Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/c3ea3ade-66e6-3880-8f81-383b39414b28.roa
File:                     c3ea3ade-66e6-3880-8f81-383b39414b28.roa (raw, json)
Hash identifier:          LLJ7ejfKVnro7vx00VOnKa18+OziQ1aV34jwdiJPF+Y=
Subject key identifier:   77:56:BA:8F:AB:E4:04:E9:1F:FC:0C:23:2A:A4:A7:66:A4:5D:40:3E
Certificate issuer:       /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
Certificate serial:       010D0C9F4328584838854A5C9F8312ED10459B40
Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/c3ea3ade-66e6-3880-8f81-383b39414b28.roa
Signing time:             Mon 16 Dec 2024 02:00:39 +0000
ROA not before:           Mon 16 Dec 2024 02:00:39 +0000
ROA not after:            Sun 16 Mar 2025 01:00:39 +0000
asID:                     14297
IP address blocks:        206.201.16.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:38:85:4a:5c:9f:83:12:ed:10:45:9b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
        Validity
            Not Before: Dec 16 02:00:39 2024 GMT
            Not After : Mar 16 01:00:39 2025 GMT
        Subject: CN=8cab20d2-8493-47f1-8c0a-8af572bbbcb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:98:84:95:cb:f4:ca:ca:57:4d:ca:c6:ec:80:
                    58:09:e7:b6:ac:ec:fd:30:d0:c4:32:39:08:75:3e:
                    88:8c:6f:ef:ca:13:56:5c:ee:2f:6a:bd:f0:bf:a8:
                    f5:05:84:a3:53:37:7d:10:5d:eb:e6:d0:8f:3b:4b:
                    24:c1:6a:17:ff:df:f5:ca:5b:62:fc:d0:06:a5:78:
                    1f:c4:37:5e:5a:8c:94:a8:e8:8d:a8:81:a8:78:0e:
                    d6:2e:2b:ec:ef:e9:ac:73:cf:0d:67:b5:9d:35:23:
                    4f:32:2f:11:39:48:60:b9:af:38:f3:93:b6:2d:c8:
                    ce:26:57:9b:59:ae:4e:19:2b:f2:33:71:59:57:5d:
                    86:e3:e3:b1:69:24:ac:c7:0c:19:bc:e9:6d:f7:23:
                    a4:12:f5:c6:7c:99:c4:0c:99:86:25:6e:9d:d6:8b:
                    98:c1:f5:3e:4c:c3:99:da:6c:5a:c2:64:0e:84:e6:
                    7e:29:08:cd:e1:34:03:89:53:ca:ab:d9:6c:44:e6:
                    a8:7e:1b:c3:27:16:18:13:d1:38:1b:a8:32:8f:c0:
                    ff:69:8f:a1:dc:4a:0f:28:75:83:7c:b1:64:f0:b3:
                    60:01:0e:3c:d3:5b:98:fb:bf:1d:2f:38:2f:9e:a7:
                    2b:09:16:0d:f5:1b:eb:71:10:8a:11:80:ae:48:10:
                    75:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:56:BA:8F:AB:E4:04:E9:1F:FC:0C:23:2A:A4:A7:66:A4:5D:40:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/c3ea3ade-66e6-3880-8f81-383b39414b28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl

            X509v3 Authority Key Identifier:
                keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.201.16.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:80:93:da:dc:63:94:19:ea:ad:c5:78:29:96:22:70:ae:90:
         36:e9:31:b9:44:a1:6d:52:30:c9:a7:a7:c3:fe:f8:85:5d:d7:
         37:61:55:f2:e9:d7:2e:d9:7e:b9:91:c3:2f:d4:7e:72:6c:f3:
         0c:0a:94:fe:44:15:21:4b:07:f6:e1:20:c5:9e:c9:ab:bc:50:
         19:85:29:a3:07:2b:7e:f6:1b:79:03:41:75:91:cd:11:78:95:
         75:db:50:9d:15:85:be:09:e4:88:66:67:e8:24:b5:79:d4:a2:
         28:4b:ee:3c:35:d7:e1:fa:20:3e:c1:c0:d3:64:47:82:19:0f:
         73:72:0a:09:9e:1f:3d:5c:d4:27:4c:4f:ba:8e:e1:60:f8:78:
         ae:bd:63:aa:86:61:dd:0e:39:5f:a8:db:e5:b9:1b:65:e8:39:
         af:4d:85:ab:e6:c7:11:e3:4c:d4:d8:19:e7:17:57:10:81:02:
         ad:7b:4f:34:2a:e0:fe:31:17:86:0b:25:21:f9:dd:b9:e7:d8:
         1b:81:d1:79:4c:05:6f:52:e9:8e:fa:e7:28:cd:18:45:6e:de:
         55:a0:bc:eb:f2:6b:57:c0:c7:80:6b:93:d5:00:56:bf:4d:d5:
         67:35:85:4e:12:64:8f:34:94:77:19:25:65:cb:b1:e7:6b:46:
         0c:46:cb:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----