Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6fbff2b7-92b8-3c04-b1f5-3d08ebcbd5bc.roa
File:                     6fbff2b7-92b8-3c04-b1f5-3d08ebcbd5bc.roa (raw, json)
Hash identifier:          fCpvkbVM/w2uAX+asVNj5Ev44G4hkyYlOzlxvOdgR3I=
Subject key identifier:   58:AF:FF:31:F3:EF:F9:F1:08:FA:63:3A:9D:CC:71:AA:D0:90:0E:4A
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847E8F509E747D9A6340F121380
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6fbff2b7-92b8-3c04-b1f5-3d08ebcbd5bc.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     396982
IP address blocks:        35.201.240.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f5:09:e7:47:d9:a6:34:0f:12:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=177b12dc-6b8e-4a1d-a6be-ad931fc7e900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ca:d2:df:b8:f4:eb:af:e8:72:9c:31:f3:08:
                    b4:d2:39:60:86:13:6d:12:7c:a0:c7:ab:cd:df:ff:
                    ff:4e:3a:82:9d:74:fb:4f:a5:48:4d:d2:3d:18:8f:
                    41:64:d3:6d:55:53:98:21:6e:b3:ee:2f:60:45:62:
                    3c:17:79:8d:43:cc:3c:59:13:03:bc:2b:88:d1:32:
                    0a:cd:d3:30:bb:36:ed:ad:d3:2d:14:4b:f1:51:48:
                    d2:63:e7:5f:f9:86:6c:c4:79:5b:7e:2f:5c:3b:3c:
                    db:11:9a:2a:78:f5:27:d1:85:82:99:7c:7c:05:60:
                    7d:d6:bb:5b:69:72:b9:5b:bc:0f:a7:fb:c1:2a:f1:
                    6e:59:ba:6c:20:76:42:03:61:c4:2a:96:b2:db:35:
                    8f:e6:af:e3:45:46:1b:7d:9a:57:55:0e:e7:fc:0b:
                    28:5d:05:8f:3b:11:2b:e0:83:1e:2b:b0:7b:b0:24:
                    16:62:9a:6c:01:34:5d:f1:21:af:4f:ed:21:e7:01:
                    b6:2c:0b:33:c8:70:3a:b6:11:15:c9:88:3f:a0:9d:
                    eb:4a:cb:0e:a5:d9:3e:21:e0:64:04:8e:ff:e3:fc:
                    d9:62:d9:83:3f:b9:0f:93:20:a0:03:75:1c:f7:33:
                    24:56:36:46:1b:ea:d8:b0:53:e9:81:ca:31:ee:27:
                    c9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:AF:FF:31:F3:EF:F9:F1:08:FA:63:3A:9D:CC:71:AA:D0:90:0E:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6fbff2b7-92b8-3c04-b1f5-3d08ebcbd5bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.201.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:56:7d:8b:b8:56:ea:f0:60:22:f0:3d:c6:ff:67:94:23:2c:
         fd:e0:49:42:49:c2:85:3b:6d:48:83:53:27:5b:3f:6d:b6:2f:
         6f:e2:8c:c1:f8:ce:26:43:df:e2:e4:3d:0b:72:dc:36:a7:0c:
         39:09:db:b0:5d:8a:c4:78:86:42:22:04:35:2a:3c:db:a2:d4:
         ea:9e:ec:2b:73:fe:16:c2:c1:ff:d6:40:1e:6a:50:d4:62:73:
         70:5e:ff:95:ca:83:d0:01:92:0f:0b:62:6c:3a:53:b1:41:4b:
         39:e2:b8:32:5e:5d:36:74:a5:45:63:eb:eb:50:a3:c1:bf:d0:
         39:c3:58:22:5c:15:07:41:2a:70:8f:65:2e:f7:7a:cd:46:5d:
         d4:a7:16:be:ac:91:a3:27:1b:1d:53:33:83:6a:43:78:08:69:
         12:6d:f3:fa:e0:e8:0f:d8:0b:63:24:51:5a:11:60:d0:77:fd:
         ab:83:f8:ca:1e:18:87:cf:f3:eb:0c:d8:28:b3:0a:0a:d1:de:
         ec:19:c8:b1:44:ec:5d:07:c8:dc:72:44:2d:cd:ae:ca:e2:e8:
         52:48:88:d3:34:c5:ea:6d:f8:75:30:4c:02:a2:f9:32:b5:e0:
         04:53:35:31:0a:c0:90:4a:63:da:a6:2e:91:ba:11:f0:e5:26:
         ae:bf:3d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----