Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/9a7d3b35-cfd1-3e1b-b8aa-ca281b83412d.roa
File:                     9a7d3b35-cfd1-3e1b-b8aa-ca281b83412d.roa (raw, json)
Hash identifier:          o6+vnbM9rgxFi47M95t0Fot9IZhNHUGAzstpbGVhNpQ=
Subject key identifier:   92:06:26:98:E3:56:A0:2F:28:85:CF:05:E3:63:33:12:8A:03:D0:19
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F43285847FC7F9F8AE27990058E160540
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/9a7d3b35-cfd1-3e1b-b8aa-ca281b83412d.roa
Signing time:             Sun 24 Nov 2024 14:00:39 +0000
ROA not before:           Sun 24 Nov 2024 14:00:39 +0000
ROA not after:            Sat 22 Feb 2025 14:00:39 +0000
asID:                     54113
IP address blocks:        157.52.64.224/28 maxlen: 28
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:fc:7f:9f:8a:e2:79:90:05:8e:16:05:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Nov 24 14:00:39 2024 GMT
            Not After : Feb 22 14:00:39 2025 GMT
        Subject: CN=e6c260eb-c4a6-4ef9-8bf3-35db56422e7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:5c:7f:d0:df:b4:10:3e:fd:8c:9a:4e:04:ed:
                    fc:00:dd:38:e3:0e:8a:03:18:0d:df:8b:16:b4:35:
                    b3:4a:8a:73:fe:7e:e4:88:78:db:79:c3:67:00:4d:
                    15:5c:cc:31:49:e6:34:e6:ba:62:2d:71:b2:17:eb:
                    5c:91:4b:f2:ba:95:8b:ea:4a:5a:34:14:9c:27:ae:
                    22:ea:b9:52:30:31:49:4b:79:72:96:a8:bf:a3:a3:
                    dd:95:7d:bd:2b:d5:10:ea:ee:31:ef:1f:59:13:e5:
                    86:89:3c:90:6a:92:65:82:8a:df:cb:9c:d9:f0:ca:
                    34:12:a4:4e:c3:58:70:fd:81:c1:94:79:52:66:ba:
                    6d:43:90:6e:7b:42:7d:53:b5:1a:ba:67:f8:a1:34:
                    03:4d:81:4d:e9:09:31:96:c6:b8:74:88:89:7b:0b:
                    e5:ab:f2:53:d2:bc:84:1d:0c:e8:5a:67:58:d3:1b:
                    23:51:ea:9b:a3:90:1b:83:bc:1c:67:a3:bf:c6:d1:
                    80:21:53:85:0c:37:c1:77:c1:66:21:a0:fe:31:2d:
                    88:25:5c:98:3b:9c:0c:39:36:60:07:57:0f:c8:df:
                    84:d5:8b:84:48:4c:c2:b2:ff:4b:95:5c:12:b9:9b:
                    ba:c1:8b:5d:ad:f0:3e:cb:20:c4:2c:29:d1:2d:94:
                    6b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:06:26:98:E3:56:A0:2F:28:85:CF:05:E3:63:33:12:8A:03:D0:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/9a7d3b35-cfd1-3e1b-b8aa-ca281b83412d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.52.64.224/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:3b:fe:2a:37:3f:58:50:13:bd:2e:08:83:f6:59:3f:05:af:
         e8:76:15:57:dc:be:eb:fc:e4:ec:c9:3d:fb:79:67:b9:4c:15:
         da:68:50:b9:a1:93:0e:6e:52:09:cf:3a:43:3a:e1:fb:f9:64:
         60:95:e0:cd:48:ec:ae:53:85:8b:be:59:40:ea:a0:1f:36:5d:
         e6:61:00:ed:2d:31:ee:b2:e1:77:9d:1c:a3:af:2a:c9:0e:f7:
         aa:e4:0a:20:d2:bc:9d:5b:8c:d9:7c:39:13:74:d9:74:9e:9d:
         70:51:2e:58:0a:fb:24:ad:4c:df:f8:c7:4e:0b:5e:30:9f:79:
         7b:6b:08:2b:e9:54:9a:cc:55:f5:3d:e3:11:ef:de:ba:b4:25:
         8a:35:0b:bc:37:92:a4:f9:16:23:6e:b9:4b:11:95:1e:2b:a6:
         3c:68:00:79:1e:bf:c9:4d:fc:ac:ea:29:df:6c:ed:4c:70:fe:
         63:b3:1b:56:61:2a:e5:43:75:ec:4d:cc:1d:ce:7b:c3:53:0b:
         5d:fa:34:b8:e6:9a:ef:84:df:53:21:14:47:39:4c:99:b6:25:
         93:2c:d4:5c:b0:bf:0a:c5:21:63:3e:12:fe:3b:14:e5:85:cc:
         2f:7a:50:c1:7d:ca:72:ce:a8:8c:42:75:05:95:e7:44:9f:d6:
         50:51:f4:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----