Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/2cde349a-f723-3bc8-a70e-e03f9cdcd93b.roa
File:                     2cde349a-f723-3bc8-a70e-e03f9cdcd93b.roa (raw, json)
Hash identifier:          vuAlwQuHL3fIidb475NFZZY0MOX1TqeBUQA6Wc/YNQc=
Subject key identifier:   5A:0B:98:07:F4:3B:41:58:2C:0B:50:4F:94:49:64:F9:F2:1A:F4:BB
Certificate issuer:       /CN=ab98592a-7218-439c-b165-34810fd16d71
Certificate serial:       010D0C9F4328584800AF7D22E375ACFE4504FB80
Authority key identifier: 07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/2cde349a-f723-3bc8-a70e-e03f9cdcd93b.roa
Signing time:             Tue 26 Nov 2024 02:00:26 +0000
ROA not before:           Tue 26 Nov 2024 02:00:26 +0000
ROA not after:            Mon 24 Feb 2025 02:00:26 +0000
asID:                     3300
IP address blocks:        206.182.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:00:af:7d:22:e3:75:ac:fe:45:04:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab98592a-7218-439c-b165-34810fd16d71
        Validity
            Not Before: Nov 26 02:00:26 2024 GMT
            Not After : Feb 24 02:00:26 2025 GMT
        Subject: CN=3c175be6-1d9d-4c2f-84ec-fa905be45eeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:8c:3e:64:e3:2e:d7:86:22:95:57:38:e4:3a:
                    b4:02:e1:82:86:ae:6d:b8:b5:0a:23:4f:9d:bd:22:
                    9f:8a:55:5e:f2:d5:67:1b:31:64:ed:b2:42:e2:2e:
                    9e:f8:03:9d:81:09:02:95:ac:c7:37:80:8c:5a:81:
                    da:14:ba:67:e2:39:0f:15:f1:66:6f:cd:7b:d8:13:
                    bd:17:16:f7:cd:da:13:03:de:b8:52:0a:e0:55:c8:
                    ef:e4:a5:f7:76:6a:f8:10:6d:11:be:d6:53:45:31:
                    a4:ed:a2:f6:a4:35:3f:57:51:f9:c3:c5:55:d7:cf:
                    90:3b:06:75:27:46:41:9a:27:41:22:a6:4d:10:52:
                    c5:2a:bd:d7:56:b7:9c:26:2e:5d:08:79:27:08:52:
                    f3:46:9c:60:d5:0a:35:78:14:f4:da:c4:a1:3c:a3:
                    a5:48:ad:52:6d:95:09:d5:01:62:0c:51:d6:cd:66:
                    d2:d9:c9:06:a4:5a:db:66:26:e6:18:20:4c:db:ce:
                    e5:75:e9:5c:a1:19:b9:d4:98:a3:a1:a6:ba:c4:ba:
                    df:ab:6d:3f:3a:c0:58:c5:45:07:68:37:ea:29:65:
                    95:0c:93:bc:83:8b:c1:62:b4:53:ac:29:97:e1:8a:
                    a7:29:16:af:5d:84:83:de:4e:ae:41:b4:c5:26:85:
                    12:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:0B:98:07:F4:3B:41:58:2C:0B:50:4F:94:49:64:F9:F2:1A:F4:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/2cde349a-f723-3bc8-a70e-e03f9cdcd93b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl

            X509v3 Authority Key Identifier:
                keyid:07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.182.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:de:9f:9c:55:54:63:69:79:fa:2c:4c:27:ff:50:e2:72:4f:
         10:eb:a4:ce:ca:3b:d6:f8:cc:9a:08:66:39:4a:83:09:a4:66:
         1b:b0:b9:1b:77:5d:8a:cb:cc:c9:23:84:99:b7:4f:f3:df:a5:
         42:94:7b:2c:18:a6:a9:20:1d:e3:2d:da:dc:f1:45:35:e6:ca:
         fa:24:2f:15:ad:29:b8:33:e5:17:cb:54:c2:9f:de:3d:56:2f:
         89:36:47:ab:39:b0:b8:6a:94:1b:a5:e5:57:c3:7b:da:89:d3:
         98:5b:45:b5:91:88:b8:53:e0:c0:c9:67:3d:68:40:49:5d:7a:
         da:9f:3c:2a:54:70:2b:d6:bc:d3:57:d0:ef:52:4e:15:ba:37:
         ef:80:7c:ec:7d:83:da:6b:0d:da:2b:a5:5f:e0:a7:d6:7d:f4:
         c8:79:c1:82:a9:7e:51:f2:26:2b:29:c1:9d:6a:28:f3:f0:51:
         88:84:b9:b3:30:a0:b3:e8:b8:0d:22:70:72:aa:52:2e:a2:45:
         cd:01:12:05:4a:b2:50:95:a7:3e:20:48:b2:cc:5c:e4:de:b8:
         29:32:84:3d:54:a5:3b:f6:35:07:2e:87:1c:fe:0f:1e:00:65:
         58:09:a3:c5:dd:f8:1b:b7:ab:9a:ed:e1:65:c9:1b:44:59:4a:
         00:af:66:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----