Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/93579c5a-1fbb-393d-942f-b4c14c01265d.roa
File:                     93579c5a-1fbb-393d-942f-b4c14c01265d.roa (raw, json)
Hash identifier:          pa3qSx2OSih7hx4M4dLkN4G6jTg5Bx2klVT9B58fVM8=
Subject key identifier:   45:65:46:A4:13:74:20:D3:3B:C9:A5:68:05:B4:C1:DF:48:DD:71:19
Certificate issuer:       /CN=2dbf604f-24b0-426e-809d-e65b08be5d50
Certificate serial:       010D0C9F43285847EBBF79ABA7254A41EA8A1880
Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/93579c5a-1fbb-393d-942f-b4c14c01265d.roa
Signing time:             Mon 18 Nov 2024 14:00:40 +0000
ROA not before:           Mon 18 Nov 2024 14:00:40 +0000
ROA not after:            Sun 16 Feb 2025 14:00:40 +0000
asID:                     16433
IP address blocks:        72.22.112.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:eb:bf:79:ab:a7:25:4a:41:ea:8a:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50
        Validity
            Not Before: Nov 18 14:00:40 2024 GMT
            Not After : Feb 16 14:00:40 2025 GMT
        Subject: CN=5bd14598-1f7f-407d-bdf1-06e56c981071
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ca:3e:a0:ff:00:81:d9:36:fc:49:2e:f8:d8:
                    65:a8:7c:f8:d5:0d:35:e7:18:20:a5:83:27:f8:bd:
                    77:e2:04:b9:2b:d3:0b:1d:17:04:b0:63:7a:01:d5:
                    97:5b:bd:72:3e:3e:73:70:52:e2:b0:73:a5:ec:45:
                    c6:9b:d1:83:22:83:84:9f:64:66:bf:5e:81:3d:b0:
                    46:4e:96:4b:01:19:6e:fe:a6:11:16:0b:b6:8d:66:
                    98:cc:f0:69:f2:e0:18:93:e5:6e:a2:79:04:06:9f:
                    0d:cf:f2:2f:60:79:22:32:92:60:48:19:89:0a:b6:
                    f9:66:87:c7:a5:02:9a:73:48:df:a1:c4:bf:80:1e:
                    c4:b5:ca:bb:b0:cc:3b:e3:3e:39:d1:45:20:3a:ce:
                    9c:80:aa:6d:3d:f1:9a:f6:01:63:75:2c:0b:05:d3:
                    d3:59:14:3d:c8:54:82:ac:76:43:5b:d9:8a:9e:e2:
                    e2:34:23:57:cc:75:26:1e:10:bb:5f:1f:00:41:e3:
                    e4:8c:08:57:14:de:25:4d:e4:01:d3:b1:6b:db:ad:
                    cf:14:e4:6d:58:97:04:61:9e:b1:e3:64:f1:53:24:
                    42:aa:dd:1b:62:95:71:d5:fa:22:46:18:07:d9:4d:
                    b0:67:ae:b2:89:5b:87:af:7f:18:9c:1e:ba:6c:d3:
                    f5:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:65:46:A4:13:74:20:D3:3B:C9:A5:68:05:B4:C1:DF:48:DD:71:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/93579c5a-1fbb-393d-942f-b4c14c01265d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl

            X509v3 Authority Key Identifier:
                keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.22.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:43:65:6f:6e:b4:d1:ef:11:83:f7:69:00:cf:f1:18:ab:4f:
         86:42:94:d5:81:d6:c4:ef:72:58:fe:3b:5f:a2:ff:ef:8b:8a:
         e8:f4:a2:f4:cf:62:bc:c4:95:d2:5e:1c:9b:8e:d6:8a:c2:7e:
         d6:ec:94:2a:cc:bd:02:f1:dd:52:5a:0e:85:8f:6d:c3:40:53:
         47:20:5b:65:08:05:95:d3:5f:b9:5f:0e:f3:f8:39:ad:8a:e5:
         c3:db:6d:84:d1:2f:9f:7c:c6:16:7e:70:40:d6:15:47:ec:18:
         60:27:42:55:f6:bd:1f:91:21:65:b8:fb:27:b5:c2:07:01:6e:
         61:21:8b:3b:23:87:41:99:5c:ca:69:04:a7:66:70:8d:00:83:
         a4:0d:9c:01:21:14:fe:ed:0d:0f:b9:6c:ea:3b:a8:d3:a4:40:
         b8:ca:2a:2b:52:c8:8d:69:72:e8:f3:34:ac:02:64:0b:4e:fe:
         95:ab:1a:e7:1a:42:85:f4:24:b3:b2:ed:e9:7c:6b:b4:be:ec:
         03:ad:70:bd:8a:7a:40:8a:04:63:ec:a9:9f:2b:e4:6f:94:a1:
         ee:5f:9e:27:67:d5:33:e6:3e:82:73:f2:b8:fe:b2:56:32:79:
         98:1a:20:c9:f2:cb:b3:88:9a:5b:61:e8:03:8b:67:67:f8:c8:
         a5:2f:32:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----