Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b2a3aea3-a626-34c6-a988-c509a0fa1ea2.roa
File:                     b2a3aea3-a626-34c6-a988-c509a0fa1ea2.roa (raw, json)
Hash identifier:          p9ao/7bzEuWJ6HJKNA2C8xr1CYE89//DxskaiA0rb/U=
Subject key identifier:   98:5E:6A:F2:46:56:44:1B:F1:58:C2:54:15:CC:2B:09:9D:A9:DC:BD
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847E8F4F7B029B8FE633377A880
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b2a3aea3-a626-34c6-a988-c509a0fa1ea2.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     15169
IP address blocks:        35.204.0.0/15 maxlen: 15
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f4:f7:b0:29:b8:fe:63:33:77:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=3e166b44-25a6-494c-9939-7f378a7b6af4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:5a:4a:e0:6c:e2:d8:16:5c:48:8a:73:d0:a9:
                    14:7d:2e:a7:2d:30:d6:72:4a:41:f6:a0:15:bf:e5:
                    13:74:67:28:ba:ad:2a:5d:37:bd:b2:2c:61:c6:68:
                    1f:e5:a3:27:9e:8f:0e:d3:c0:6b:01:ac:4a:8d:bb:
                    bd:3c:2f:47:53:ab:aa:6b:ff:15:b3:23:40:c6:72:
                    32:81:62:e3:32:1b:d0:ea:13:d1:d9:78:54:ac:8e:
                    ba:b5:66:b7:b7:e8:12:c2:99:04:a9:b5:af:c0:5e:
                    95:26:29:fc:62:6b:ed:6a:fb:88:d7:1d:0b:69:91:
                    ba:e9:5b:1d:d2:ea:9e:5d:fe:5b:0a:e5:e1:a1:39:
                    d0:a7:fd:d7:39:82:f9:9c:c7:9c:0f:9b:39:28:5c:
                    df:d4:7f:7f:2a:53:9e:a6:55:f1:2d:a4:5e:60:98:
                    7b:50:a1:b5:fc:7d:31:2e:71:04:6f:bf:cb:d4:5f:
                    48:b7:6c:9d:59:2a:42:b4:e2:9b:2f:a6:be:86:d1:
                    88:2b:e9:7b:92:cf:88:ca:78:05:91:90:54:17:cd:
                    b3:df:f2:1d:36:16:ac:ab:19:c8:71:51:5c:8a:ef:
                    8c:49:52:6b:27:4e:1b:ae:1e:99:08:8e:ae:75:f9:
                    12:18:15:aa:c2:47:3e:4e:00:3f:e2:08:7b:96:37:
                    aa:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:5E:6A:F2:46:56:44:1B:F1:58:C2:54:15:CC:2B:09:9D:A9:DC:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b2a3aea3-a626-34c6-a988-c509a0fa1ea2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.204.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:67:14:03:52:da:48:bb:ae:a5:98:d7:aa:ce:9a:46:4f:b4:
         c3:ef:e7:cc:8a:d8:ea:a6:81:7d:ce:60:73:8f:b6:68:36:22:
         63:83:5f:b2:98:4e:92:c0:f2:60:68:a2:40:3d:c0:05:0b:93:
         d0:01:29:d4:d9:53:0d:c7:37:62:b7:8e:9f:30:2e:05:7b:f1:
         a1:79:f4:42:82:84:ca:38:ec:f0:c3:24:b4:86:a5:b9:93:26:
         b9:26:2e:b4:5a:2c:fe:25:5d:90:11:ef:e2:e8:9d:84:8c:ae:
         80:5c:5b:25:b9:6a:e8:f2:7c:42:6a:a9:2b:95:33:5c:31:a7:
         46:18:a9:a0:bc:74:a2:aa:96:1a:e4:62:76:99:ec:a8:d0:ea:
         65:00:ed:76:01:68:70:d3:3f:18:6d:84:8f:1e:fc:fa:c7:52:
         9f:92:93:58:12:94:7f:8b:0d:18:61:22:63:50:47:5a:e1:20:
         86:cf:8a:9e:71:6f:38:3a:8a:57:55:ad:22:c7:7a:ab:21:82:
         07:9a:a8:1e:43:c1:c0:ac:b0:79:5f:52:1e:c8:f6:f8:20:3d:
         b8:4c:47:71:d3:9c:fe:62:56:ae:f5:b1:b4:b0:6b:e0:fa:f0:
         cc:7f:8e:d3:8c:51:03:43:80:71:6d:72:da:a5:dc:71:86:d5:
         9b:bc:54:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----