Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/dece95bf-c6c6-329e-95b3-d90bb402a522.roa
File:                     dece95bf-c6c6-329e-95b3-d90bb402a522.roa (raw, json)
Hash identifier:          RibRwgpUeW6+z1qukHWI6JdgHYLuwMAZ29PYcInLfeA=
Subject key identifier:   DD:68:F6:B8:7B:6B:E7:6F:D1:90:17:3B:C7:1C:AB:54:1F:5D:09:BA
Certificate issuer:       /CN=aa033953-9752-479d-b9ee-4213cf648479
Certificate serial:       010D0C9F432858484AAAE2B1A7A8B875F5835BC0
Authority key identifier: 84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/dece95bf-c6c6-329e-95b3-d90bb402a522.roa
Signing time:             Sun 22 Dec 2024 14:00:51 +0000
ROA not before:           Sun 22 Dec 2024 14:00:51 +0000
ROA not after:            Sat 22 Mar 2025 13:00:51 +0000
asID:                     14192
IP address blocks:        198.150.94.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4a:aa:e2:b1:a7:a8:b8:75:f5:83:5b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa033953-9752-479d-b9ee-4213cf648479
        Validity
            Not Before: Dec 22 14:00:51 2024 GMT
            Not After : Mar 22 13:00:51 2025 GMT
        Subject: CN=7a51b4f3-a7f7-48ad-8694-54140cc516c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b0:6e:d1:9f:2e:73:34:b2:ef:4b:b7:89:35:
                    fb:c7:03:b6:62:a4:49:a4:05:98:c6:dc:2d:a0:d4:
                    72:34:da:86:51:9b:63:fa:ad:46:e0:77:35:cc:0a:
                    6f:3f:44:8e:39:99:1b:27:52:e2:38:f6:b0:57:aa:
                    90:36:80:fb:0c:47:26:fa:b0:a4:81:9b:b4:7c:9c:
                    63:fb:91:dd:7c:ec:a2:70:1b:49:8d:04:0a:02:de:
                    2c:58:9b:eb:c1:8c:c5:37:f4:09:96:a7:61:49:d2:
                    8f:03:44:83:7f:00:8d:61:73:63:f4:b1:af:35:d7:
                    bc:4e:6d:4b:5f:8d:1c:d2:bd:59:2a:b2:fa:c5:c1:
                    39:89:f8:00:c5:05:c9:a3:d6:f0:04:b6:e0:1f:1d:
                    05:31:17:39:23:38:aa:a2:0c:8b:b5:b3:7e:7b:6b:
                    85:be:81:fe:f4:61:ec:f0:c1:f7:d8:d2:d0:74:86:
                    c6:64:c7:ec:04:97:ad:6a:df:09:e4:4d:a2:a5:3f:
                    c0:ce:cc:c8:57:79:15:95:eb:99:d9:b9:25:91:90:
                    db:ef:d0:9d:68:b8:d5:87:d0:33:ca:8c:03:54:ef:
                    c1:c6:16:0c:37:90:2e:12:3d:5b:ea:d8:51:e3:ae:
                    0c:5b:64:24:3e:c5:e7:26:bb:f1:49:d0:92:9d:36:
                    3a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:68:F6:B8:7B:6B:E7:6F:D1:90:17:3B:C7:1C:AB:54:1F:5D:09:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/dece95bf-c6c6-329e-95b3-d90bb402a522.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl

            X509v3 Authority Key Identifier:
                keyid:84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.150.94.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:88:27:3e:36:c0:1d:29:f8:c7:10:1d:44:f1:90:e2:81:35:
         17:ad:96:6c:b3:c2:1e:58:e5:66:15:7c:3b:42:4a:fd:17:e4:
         46:a4:b7:ab:71:fa:63:32:2d:03:55:cf:c6:18:75:a1:e3:42:
         1e:ba:63:67:4e:c1:79:eb:0a:e6:ed:53:da:86:08:be:31:14:
         2b:56:98:6b:3f:ed:ae:02:d7:22:a8:ff:8f:5e:75:be:f5:ed:
         49:2a:f1:52:c9:f8:5f:72:6f:5d:3d:cc:7e:55:27:ec:41:89:
         13:cb:de:92:d0:96:7c:43:34:d5:8e:e8:12:a2:e3:72:30:c0:
         a1:4f:8f:b8:30:2f:2d:4f:ff:38:0e:86:46:ae:32:c9:94:42:
         dd:d5:48:65:ea:4b:60:2d:9f:64:06:98:9c:f4:b3:52:b1:b5:
         b6:7e:77:14:8f:70:aa:b6:86:09:c0:02:2c:fc:68:93:b6:27:
         59:9b:58:3c:dc:66:b4:ef:8c:7c:13:e4:fa:db:a4:03:70:bb:
         86:1e:8e:56:67:8f:c0:3f:61:fc:26:52:9a:c4:0e:11:7a:96:
         d3:e2:24:74:e5:c5:97:e4:23:5a:59:0d:4f:c3:68:07:02:27:
         18:45:ed:a3:2e:49:5e:f0:67:12:dd:94:89:1c:de:a3:cd:46:
         b7:bb:99:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----