:50 +0000
asID:                     399296
IP address blocks:        216.185.220.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:90:75:ea:70:b5:85:60:06:a3:f4:5f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e
        Validity
            Not Before: Jan 16 14:00:50 2025 GMT
            Not After : Apr 16 13:00:50 2025 GMT
        Subject: CN=a67f073f-f0f7-49bb-829f-0e376af1bf7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:32:91:4e:21:d1:a4:8c:2f:1f:2d:04:68:f0:
                    72:a3:37:9b:86:2f:69:d4:79:30:13:11:55:7c:96:
                    f6:19:c8:5c:6a:3b:45:9b:a9:47:07:fa:88:d0:91:
                    8a:6b:b3:1b:ef:59:3f:7d:c5:83:43:04:73:bf:98:
                    c8:d8:65:f0:70:28:15:f3:2d:f5:2a:0a:f7:5a:77:
                    8e:cc:24:6e:eb:d2:ab:5b:f7:85:44:ec:fb:64:10:
                    45:10:69:22:b9:4f:c5:45:53:5b:d1:a6:4c:6c:26:
                    bb:8c:cd:ae:8d:d3:32:3a:fd:10:a2:e7:c8:b8:61:
                    31:6a:83:04:1b:86:47:38:80:d8:30:ee:d2:56:06:
                    54:f8:25:a7:c5:40:96:30:36:6e:ec:21:67:3a:66:
                    bb:e0:78:0b:63:c4:a4:42:ad:df:e5:82:e5:d1:d9:
                    a1:e6:12:f5:86:5c:f7:1c:8d:17:0f:ef:88:4d:b7:
                    ed:80:a9:cb:52:e6:52:e5:1e:9f:9f:a5:78:10:2f:
                    11:2b:16:26:94:68:12:6e:a5:1e:72:4d:ca:48:bd:
                    d2:f0:f6:0c:5f:f7:f4:e4:f3:c6:0d:cf:76:e8:13:
                    84:15:60:4f:e3:30:27:75:6c:23:ff:5f:bd:1d:63:
                    6f:33:a8:6d:27:41:91:9c:03:41:3a:2b:aa:0b:b2:
                    bb:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:21:BE:07:1F:CD:A5:23:17:1C:E8:7B:54:05:B5:1F:B2:C9:AE:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/16b291e9-133c-3be1-8f96-f23e2853a067.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl

            X509v3 Authority Key Identifier:
                keyid:0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.185.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:b2:12:e5:e2:a5:91:53:ba:9d:13:42:a3:1d:0d:f8:59:0b:
         50:cd:dc:81:45:f7:4b:e0:37:cd:5e:5e:73:d7:3b:60:c4:de:
         aa:e5:23:2b:97:56:90:f7:42:d2:62:51:9d:60:36:8a:68:a8:
         44:1f:8d:80:52:fd:f4:a7:66:0c:df:d4:12:26:bd:f5:06:2f:
         51:2b:9b:18:f0:40:b2:73:2d:04:ea:c4:ec:a4:cc:9b:7d:63:
         a8:ce:5a:bc:60:77:9d:09:e6:de:b9:5e:db:0e:4b:f0:73:14:
         87:ad:e1:af:6b:33:94:42:bc:55:12:c8:34:5e:9d:49:2d:9a:
         d8:bc:d2:cb:ef:35:b8:97:7c:18:91:78:c1:91:1f:25:63:cd:
         51:4a:33:1b:5d:44:a5:88:cb:0a:d3:2d:28:83:ee:2f:8f:13:
         81:65:2d:ba:88:ce:ea:53:6e:f1:9c:67:ee:71:4b:d8:30:23:
         bf:48:9d:ad:9b:85:64:23:3b:74:7a:fe:29:84:bc:8d:90:df:
         54:88:59:7b:1b:be:4a:df:91:84:c7:66:5a:77:5c:9d:83:fa:
         38:c9:7b:8c:30:a4:44:b6:4e:e0:71:a8:83:02:a0:5d:98:da:
         1f:88:b6:3e:a6:5a:65:77:4f:63:e4:cb:6d:01:80:91:bf:8d:
         50:f4:58:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----