Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4/ffaceebd-53a9-3d83-81cf-98d32b6c90db.roa
File:                     ffaceebd-53a9-3d83-81cf-98d32b6c90db.roa (raw, json)
Hash identifier:          8P6qdlMX34uGX6xoJguFg/bJ+j3C4iFZv/n9bfoMyBc=
Subject key identifier:   F4:08:13:34:C4:F3:9C:4C:43:73:6E:A7:A6:42:48:D2:0C:A5:8B:81
Certificate issuer:       /CN=1be7bcf5-0538-4a92-9aef-c460f15023b4
Certificate serial:       010D0C9F43285847F84F77D2110DCA5B7C43E0E0
Authority key identifier: 45:94:2A:B5:6A:9D:7E:36:8F:49:09:AC:A5:80:7B:74:DE:0D:B7:67
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4/ffaceebd-53a9-3d83-81cf-98d32b6c90db.roa
Signing time:             Sat 23 Nov 2024 02:00:28 +0000
ROA not before:           Sat 23 Nov 2024 02:00:28 +0000
ROA not after:            Fri 21 Feb 2025 02:00:28 +0000
asID:                     394144
IP address blocks:        23.152.56.0/24 maxlen: 24
                          2602:2cd::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f8:4f:77:d2:11:0d:ca:5b:7c:43:e0:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1be7bcf5-0538-4a92-9aef-c460f15023b4
        Validity
            Not Before: Nov 23 02:00:28 2024 GMT
            Not After : Feb 21 02:00:28 2025 GMT
        Subject: CN=1001e8be-fdef-4dcb-a90e-66993c7b4629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b4:2a:0e:35:d2:f8:44:76:ef:cd:58:af:8f:
                    38:50:3d:f3:93:0d:33:44:08:e0:3e:f4:44:bd:f6:
                    52:23:9a:09:69:46:03:bd:41:dc:4e:7b:ff:9c:62:
                    e9:f2:e5:c6:48:74:c7:a2:d3:bd:06:91:75:28:47:
                    b1:71:23:89:be:66:2d:ae:1b:2b:3e:01:a8:63:35:
                    e5:58:32:89:05:d1:aa:9a:5e:69:0f:95:e4:c5:df:
                    09:4e:48:f4:20:e6:1b:c4:a8:8b:35:90:fa:ae:ad:
                    e0:44:fd:5b:24:2d:84:e2:69:e1:5c:f0:71:06:1d:
                    7e:df:e2:65:31:45:9e:72:e0:42:a9:4b:b8:52:02:
                    c2:02:11:fa:88:cf:a3:77:3a:e8:8e:3e:89:51:b4:
                    62:79:4a:61:c2:77:8b:89:aa:0c:64:9c:48:f6:09:
                    82:ed:c8:61:06:30:33:d3:a2:46:0c:32:76:8c:d1:
                    9d:a4:78:f0:01:bb:78:91:d1:20:99:dd:70:5e:0b:
                    fa:74:b4:61:67:31:6f:ea:1b:60:3c:a8:c2:22:1a:
                    80:0d:5b:a8:ac:58:17:27:e3:73:64:c4:22:9f:ba:
                    4d:2e:fd:5f:fe:81:f7:d5:20:11:5c:4a:ae:9d:a5:
                    3b:b9:5b:44:47:69:2e:ae:24:9c:76:d6:e1:dd:bd:
                    62:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:08:13:34:C4:F3:9C:4C:43:73:6E:A7:A6:42:48:D2:0C:A5:8B:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4/ffaceebd-53a9-3d83-81cf-98d32b6c90db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4/1be7bcf5-0538-4a92-9aef-c460f15023b4.crl

            X509v3 Authority Key Identifier:
                keyid:45:94:2A:B5:6A:9D:7E:36:8F:49:09:AC:A5:80:7B:74:DE:0D:B7:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.152.56.0/24
                IPv6:
                  2602:2cd::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:bb:5f:81:75:76:43:0d:87:bb:3e:16:ee:73:81:5a:df:7a:
         1b:2f:49:3f:e2:9c:41:eb:f9:e6:11:20:23:11:2f:06:fa:2f:
         84:3e:7f:86:48:5f:26:e4:ab:cb:c8:46:a1:31:e5:cf:0c:fc:
         03:8d:49:75:73:f7:9a:60:94:65:bd:cf:fb:54:f4:47:fe:0b:
         29:64:0d:48:2b:d4:c0:b5:fd:87:c3:fc:87:2c:28:a1:f2:40:
         8d:72:23:c5:37:ed:c8:82:b7:1b:17:a9:cc:4e:28:31:95:90:
         38:e5:84:ba:d7:26:6e:1d:ff:8d:f0:00:8d:2c:f5:d5:6b:c7:
         16:2c:7c:52:2f:c8:ba:85:62:73:7b:06:be:dd:19:ed:3d:c8:
         6e:01:84:e7:1f:f8:bc:6d:19:e4:e9:01:64:df:24:93:a9:77:
         cb:b4:4a:02:ba:e2:53:62:79:3c:7f:d1:68:1e:cf:d7:6c:23:
         44:d5:af:ca:75:63:74:8e:5c:b6:e8:7a:34:bf:7c:ba:0f:42:
         a1:78:1f:5c:f9:ad:ed:e6:fd:3c:08:79:3b:b1:13:63:df:b0:
         90:8b:d3:b8:ab:99:64:cd:ca:56:67:29:b8:b8:2b:11:10:c5:
         00:4b:bc:1a:36:04:09:f9:91:95:bc:6e:e9:58:3a:bb:d8:7f:
         9d:f6:2e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----