Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d10dc068-f40b-4a85-97fb-2769f176bce3/f085a256-5253-3ee6-b2fb-29f9c50afe83.roa
File:                     f085a256-5253-3ee6-b2fb-29f9c50afe83.roa (raw, json)
Hash identifier:          591PU53k784GqKGupe/Xl8mtYCoznRAyjwbRlX9deXI=
Subject key identifier:   1E:57:11:29:75:2A:1E:67:D3:D7:4C:01:68:97:F2:39:18:86:7D:CA
Certificate issuer:       /CN=d10dc068-f40b-4a85-97fb-2769f176bce3
Certificate serial:       010D0C9F43285847E78F6B006BFE704E5FC8C8E0
Authority key identifier: 80:C9:98:E5:C4:C9:11:22:09:55:B4:C2:FA:36:76:80:D4:D2:C2:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d10dc068-f40b-4a85-97fb-2769f176bce3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d10dc068-f40b-4a85-97fb-2769f176bce3/f085a256-5253-3ee6-b2fb-29f9c50afe83.roa
Signing time:             Sun 17 Nov 2024 02:00:28 +0000
ROA not before:           Sun 17 Nov 2024 02:00:28 +0000
ROA not after:            Sat 15 Feb 2025 02:00:28 +0000
asID:                     32097
IP address blocks:        134.195.82.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e7:8f:6b:00:6b:fe:70:4e:5f:c8:c8:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d10dc068-f40b-4a85-97fb-2769f176bce3
        Validity
            Not Before: Nov 17 02:00:28 2024 GMT
            Not After : Feb 15 02:00:28 2025 GMT
        Subject: CN=61469447-b43d-4943-8148-7d24fed8c772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:1e:9d:cc:1b:0c:34:2f:c0:2f:4f:2f:2a:f8:
                    44:5b:06:83:27:77:f9:97:b7:e7:af:0c:92:ec:83:
                    92:ea:b9:33:49:a9:94:7a:e4:29:45:4e:fe:01:e1:
                    b0:f3:4b:41:2b:1e:59:f1:39:d4:e4:5e:b3:81:b2:
                    e0:d4:cc:d3:eb:ab:67:ee:de:7a:57:2b:7b:93:c0:
                    a9:ef:a8:62:a5:4d:f3:eb:b0:f2:db:c2:5d:a5:2f:
                    eb:e8:cb:5c:22:0f:fb:1e:7e:e6:2b:98:a0:39:f4:
                    8d:dc:f2:6e:66:3b:4d:67:33:63:d3:bd:1d:55:37:
                    1a:2e:b3:eb:14:25:84:fb:fc:72:31:1c:76:d2:39:
                    11:63:53:eb:29:3f:94:9f:6c:53:68:32:32:03:53:
                    63:57:99:1e:8c:21:07:8d:e9:30:55:4a:26:fe:a9:
                    fa:31:37:61:89:e7:16:63:f5:da:b5:0f:5a:ae:1f:
                    87:57:ac:0b:a9:29:c0:32:d4:55:2b:53:bb:fb:84:
                    dc:b0:1b:a2:a0:10:ae:a6:78:20:31:c0:ff:90:9d:
                    ff:bc:7a:97:74:2b:e3:2c:a4:9c:e3:47:22:29:d7:
                    39:ef:94:36:c7:2a:8d:f0:97:0e:ab:f5:8f:dc:31:
                    86:52:f0:9c:27:04:e4:83:5e:c9:a2:de:c5:23:ad:
                    6d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:57:11:29:75:2A:1E:67:D3:D7:4C:01:68:97:F2:39:18:86:7D:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d10dc068-f40b-4a85-97fb-2769f176bce3/f085a256-5253-3ee6-b2fb-29f9c50afe83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d10dc068-f40b-4a85-97fb-2769f176bce3/d10dc068-f40b-4a85-97fb-2769f176bce3.crl

            X509v3 Authority Key Identifier:
                keyid:80:C9:98:E5:C4:C9:11:22:09:55:B4:C2:FA:36:76:80:D4:D2:C2:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d10dc068-f40b-4a85-97fb-2769f176bce3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.195.82.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:de:e1:94:c5:22:8b:0d:ea:92:3b:9e:3f:66:98:7c:ba:e6:
         f9:97:56:e9:55:0a:f7:03:f9:f6:f2:ac:a1:f0:de:80:13:4c:
         85:95:7e:96:09:b2:44:a6:21:cd:20:30:07:53:70:73:10:7d:
         d1:95:96:48:8a:02:65:f1:f1:ef:cb:45:7e:c7:38:b5:a3:de:
         47:31:0f:b5:b5:4e:f9:80:97:3b:7a:cd:8c:6c:a2:3e:93:a2:
         68:6b:b6:9d:85:9d:2b:c0:96:8d:50:8a:8b:56:3c:2f:42:ce:
         1a:fc:d0:6a:d4:87:16:01:b0:9e:13:2d:8b:b5:98:f9:00:7b:
         48:41:c3:db:b6:28:cd:2e:00:ab:43:bf:23:82:44:c9:5f:d9:
         68:16:4f:99:7b:74:d7:b1:58:6c:d0:f0:0d:4a:73:89:01:01:
         d0:b7:76:91:b6:ca:40:4a:fd:0c:31:e2:89:c2:e6:4a:58:81:
         d2:6f:29:97:fe:68:cf:01:8d:64:bf:22:a3:44:4e:0d:79:3a:
         4e:20:9f:ae:33:6c:94:7a:4e:a1:92:86:94:c5:c4:7f:cf:6c:
         fd:32:11:c5:5d:9c:52:36:b0:aa:d4:8e:63:d7:cd:51:65:0a:
         e3:e8:14:dd:97:77:1c:fa:41:49:bf:c8:d2:02:c3:7a:4f:e8:
         0a:14:46:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----