Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/d6030c72-d137-34d3-8372-1abef2623fce.roa
File:                     d6030c72-d137-34d3-8372-1abef2623fce.roa (raw, json)
Hash identifier:          C1pePrqEozicQifJYFnhaVrSX+ezZQ4chnJvpFNuS7s=
Subject key identifier:   1D:3F:CD:7F:E6:BB:25:C5:A8:CA:22:97:1A:5B:3F:6B:E7:01:28:AC
Certificate issuer:       /CN=d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e
Certificate serial:       010D0C9F432858482EC00877405F8ACFF01529C0
Authority key identifier: 2D:22:70:71:EA:41:40:16:CE:85:45:3A:86:52:BE:FE:08:5C:C9:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/d6030c72-d137-34d3-8372-1abef2623fce.roa
Signing time:             Thu 12 Dec 2024 14:00:51 +0000
ROA not before:           Thu 12 Dec 2024 14:00:51 +0000
ROA not after:            Wed 12 Mar 2025 13:00:51 +0000
asID:                     26564
IP address blocks:        167.206.190.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2e:c0:08:77:40:5f:8a:cf:f0:15:29:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e
        Validity
            Not Before: Dec 12 14:00:51 2024 GMT
            Not After : Mar 12 13:00:51 2025 GMT
        Subject: CN=d5d09987-44f4-49f6-ac99-ae2bf4a0be4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3a:15:0e:14:9e:a0:aa:e6:9e:44:c6:e7:13:
                    f7:19:9b:8e:9a:f4:af:f2:f2:55:17:b0:84:66:3a:
                    80:3a:eb:79:46:8e:44:82:66:2a:6e:88:92:8f:f8:
                    b3:49:28:26:7b:de:10:ef:7f:4e:30:03:ca:05:6d:
                    58:a9:c6:fd:46:54:40:42:2a:42:a6:55:4e:12:bc:
                    36:d9:c2:83:60:ab:a4:ee:b1:2d:26:b8:f9:2b:18:
                    8e:a7:94:c9:d5:9c:c4:95:08:44:65:a3:70:54:70:
                    99:2d:ac:fe:fb:78:86:48:fa:fb:b1:86:3a:d3:9d:
                    f3:3f:fa:1d:a3:1c:a0:5a:c3:5b:99:a7:7f:db:21:
                    a7:fa:69:8e:f7:a3:52:34:63:6a:de:7b:f2:b2:6a:
                    43:71:f1:94:90:dc:d0:0b:ac:4f:48:f8:08:66:f1:
                    c9:5d:8f:d6:bb:f0:ad:16:b2:e3:57:fb:e3:bd:ba:
                    3a:96:a2:e9:26:07:d0:88:c8:d8:9b:92:b0:d5:9f:
                    ae:f0:ea:aa:29:23:c0:a5:1e:67:b4:36:3e:50:ba:
                    0e:a5:d4:6d:bd:f2:92:e6:61:b3:af:30:89:05:f1:
                    73:9d:e8:20:85:f3:25:5a:36:89:a5:75:16:b3:3c:
                    cc:5c:1b:bd:77:4d:0d:e8:71:af:3f:e7:4e:28:4e:
                    b9:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:3F:CD:7F:E6:BB:25:C5:A8:CA:22:97:1A:5B:3F:6B:E7:01:28:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/d6030c72-d137-34d3-8372-1abef2623fce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.crl

            X509v3 Authority Key Identifier:
                keyid:2D:22:70:71:EA:41:40:16:CE:85:45:3A:86:52:BE:FE:08:5C:C9:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.206.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:5b:ca:c7:7d:18:df:7b:4a:05:27:b5:f9:e3:22:26:7d:b1:
         eb:7d:3a:c4:1f:34:6d:3c:bc:7b:a1:02:bf:f8:f2:96:39:72:
         f4:63:d6:e0:b7:c9:ed:cd:f3:6f:f0:50:70:2f:26:97:02:b4:
         7b:c6:8c:d6:c5:b6:c3:df:20:88:46:1a:3f:d8:a0:6a:ac:f0:
         04:a0:b0:2a:14:f5:c9:0b:c3:20:1e:38:65:d6:fd:9a:3d:87:
         e4:f3:49:76:e5:e6:73:34:82:dc:dc:fa:64:36:39:56:1b:6b:
         2b:33:65:00:cd:f1:86:80:bd:71:f4:c8:61:26:d8:72:4a:7d:
         82:9d:b5:42:f2:a8:08:b9:34:cb:d3:1c:73:1a:69:5e:6a:fd:
         3d:2c:67:e9:ec:8f:9c:05:a9:aa:71:13:b9:b4:91:51:92:a5:
         86:f3:9d:0b:79:1b:d1:87:22:13:90:73:f2:40:a6:e8:02:a3:
         3d:24:4a:5c:f8:9a:3a:da:2d:19:eb:03:19:a4:94:da:d9:49:
         08:93:4c:7d:1d:6c:f0:25:eb:6a:5f:5b:84:5c:30:4d:0a:f8:
         02:d3:4b:7e:8a:89:c9:80:44:85:9b:8c:b0:88:49:22:e5:ff:
         3a:53:9e:11:b7:da:15:a7:a7:4d:a6:d8:09:4c:d1:a9:cf:88:
         aa:d4:eb:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----