Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/eccd20c3-7e65-31a8-9316-5650e14e7c43.roa
File:                     eccd20c3-7e65-31a8-9316-5650e14e7c43.roa (raw, json)
Hash identifier:          m69TdSWZEePEGorLeEcvE0FXY6V9+QvpcA8EDXcdH10=
Subject key identifier:   0F:9B:78:45:92:37:4F:88:64:7A:79:BC:0B:EA:73:FB:17:8E:CF:83
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858485F9AEB188C8E235680C52E80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/eccd20c3-7e65-31a8-9316-5650e14e7c43.roa
Signing time:             Mon 30 Dec 2024 02:00:39 +0000
ROA not before:           Mon 30 Dec 2024 02:00:39 +0000
ROA not after:            Sun 30 Mar 2025 01:00:39 +0000
asID:                     399155
IP address blocks:        204.74.120.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5f:9a:eb:18:8c:8e:23:56:80:c5:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Dec 30 02:00:39 2024 GMT
            Not After : Mar 30 01:00:39 2025 GMT
        Subject: CN=9f20925f-ce2e-401f-9358-728052db92ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f5:60:7c:2c:f5:31:fe:d6:83:8e:f9:c7:6e:
                    35:d6:87:d7:c9:22:de:39:7d:50:5d:b0:58:99:ff:
                    ba:a0:31:21:f2:65:ec:d0:a2:97:b5:92:19:8b:3d:
                    dc:84:36:3b:fc:53:1b:7e:fc:55:bd:31:3e:a0:ec:
                    a5:bf:f6:bb:b3:95:c0:1c:86:f2:ae:43:a9:a7:e5:
                    a2:aa:bb:ba:6f:e3:4e:60:9c:53:79:d7:78:92:ce:
                    96:f4:c9:da:69:4f:71:e1:24:07:f5:f5:84:3c:ff:
                    c4:12:47:23:63:4f:20:d0:0f:60:39:82:6a:c3:5d:
                    86:15:65:04:45:e2:51:54:93:cd:95:b1:13:37:88:
                    37:d5:e0:bf:ce:27:93:26:8b:02:ee:eb:99:eb:f5:
                    d5:e4:3a:d5:40:21:0a:40:bb:4e:c7:b0:a2:a0:b3:
                    da:c5:30:a4:35:d8:4b:d7:9e:a6:2f:bf:a1:3b:93:
                    29:4f:d1:73:80:fe:a3:fb:14:31:4e:f4:4b:63:86:
                    8a:21:34:b5:82:80:5f:af:f6:d1:c4:90:23:f2:4e:
                    98:15:e0:e0:f2:ce:5f:be:50:e4:83:1b:09:b9:ef:
                    6b:19:4b:97:10:41:7e:0f:ef:ca:8c:92:fc:33:96:
                    c4:ce:be:1d:9b:ac:89:76:97:3a:63:8d:45:a0:2c:
                    ec:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:9B:78:45:92:37:4F:88:64:7A:79:BC:0B:EA:73:FB:17:8E:CF:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/eccd20c3-7e65-31a8-9316-5650e14e7c43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.120.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:05:f6:e3:13:57:ac:5b:21:9b:37:7d:a5:bd:bb:65:ee:3f:
         cf:e4:1d:31:fb:e8:c8:0a:56:b1:1d:4b:d4:9f:08:f8:69:d2:
         25:82:67:12:ea:29:c2:5f:d0:01:0b:e1:d8:57:63:2a:75:f3:
         9b:99:b5:1a:1b:fd:f8:97:7a:cc:98:56:f2:f6:87:aa:38:5b:
         2f:6e:9e:fe:b7:f0:97:f0:23:b7:16:18:6e:6b:83:ef:04:9d:
         d3:b8:78:56:0e:c2:e4:cc:cd:91:72:77:63:06:a0:e0:c1:f9:
         8b:5f:51:89:e4:fa:ee:d5:0f:a4:13:e7:84:42:8e:74:dd:94:
         93:f8:ac:85:39:a2:2f:a1:2f:d1:d3:1d:fa:ea:b4:a1:ed:49:
         ad:15:cd:67:fc:43:90:49:d7:84:c4:85:b9:b6:8f:9c:98:f0:
         22:8f:23:c8:c7:d8:db:42:de:e8:ef:00:da:ef:a7:00:a0:01:
         59:e0:a3:4f:d9:e3:b1:4b:42:4f:fc:88:73:25:65:50:f3:09:
         cf:4e:27:08:19:45:2c:8d:92:1c:44:db:ee:ce:e3:74:23:67:
         8e:f1:a9:05:35:64:b1:e7:6a:73:09:aa:ba:87:b8:91:1a:ee:
         04:22:f7:e0:65:17:29:68:83:e3:04:e1:e6:a5:b8:8b:f8:da:
         55:f8:11:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----