Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/aee24b5b-c234-39ee-8ade-d417941ba3c9.roa
File:                     aee24b5b-c234-39ee-8ade-d417941ba3c9.roa (raw, json)
Hash identifier:          hYnKCKLBA6AbwZ+T9dTokrPQhdlbnwUU5MId0WZjvG8=
Subject key identifier:   83:A2:8C:BB:91:E0:1A:ED:28:8A:57:66:7A:B3:DB:65:99:7D:D1:57
Certificate issuer:       /CN=7bebf1fd-be49-4771-87fb-2d0488be4cab
Certificate serial:       010D0C9F432858484C101BF3A4C2F04D883DF4E0
Authority key identifier: A6:AD:23:24:BF:14:90:C2:B8:53:86:42:68:F2:81:07:01:EB:97:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/aee24b5b-c234-39ee-8ade-d417941ba3c9.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     14618
IP address blocks:        66.22.108.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:10:1b:f3:a4:c2:f0:4d:88:3d:f4:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bebf1fd-be49-4771-87fb-2d0488be4cab
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=b7e1ecb7-76a5-4888-b3b2-f4aab789644a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b4:0d:ba:14:9e:b1:ad:0b:ca:70:c5:d3:7b:
                    47:39:87:b8:2f:bb:32:5a:c6:4c:86:44:16:50:27:
                    e7:c4:ea:a0:83:31:c1:02:46:06:71:70:63:f7:a1:
                    28:58:aa:8f:80:b9:97:1b:1a:ff:c9:49:8c:ca:68:
                    41:b9:28:96:79:aa:6d:58:56:98:7f:f6:39:34:a6:
                    3c:b8:fa:23:ef:44:83:11:37:20:90:d2:ca:b2:89:
                    67:76:d5:5d:75:d1:85:87:37:39:25:f9:e6:07:51:
                    89:70:77:ea:27:5f:88:40:2e:2e:70:93:e6:b8:aa:
                    e8:f0:a7:48:99:7b:85:10:42:27:f4:45:73:61:27:
                    94:53:be:a1:97:30:82:cf:53:61:6e:21:ec:12:e4:
                    71:aa:9b:95:a0:84:e2:18:47:21:02:bd:3c:d4:e7:
                    ea:d2:70:ff:15:8e:1a:8f:36:d1:cf:31:be:38:fc:
                    b3:90:80:13:12:8c:4c:e6:5e:b2:25:b7:07:1d:99:
                    41:6d:e8:b8:27:42:f5:df:99:f3:8b:fa:34:08:4d:
                    d4:ff:d7:a9:80:cf:94:1e:fe:a9:4f:4c:03:2a:42:
                    95:ab:ea:46:97:1c:8a:8d:cb:f0:78:b2:2c:0b:0d:
                    68:bf:6b:7e:51:f2:2c:dd:00:a2:7c:d3:22:7c:ba:
                    69:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:A2:8C:BB:91:E0:1A:ED:28:8A:57:66:7A:B3:DB:65:99:7D:D1:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/aee24b5b-c234-39ee-8ade-d417941ba3c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/7bebf1fd-be49-4771-87fb-2d0488be4cab.crl

            X509v3 Authority Key Identifier:
                keyid:A6:AD:23:24:BF:14:90:C2:B8:53:86:42:68:F2:81:07:01:EB:97:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.22.108.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:ce:87:a5:3a:49:39:9b:63:3e:13:20:9d:12:b4:7e:cd:8a:
         51:76:ef:2e:a9:c3:72:63:20:23:5b:47:9a:50:ed:36:48:26:
         17:ef:8a:85:9e:f2:14:8a:e3:d0:bb:9d:47:cf:e5:1e:fb:52:
         ef:68:91:6f:87:b0:36:90:06:bd:c8:ea:04:03:78:7c:e0:f6:
         5d:af:8d:4b:77:56:9b:a4:91:08:c2:46:1a:46:02:11:18:d0:
         82:27:0d:a0:97:0c:56:d1:68:af:cb:3e:2f:be:41:0f:d2:dc:
         52:a9:b4:17:22:cc:30:2a:36:a8:39:5c:5b:44:37:99:a8:19:
         01:f0:14:d6:cb:47:7c:55:0c:f0:51:10:49:9e:be:64:08:df:
         b7:8e:3e:82:04:eb:64:d6:63:57:86:c0:51:16:bf:a0:5c:cc:
         0e:7a:3c:a1:53:2b:ac:f5:20:96:52:0e:8e:98:97:80:14:96:
         66:03:58:68:19:81:19:51:22:4e:d6:d4:cf:21:f4:1b:12:18:
         b8:e5:48:5c:52:a2:fd:f5:b9:a0:b1:df:69:f7:42:19:96:ca:
         fa:c5:1e:3b:ae:16:6d:32:6f:bf:9e:ac:32:29:d3:c2:bd:02:
         db:ac:c6:a1:64:07:a9:4d:8c:fd:fe:29:cd:3e:f2:1c:2b:d9:
         87:87:01:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----