Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/07516521-ca1d-4a06-bb11-289a5545b790/4aa5123c-6460-370b-961f-4cb42fed2c48.roa
File:                     4aa5123c-6460-370b-961f-4cb42fed2c48.roa (raw, json)
Hash identifier:          CSb+btQCkWmhAPGWQdNTEUWv6CNo44mEMcbQJugFV/Q=
Subject key identifier:   3A:8C:9E:90:54:6F:82:02:E8:7F:C6:63:98:D4:ED:0D:8D:B7:BE:58
Certificate issuer:       /CN=07516521-ca1d-4a06-bb11-289a5545b790
Certificate serial:       010D0C9F43285848090FBADCC46B78A59755C380
Authority key identifier: 11:D6:05:C3:5D:E0:5F:3A:30:EB:26:2C:A7:6A:62:75:4E:4C:CD:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/07516521-ca1d-4a06-bb11-289a5545b790.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/07516521-ca1d-4a06-bb11-289a5545b790/4aa5123c-6460-370b-961f-4cb42fed2c48.roa
Signing time:             Fri 29 Nov 2024 02:00:39 +0000
ROA not before:           Fri 29 Nov 2024 02:00:39 +0000
ROA not after:            Thu 27 Feb 2025 02:00:39 +0000
asID:                     15040
IP address blocks:        206.183.158.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:09:0f:ba:dc:c4:6b:78:a5:97:55:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07516521-ca1d-4a06-bb11-289a5545b790
        Validity
            Not Before: Nov 29 02:00:39 2024 GMT
            Not After : Feb 27 02:00:39 2025 GMT
        Subject: CN=dbb347bc-8957-4ed4-aab1-55a52f54e0e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ea:fd:25:cc:28:d9:2f:4b:4a:ce:10:5d:41:
                    ad:23:ed:87:c8:39:e8:7c:ef:74:c5:b9:ad:62:92:
                    23:ac:5f:1e:a0:ae:ef:60:a6:80:ef:07:d6:64:13:
                    e1:43:86:75:73:65:9d:42:0e:fb:a5:34:14:07:30:
                    59:c1:02:48:b2:b8:13:51:fc:ab:21:3e:09:be:96:
                    3c:31:55:e3:34:47:9f:f5:c2:62:ad:5d:09:c5:44:
                    06:91:19:10:43:81:d5:fb:f8:62:e1:d7:b8:64:d9:
                    78:59:99:0f:aa:e9:f9:2b:93:bf:cd:f0:bd:be:9e:
                    3a:a9:71:83:aa:1f:a8:fc:4a:cc:a3:41:8b:b2:2a:
                    95:97:e0:01:64:f1:9e:88:50:e6:84:53:56:c2:73:
                    c4:2e:1e:40:27:68:c9:e1:06:b7:da:6a:bd:31:e3:
                    c6:e9:14:3e:27:99:74:ae:c3:ec:af:18:33:87:56:
                    3d:56:b1:1c:da:f8:c6:9c:1c:52:48:f4:6b:31:96:
                    00:68:18:26:fb:02:df:36:78:6f:16:9f:b7:d2:04:
                    17:96:f1:7b:73:4b:06:79:3c:bd:66:f2:7e:78:36:
                    76:c4:58:f8:b3:96:63:3e:97:15:cf:e3:e0:4c:3d:
                    74:b4:d3:8d:c1:d2:7e:46:08:aa:da:69:ff:c2:47:
                    5a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:8C:9E:90:54:6F:82:02:E8:7F:C6:63:98:D4:ED:0D:8D:B7:BE:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/07516521-ca1d-4a06-bb11-289a5545b790/4aa5123c-6460-370b-961f-4cb42fed2c48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/07516521-ca1d-4a06-bb11-289a5545b790/07516521-ca1d-4a06-bb11-289a5545b790.crl

            X509v3 Authority Key Identifier:
                keyid:11:D6:05:C3:5D:E0:5F:3A:30:EB:26:2C:A7:6A:62:75:4E:4C:CD:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/07516521-ca1d-4a06-bb11-289a5545b790.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.183.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:46:2b:e0:17:40:a7:8c:c7:1b:32:84:60:f2:8f:89:88:05:
         4e:3f:19:01:63:13:42:de:d6:f8:0f:c7:44:4d:53:ee:9f:d8:
         45:71:72:da:33:3f:d2:5d:0e:1e:a2:51:96:e1:a7:12:01:b1:
         33:98:89:ed:0a:2f:58:b4:18:f6:df:76:5f:2f:db:c3:fd:0b:
         da:b4:88:bd:6e:fa:e2:db:07:2d:d9:92:80:48:39:d1:ab:39:
         a4:25:08:fa:b1:50:f5:7c:b1:0a:39:6b:b9:0f:35:76:10:7c:
         ed:7c:3f:6d:e1:98:02:bd:12:5f:a6:96:4e:9a:70:4f:6a:53:
         78:8f:21:8e:59:a4:fb:cb:fc:bb:43:80:a5:d7:61:7e:7e:b3:
         46:7d:f0:85:65:a6:bc:a4:93:9f:db:cd:4e:1c:a4:ed:6e:6c:
         f8:54:f9:61:c2:b0:eb:3d:b3:3c:28:ea:2a:e2:3e:ef:18:be:
         a2:5e:d9:1d:55:2c:f8:2f:79:c4:9d:66:4e:89:5f:c5:93:2a:
         61:c6:aa:1d:99:42:6b:c5:51:a3:59:1a:74:c4:f6:4f:e8:51:
         1c:a7:b2:18:4d:53:d9:ee:2e:59:d5:2c:ee:69:b3:e2:49:0a:
         ca:38:96:f6:a5:f9:11:c5:1f:73:ab:81:88:a7:e6:1e:25:9b:
         83:76:b7:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----