Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d0db29bb-78cc-357a-97c2-0eb39f740b03.roa
File:                     d0db29bb-78cc-357a-97c2-0eb39f740b03.roa (raw, json)
Hash identifier:          JQSBo1ioLuAbeGHzHPKt2Z7vveGruuUBu4pDE0LQnfI=
Subject key identifier:   29:5F:0F:75:5B:3A:F2:00:8C:E0:BE:3C:D4:37:AF:45:C1:8B:F7:3B
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847E8F4D93C2F61B0FF25E3E7C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d0db29bb-78cc-357a-97c2-0eb39f740b03.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     15169
IP address blocks:        35.216.128.0/17 maxlen: 17
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f4:d9:3c:2f:61:b0:ff:25:e3:e7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=07f92722-246e-4527-8276-ecd9aae8a023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:98:d5:4b:0a:81:4d:53:87:80:00:93:f7:88:
                    a6:c7:af:ea:fe:a8:c8:7b:da:05:b3:9b:96:82:23:
                    09:b8:1c:35:23:9e:8b:29:40:e7:fc:01:85:b5:7b:
                    bd:3e:0f:b4:ef:5e:3b:36:18:70:5a:7c:9a:04:6e:
                    37:bf:c2:27:5b:0b:04:10:e8:fc:40:42:0f:ec:6f:
                    73:2f:3b:e5:bb:1b:23:31:0f:e7:2d:a8:8c:dc:5a:
                    30:76:cd:12:b2:a2:67:52:6e:e9:b2:de:a4:87:61:
                    18:76:25:d6:8d:39:9a:63:50:a9:9f:bd:e4:97:6a:
                    63:be:79:5e:b2:7e:a9:b7:fd:82:17:8a:c7:bb:8c:
                    0d:4d:b5:b1:3f:4b:24:98:fe:3d:06:63:36:96:bc:
                    64:a3:e8:9d:29:cf:0e:7c:f8:c5:42:ad:f9:f7:94:
                    33:d7:84:85:26:d8:de:9b:81:a5:0e:3b:4e:70:6d:
                    7f:ac:28:30:c1:da:72:fc:94:b4:b8:10:5f:32:46:
                    22:63:72:58:16:0a:a9:91:25:01:31:70:76:b2:f7:
                    ae:12:f5:d2:68:bf:00:1a:30:86:23:4f:75:c0:a5:
                    26:23:11:a1:da:49:b7:d1:1c:f4:42:da:87:6c:19:
                    47:50:7d:d4:e4:13:a4:c8:90:a7:5c:14:07:fc:57:
                    ac:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:5F:0F:75:5B:3A:F2:00:8C:E0:BE:3C:D4:37:AF:45:C1:8B:F7:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d0db29bb-78cc-357a-97c2-0eb39f740b03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.216.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:1e:90:37:f5:51:ba:48:1b:ce:fe:64:18:7d:0e:6f:22:33:
         05:fe:95:66:e9:d7:f6:b5:44:28:31:57:a6:c4:0d:75:5d:f7:
         cd:eb:30:f4:8d:08:fd:59:ac:14:29:6a:d2:6e:7a:ee:f3:e5:
         77:fd:9d:47:bf:b0:b8:b7:00:4f:47:3f:28:03:37:af:ee:76:
         a8:1b:c7:78:7d:89:b1:d8:b3:2a:f6:66:01:1d:54:3d:2a:e3:
         cb:cc:61:1b:67:e7:a8:dd:e6:9f:c4:cd:d8:d5:64:b0:df:f3:
         0c:e3:fa:f6:47:94:78:46:4f:2b:cd:78:e5:a1:de:1e:0f:e8:
         58:c1:0f:23:33:23:53:4b:ff:69:92:59:ba:5c:82:04:a4:5c:
         41:dd:0f:f8:45:a4:bb:6e:c2:5c:26:ed:1d:6d:32:d6:cd:f5:
         54:7e:e9:51:37:e2:b6:15:74:4a:40:3e:ae:3b:3b:0f:0b:c4:
         c8:a3:e6:cc:a6:12:08:97:4b:9f:7b:ac:5c:50:c5:12:aa:de:
         82:ec:aa:0e:b1:55:3f:5c:40:f3:03:c9:a0:3a:f2:3e:0f:74:
         47:88:f8:01:a9:41:dc:d1:38:cf:6a:eb:fb:1b:cc:7a:b7:34:
         5c:07:6d:5b:c7:c5:8a:1c:d3:d6:d3:2d:10:dd:55:1f:d6:10:
         f9:e6:9e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----