Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/07a2f14c-babc-3390-9967-50d12a305268.roa
File:                     07a2f14c-babc-3390-9967-50d12a305268.roa (raw, json)
Hash identifier:          e2pztyVJ0IUHgohbClJTeP6djXSkkkCqqhQ6479c9pY=
Subject key identifier:   EA:A6:8D:3C:8E:22:86:4F:F1:EF:10:75:D4:9C:F3:8C:7F:E9:47:83
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847E8F4E6C91614BA7EEC8A7B00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/07a2f14c-babc-3390-9967-50d12a305268.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     15169
IP address blocks:        34.181.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f4:e6:c9:16:14:ba:7e:ec:8a:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=5b062bb5-f30a-43fe-9bc0-40f25d3459c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ac:a2:fe:60:f2:61:03:69:c7:b9:36:1b:57:
                    1b:34:25:9f:14:5c:e1:ea:2e:54:d2:5b:79:17:ea:
                    91:0c:a2:71:1d:39:81:f5:41:c9:82:1e:6a:66:d5:
                    47:b2:03:a3:55:68:16:5c:02:ee:52:ff:1a:32:20:
                    9e:e2:50:9c:b5:f6:14:0c:f4:5c:cf:e9:dd:4b:86:
                    45:0f:5f:d5:1e:82:af:d6:3d:8b:04:68:8d:e1:a9:
                    7a:3d:63:b0:87:06:37:5c:94:21:b0:fd:44:95:db:
                    81:26:60:7e:8f:57:36:28:61:8d:12:7a:c5:0f:6d:
                    21:e7:0b:3b:f0:14:6a:4d:a5:db:27:d6:25:c3:b8:
                    fb:88:50:a9:1d:5b:5e:8d:4e:92:73:bd:d4:ac:fa:
                    d1:88:88:e4:29:43:34:db:8d:c7:44:6f:ca:d4:52:
                    da:21:e7:04:9c:bb:99:7d:c6:63:8a:3d:22:a4:66:
                    24:92:89:b7:7b:99:4c:bf:d6:3c:ea:1b:67:5b:c0:
                    fc:76:54:d1:81:28:a9:26:fb:68:3d:d1:fe:80:f6:
                    5f:20:29:4b:b0:51:59:10:0e:01:1c:02:04:1d:64:
                    ee:b9:4f:f6:6a:d3:e5:e5:9f:aa:14:a9:8b:d5:77:
                    d5:77:11:a6:17:b2:01:ec:90:8a:fa:99:0a:b1:2c:
                    bd:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:A6:8D:3C:8E:22:86:4F:F1:EF:10:75:D4:9C:F3:8C:7F:E9:47:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/07a2f14c-babc-3390-9967-50d12a305268.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.181.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:04:f2:33:a4:75:5f:9d:b1:da:d8:65:06:49:d8:6c:f8:55:
         64:58:5b:aa:5f:ee:2c:85:67:ef:4a:0c:fe:b8:e3:03:87:f1:
         60:a2:5b:d1:f1:c6:ae:eb:2f:a7:85:b9:e2:c2:c2:da:50:07:
         c7:2b:c1:44:78:90:7e:94:ad:90:1b:9c:fb:33:32:69:15:7c:
         21:1a:20:2c:1d:be:a8:af:50:c8:95:b9:e7:83:89:16:f9:6f:
         c2:1d:d6:e6:ec:55:9a:0e:17:9c:ce:6f:90:7f:b9:e0:1e:50:
         08:e1:5d:fc:a2:40:84:89:fd:ae:4d:43:fa:8f:1a:18:06:40:
         b5:3e:11:34:18:bc:76:d4:35:e2:df:9a:a3:fa:a3:91:dd:c3:
         9c:73:2a:0c:4d:80:bb:29:82:1c:65:12:4c:b0:45:c4:b5:52:
         06:c6:c8:04:90:82:b6:66:ae:aa:37:f2:50:e4:81:e2:b9:6e:
         c1:58:a4:57:1a:27:c2:53:da:59:59:3e:fa:ca:9d:32:95:50:
         e7:8d:d3:ee:89:cc:58:19:b5:55:73:14:cc:08:82:d4:7a:8d:
         9c:bd:63:a9:92:de:c6:45:0e:66:b9:f2:92:74:a3:e9:ad:4e:
         9b:bc:43:50:be:d3:3f:ef:df:01:87:d7:20:a7:b0:ea:21:d3:
         f1:e7:64:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----