Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bbb06a86-989c-309e-8d22-e28eaaabf2ad.roa
File:                     bbb06a86-989c-309e-8d22-e28eaaabf2ad.roa (raw, json)
Hash identifier:          F0zGBl53xVCklBUKcKZnzR2j9E/hTJnxcnBkfhdej9s=
Subject key identifier:   F6:A1:F9:74:EA:8B:6F:2B:C8:F4:33:6D:F4:6A:3B:13:6E:13:BB:42
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847E8F4DEA6E4AE61F8C9F82980
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bbb06a86-989c-309e-8d22-e28eaaabf2ad.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     396982
IP address blocks:        34.122.96.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f4:de:a6:e4:ae:61:f8:c9:f8:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=7ec33fbe-6e0c-4b1c-96ee-1b246a9dd014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:62:4b:8b:06:47:18:5d:32:51:84:d9:41:6d:
                    1d:d0:cf:a2:3c:c5:45:fb:12:2b:4b:69:24:57:11:
                    ff:c1:53:c7:9c:41:31:f0:fd:05:1c:a4:e6:4b:3a:
                    93:82:4a:4f:3d:58:73:6d:35:9e:eb:be:45:ba:04:
                    23:7c:02:35:c9:93:6e:e2:e2:02:a2:1f:fa:c7:f7:
                    23:bb:95:96:89:cc:ad:93:30:d1:f2:49:0d:62:10:
                    f6:30:ee:2a:96:1d:66:8e:11:b2:e3:cd:3b:f2:c5:
                    b5:11:ff:6f:b3:8c:16:e7:b9:c7:e6:fb:58:28:08:
                    c3:c7:c9:71:6f:eb:52:00:d5:58:d5:62:5e:c1:e8:
                    e4:83:aa:e7:92:86:d1:1b:34:ad:dc:1c:c7:36:ef:
                    44:53:1f:73:ef:26:97:64:aa:4f:c2:ff:ab:48:09:
                    bd:bf:31:af:59:0e:3b:7c:21:8f:b8:77:7a:f2:8b:
                    29:a2:14:78:7f:51:41:00:b1:86:1c:26:20:a1:33:
                    b0:84:13:57:a7:65:fb:0d:3a:6e:84:a6:3a:50:f1:
                    11:e3:4f:11:ed:23:c6:61:9b:90:de:c8:1a:f0:9f:
                    26:d9:04:79:c8:62:92:4f:4c:df:13:57:8b:6d:13:
                    de:22:49:ca:1c:a2:99:0c:ec:6a:a0:35:97:b1:7e:
                    d1:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:A1:F9:74:EA:8B:6F:2B:C8:F4:33:6D:F4:6A:3B:13:6E:13:BB:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bbb06a86-989c-309e-8d22-e28eaaabf2ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.122.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:ec:56:7b:11:51:09:74:10:4c:7c:39:0b:1b:02:16:fa:74:
         f6:fb:8f:1b:bc:5f:8d:4e:4c:a1:0a:29:bd:9d:fe:93:51:da:
         98:d2:07:46:4c:e0:25:7f:60:d5:7a:f6:05:b7:78:14:71:9e:
         53:bc:e5:79:c1:ba:ef:65:48:8b:89:e6:79:98:58:f9:6e:e1:
         89:17:b2:85:fb:d2:52:31:88:3d:e5:9b:36:bf:b9:fd:9a:b3:
         9d:a0:20:5a:29:31:e0:7e:65:bf:b0:b7:1a:9d:fa:38:d8:09:
         bf:27:30:f0:4d:65:a9:6d:73:82:9e:20:d8:c8:83:18:dd:24:
         31:10:fd:7e:71:cf:80:90:f7:32:3a:ea:57:34:c3:75:e6:b2:
         6b:32:ef:36:11:14:3d:6c:ec:16:64:4e:90:f1:e5:42:f2:18:
         56:8b:dd:cd:b6:3e:2b:d9:d8:c6:7c:82:a3:65:75:7e:f0:74:
         16:dd:02:4e:5d:c7:46:fd:be:39:e4:c7:7f:fc:bd:27:ed:6a:
         76:42:42:43:4f:45:88:9f:e1:d9:15:29:2d:a4:1c:bc:e8:66:
         1d:a6:1d:c2:89:57:89:2b:88:b8:8a:35:fd:70:18:3e:73:00:
         d2:6d:ee:3a:ee:a0:55:d4:33:3b:1c:06:d6:c8:ba:93:c9:8a:
         48:44:34:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----