Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7fbeb898-65cb-3fa2-ba1a-a40d5b95a59c.roa
File:                     7fbeb898-65cb-3fa2-ba1a-a40d5b95a59c.roa (raw, json)
Hash identifier:          F21rT3q11NHv/VcL2ANmrlzoLoHUF2Tqy20h5dRB1Ec=
Subject key identifier:   08:41:B6:AF:E3:15:CB:50:2E:26:61:04:29:97:DC:C3:98:A5:7F:37
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847E8F51AB938C701E9D8A78980
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7fbeb898-65cb-3fa2-ba1a-a40d5b95a59c.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     15169
IP address blocks:        35.188.160.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f5:1a:b9:38:c7:01:e9:d8:a7:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=7bea2510-67bb-440b-9375-6359f3b8ab29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:36:a4:f2:43:ee:d0:77:13:f1:ee:71:29:f9:
                    53:11:75:07:d7:1c:f0:1c:d6:5a:4f:f1:5c:b4:3f:
                    b8:10:fd:56:38:17:90:56:d3:82:ab:c2:41:77:25:
                    c0:67:85:23:55:a9:6c:45:83:5a:f9:24:70:03:68:
                    b4:10:1c:9c:31:56:5c:72:9f:22:92:08:e5:dc:e7:
                    56:43:50:d9:2b:05:ec:20:47:fa:93:aa:d6:fa:fc:
                    81:53:d6:de:a1:f6:1a:b1:2c:4b:4b:24:44:4c:8c:
                    61:0f:1c:08:73:f7:3f:98:cd:90:31:4a:f3:61:24:
                    6f:0a:48:42:5a:03:b9:bd:14:87:ee:e5:21:d7:07:
                    80:94:ec:d8:32:18:18:53:c4:4e:6a:27:c3:e1:a6:
                    9e:bb:ba:bf:b2:c7:4e:e5:2e:e3:c8:61:33:5b:3b:
                    1a:9a:34:1e:2d:11:77:e4:24:10:14:7e:6c:c9:e4:
                    0e:67:0d:45:be:25:38:68:72:0a:a1:65:f3:60:9c:
                    0e:04:5a:aa:0c:06:e4:03:fb:9e:da:2d:2b:ab:64:
                    04:2d:fa:4d:f8:c2:70:ab:a7:22:44:7c:0b:2e:07:
                    cb:8b:ac:f3:12:1d:20:c2:22:26:cc:3c:3c:80:48:
                    90:1e:b0:a5:e8:bd:cf:ba:38:de:78:9a:34:77:ae:
                    85:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:41:B6:AF:E3:15:CB:50:2E:26:61:04:29:97:DC:C3:98:A5:7F:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7fbeb898-65cb-3fa2-ba1a-a40d5b95a59c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.188.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:fb:96:df:e5:3c:da:49:00:54:61:1c:56:69:a7:13:9b:19:
         3f:6d:ef:f2:50:2e:f2:df:02:84:5d:2a:d4:b7:a5:4e:3d:0a:
         8d:fc:85:61:c8:42:32:4e:fa:76:81:58:d4:a0:9d:a5:b7:92:
         26:95:a2:85:b8:8d:5a:6e:af:39:95:43:b2:8f:ea:c6:a7:9b:
         93:7d:5b:c9:20:12:4a:8b:2d:20:5c:9b:76:ed:ce:d4:2d:97:
         55:29:c4:d9:47:2e:69:e2:d3:75:fd:b3:61:6e:0d:43:8f:20:
         91:08:e8:5e:fc:fd:8f:f6:b7:07:49:42:4e:17:eb:5d:bd:a4:
         17:c0:a3:ef:e2:55:5b:67:a0:4e:23:0c:9e:d7:b8:4c:2b:95:
         8a:dc:a6:9e:5d:d2:ed:f1:50:09:32:70:d5:3f:74:47:aa:27:
         d1:33:64:b0:85:aa:c4:ec:5f:b8:85:d7:67:88:90:74:d2:38:
         a4:9a:4b:2f:2e:47:d4:af:57:2e:34:70:fd:bc:26:47:e5:45:
         39:c4:0a:5a:11:ab:bb:f5:90:98:7b:e5:74:f6:66:4a:4c:21:
         2f:85:a8:e9:99:ce:21:4e:5f:51:08:8e:26:2e:96:fb:c5:4f:
         d5:b3:31:3c:34:62:bc:4f:b7:7b:79:e4:ad:14:46:e4:27:6c:
         ea:0e:3d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----