Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5ffb160-7d08-4282-966a-137e7328c1b0/ecefeada-cbdb-3f8a-9abe-50ea35a728f3.roa
File:                     ecefeada-cbdb-3f8a-9abe-50ea35a728f3.roa (raw, json)
Hash identifier:          GNecImC7GJA3Ix/53VECKnOBd2MpUvPfzmCTQJp/cJw=
Subject key identifier:   41:A9:BE:71:52:55:A0:B0:74:6F:35:EE:70:A4:44:90:6B:35:DF:73
Certificate issuer:       /CN=a5ffb160-7d08-4282-966a-137e7328c1b0
Certificate serial:       010D0C9F43285847EFEF8B474ECB6B303CBFF080
Authority key identifier: 3C:2E:40:AC:19:47:1C:23:8C:42:39:6E:D3:35:EC:B6:BB:E5:D6:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5ffb160-7d08-4282-966a-137e7328c1b0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5ffb160-7d08-4282-966a-137e7328c1b0/ecefeada-cbdb-3f8a-9abe-50ea35a728f3.roa
Signing time:             Wed 20 Nov 2024 02:00:39 +0000
ROA not before:           Wed 20 Nov 2024 02:00:39 +0000
ROA not after:            Tue 18 Feb 2025 02:00:39 +0000
asID:                     63330
IP address blocks:        104.222.64.0/20 maxlen: 24
                          2605:e580::/32 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ef:ef:8b:47:4e:cb:6b:30:3c:bf:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5ffb160-7d08-4282-966a-137e7328c1b0
        Validity
            Not Before: Nov 20 02:00:39 2024 GMT
            Not After : Feb 18 02:00:39 2025 GMT
        Subject: CN=b9699fe8-f9dc-478a-879a-991333a80b4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:13:e3:bf:bc:3e:55:ec:75:82:bb:18:55:44:
                    58:63:2f:dd:23:f8:86:85:da:cc:4e:a9:50:3e:96:
                    cd:e1:a1:77:9b:5d:a6:b5:9e:72:e3:de:15:10:6d:
                    40:f7:96:36:b7:64:8d:65:af:32:71:1c:9c:f5:4e:
                    99:bf:18:b5:36:e2:24:26:ec:34:8e:de:c3:54:94:
                    b9:30:e6:87:a7:8d:64:85:ee:82:66:62:5e:e2:24:
                    b5:14:a0:0f:27:1b:50:88:61:a8:ee:d5:3d:fd:1f:
                    20:4f:b4:af:11:00:07:92:c2:79:21:88:a5:76:02:
                    cd:40:1f:74:69:4b:2a:a7:bf:f8:75:bc:ec:cd:1c:
                    fc:fb:bd:87:09:cd:ef:c1:c6:2d:57:77:f6:26:35:
                    61:50:aa:10:d1:bb:cc:8a:96:8e:70:6a:1d:29:1c:
                    c3:dd:c2:d2:9c:24:c8:f5:23:c9:a4:92:01:34:51:
                    60:e7:ac:9f:f6:11:40:99:29:76:dd:67:74:20:60:
                    e6:2a:47:1f:8d:77:a4:8a:a2:72:0f:0f:68:1b:c0:
                    ed:10:e0:e5:c8:04:ec:e2:bd:31:93:4a:cd:38:3c:
                    ec:f6:f3:2f:12:fd:51:b5:0b:fa:0a:a9:85:bb:a1:
                    2c:e0:e5:b8:6a:b5:75:08:45:fc:d0:ce:04:eb:b7:
                    45:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:A9:BE:71:52:55:A0:B0:74:6F:35:EE:70:A4:44:90:6B:35:DF:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5ffb160-7d08-4282-966a-137e7328c1b0/ecefeada-cbdb-3f8a-9abe-50ea35a728f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5ffb160-7d08-4282-966a-137e7328c1b0/a5ffb160-7d08-4282-966a-137e7328c1b0.crl

            X509v3 Authority Key Identifier:
                keyid:3C:2E:40:AC:19:47:1C:23:8C:42:39:6E:D3:35:EC:B6:BB:E5:D6:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5ffb160-7d08-4282-966a-137e7328c1b0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.222.64.0/20
                IPv6:
                  2605:e580::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:25:0f:c8:34:0f:3a:6f:ff:26:83:fa:b2:07:0e:c6:90:07:
         f8:49:2e:bf:ee:72:bf:be:2a:10:29:0b:2d:f8:ed:9e:d2:f7:
         c5:68:7e:4d:fd:b3:9f:66:7a:f5:3e:96:18:47:68:f1:76:a1:
         b6:21:6d:10:c2:c6:11:52:1a:a4:8e:f7:f2:61:c5:90:d1:55:
         69:64:cd:cb:b0:56:26:49:7e:e8:85:45:6d:59:93:32:84:21:
         ab:3a:3b:d9:59:a6:0e:2a:13:c7:53:60:b7:43:fd:a1:fe:cb:
         16:b4:4e:c8:fb:99:dc:ac:37:9d:cd:3a:e3:90:62:0f:d8:3d:
         fb:96:f6:06:ee:b4:b9:99:fc:bb:9e:ef:d7:fa:99:a1:01:56:
         ea:e1:79:02:5c:52:97:71:23:80:8e:5a:54:24:c2:09:cd:79:
         ab:3a:e2:68:a0:02:e4:98:36:5b:cd:f3:47:3c:08:da:63:bb:
         75:a2:10:ca:dc:63:3f:69:41:da:03:93:06:3f:b6:ff:10:20:
         a2:b5:18:99:60:e3:b3:67:71:8d:aa:c5:b7:59:d4:e4:ce:b6:
         45:ad:8d:d5:86:71:b0:5b:30:6c:f1:fe:0c:01:82:8c:52:c8:
         32:34:0f:cd:f4:bf:a4:89:6b:3d:1f:a3:f5:d5:16:c4:14:55:
         72:b6:76:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----