Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/842ce387-8918-38c2-8a38-4d294a77d361.roa
File:                     842ce387-8918-38c2-8a38-4d294a77d361.roa (raw, json)
Hash identifier:          wPi53dRLjy47qaZtsWO0Nz+OZLfBbKZQo/YD+SYELTo=
Subject key identifier:   03:CA:16:EB:3C:7E:9D:C3:3B:0B:0D:02:C7:56:58:1D:BE:E1:5C:B2
Certificate issuer:       /CN=a68ef886-c437-4b77-8d56-b917b6150d9a
Certificate serial:       010D0C9F4328584838855A55B9FD59050C963980
Authority key identifier: 7C:09:E8:AF:EE:91:79:F5:08:2C:B7:C8:0A:3C:38:63:D4:E2:1C:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/842ce387-8918-38c2-8a38-4d294a77d361.roa
Signing time:             Mon 16 Dec 2024 02:00:39 +0000
ROA not before:           Mon 16 Dec 2024 02:00:39 +0000
ROA not after:            Sun 16 Mar 2025 01:00:39 +0000
asID:                     91
IP address blocks:        146.8.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:38:85:5a:55:b9:fd:59:05:0c:96:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a68ef886-c437-4b77-8d56-b917b6150d9a
        Validity
            Not Before: Dec 16 02:00:39 2024 GMT
            Not After : Mar 16 01:00:39 2025 GMT
        Subject: CN=39a647c7-a984-4037-a022-4f78d3cf9578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:fe:bf:71:5b:69:ac:bc:fd:77:b1:98:92:cd:
                    64:b7:6e:b4:3a:39:3c:25:05:57:c8:23:8d:a3:96:
                    17:85:4f:dd:95:f6:be:fc:f3:66:0b:74:d2:21:23:
                    7d:79:c8:40:97:f4:6b:49:45:7b:f8:86:50:10:69:
                    a1:d4:33:09:b8:b6:1f:df:3a:ab:eb:1f:e4:76:09:
                    f7:a1:f2:b4:7f:b3:16:ef:51:00:83:17:c9:8a:9b:
                    47:3e:98:2d:ad:47:a0:86:55:0c:0f:ce:80:47:94:
                    e9:2c:ef:b0:6e:94:b9:b6:64:88:a5:d6:9b:39:60:
                    bb:be:d4:78:99:28:51:32:05:5f:1f:60:70:16:d8:
                    ed:a6:43:5e:c4:40:f7:0f:70:7d:68:e3:ea:8f:48:
                    98:5e:fb:1b:27:5d:86:52:4d:96:da:0c:53:6d:56:
                    fe:08:2e:d1:c4:16:87:d7:73:70:71:20:77:c6:87:
                    fa:93:92:b6:3b:0e:fa:ea:85:5c:8d:25:a5:63:41:
                    a8:a1:68:65:24:fc:d1:79:1f:ec:da:19:a9:81:06:
                    d1:e2:fc:42:12:85:68:3f:c2:90:78:bf:90:8f:cd:
                    e9:b1:22:e1:25:f3:8a:52:99:8a:00:cf:f1:38:4d:
                    a3:c0:48:ce:94:66:db:3b:20:4a:cf:3a:65:c6:b8:
                    10:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:CA:16:EB:3C:7E:9D:C3:3B:0B:0D:02:C7:56:58:1D:BE:E1:5C:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/842ce387-8918-38c2-8a38-4d294a77d361.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.crl

            X509v3 Authority Key Identifier:
                keyid:7C:09:E8:AF:EE:91:79:F5:08:2C:B7:C8:0A:3C:38:63:D4:E2:1C:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.8.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:b8:cd:13:51:f9:55:f7:3f:4c:45:9e:ca:46:56:cd:63:26:
         f6:de:ab:18:6f:0b:5a:09:45:24:17:e8:5d:dd:36:d4:97:39:
         f5:28:57:03:07:b9:a8:19:1a:77:55:22:af:cb:6c:f7:c0:61:
         7c:ba:f7:2f:e1:bb:95:36:c3:1c:7f:37:12:4c:3e:a4:14:95:
         ab:df:8f:3e:15:87:5b:c1:67:73:03:57:78:2c:fc:42:64:72:
         90:f5:00:65:34:61:28:9b:1e:0d:aa:4f:0e:df:2b:dc:3b:b6:
         ff:73:77:0c:d4:8a:5f:ac:80:75:ad:ce:18:d3:d6:72:93:a2:
         43:1e:c9:1e:ed:64:78:ea:1b:ce:d4:0b:9e:b2:ea:84:34:4b:
         15:c4:c3:8c:d8:dc:0e:9b:84:cd:75:e3:1a:81:fe:61:87:b0:
         bd:b8:6e:72:d5:a9:f1:47:18:52:8a:40:7e:4d:12:9a:7f:b6:
         ce:8b:da:13:c3:00:71:31:85:00:03:49:79:35:87:70:7d:40:
         18:0a:8a:a6:6c:d2:1b:13:b9:68:5d:ca:2b:ff:5b:2a:9a:42:
         44:c9:d0:b5:5b:2a:70:5e:25:48:1b:6d:97:0d:3f:77:07:64:
         ee:30:00:37:ea:39:8d:93:11:a3:ac:0d:b6:0d:85:0a:6a:21:
         4a:f4:30:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----