Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/9db7e737-d4b3-376e-abd3-b1ab52592e22.roa
File:                     9db7e737-d4b3-376e-abd3-b1ab52592e22.roa (raw, json)
Hash identifier:          wFI1Nn2468dJrL5hSmbedXNVIYqiNausBB/kix/YqpY=
Subject key identifier:   85:B3:68:90:C5:85:DC:95:17:3E:C3:8B:18:DE:9E:16:81:A8:25:BA
Certificate issuer:       /CN=1bd97e7a-c31d-417a-bc07-1ecdb96be09f
Certificate serial:       010D0C9F4328584850D97D42556C3B3980F4EC00
Authority key identifier: E0:BC:46:6D:8F:5F:DC:23:84:62:42:1C:22:C8:6C:C1:EE:EB:CB:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/9db7e737-d4b3-376e-abd3-b1ab52592e22.roa
Signing time:             Tue 24 Dec 2024 19:09:46 +0000
ROA not before:           Tue 24 Dec 2024 19:09:46 +0000
ROA not after:            Mon 24 Mar 2025 18:09:46 +0000
asID:                     14315
IP address blocks:        173.0.110.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:50:d9:7d:42:55:6c:3b:39:80:f4:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bd97e7a-c31d-417a-bc07-1ecdb96be09f
        Validity
            Not Before: Dec 24 19:09:46 2024 GMT
            Not After : Mar 24 18:09:46 2025 GMT
        Subject: CN=63c0a7b4-6e53-4088-bbc7-b56ef895c4f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:2c:08:6f:a9:03:18:23:6b:1e:16:8f:94:12:
                    c9:ba:7b:b4:64:ba:43:e5:5a:dd:90:76:d2:bb:2e:
                    85:05:21:54:f5:21:cb:0a:0c:1d:07:9d:2d:a4:74:
                    b8:cb:3d:01:c6:9b:1f:fd:e8:17:1a:91:b0:31:70:
                    76:1f:92:bc:ed:7f:05:69:d9:3a:6b:f9:05:b3:54:
                    05:68:32:3f:26:24:35:1c:f0:16:75:98:37:df:e4:
                    1d:d7:24:94:aa:54:5c:17:b4:bf:c9:f4:f8:6b:09:
                    15:01:d4:1f:f0:2c:bb:f5:36:45:49:21:9f:2d:4a:
                    30:cb:7a:2b:05:c3:2d:43:23:b6:bd:71:10:9b:49:
                    32:a0:d6:f1:af:26:76:60:49:90:60:b1:eb:f7:59:
                    7f:ae:a8:c1:d6:bf:67:b4:fa:01:54:5d:12:e9:2d:
                    4a:aa:0d:7d:30:c9:47:81:9c:e2:a0:8d:52:02:50:
                    57:15:c1:eb:b5:a2:92:65:c3:40:54:14:89:bb:29:
                    c6:6e:a8:47:29:b3:37:ba:7f:00:44:5a:93:1b:d5:
                    0b:9c:99:6e:12:37:1d:d1:ba:40:41:7e:9c:05:13:
                    f7:74:0e:ac:b8:70:99:b0:df:03:88:75:21:bb:01:
                    ab:75:6a:92:72:ff:b6:04:01:9d:c2:7f:67:f6:3d:
                    46:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:B3:68:90:C5:85:DC:95:17:3E:C3:8B:18:DE:9E:16:81:A8:25:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/9db7e737-d4b3-376e-abd3-b1ab52592e22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.crl

            X509v3 Authority Key Identifier:
                keyid:E0:BC:46:6D:8F:5F:DC:23:84:62:42:1C:22:C8:6C:C1:EE:EB:CB:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.0.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:19:c0:e2:f9:68:6e:f5:6d:2a:ed:b5:3c:38:5f:da:a4:2e:
         60:d3:80:59:a3:55:97:a4:f8:a6:ab:26:4d:21:c4:06:b1:1b:
         6e:60:aa:d1:c1:9d:74:22:f1:10:b5:47:08:12:ab:4e:c9:12:
         ea:71:64:12:ed:05:ae:3d:be:c0:99:ae:8d:98:65:50:d4:d3:
         9b:07:b6:26:1d:2b:f4:1b:ad:ff:3f:0b:ff:8d:0e:57:d9:50:
         50:f7:b7:40:91:b9:b5:d8:c4:12:c2:6f:35:97:f8:50:3c:52:
         1a:5c:45:18:4f:9d:a7:f1:c4:3d:60:5d:f9:4a:b2:a4:53:4a:
         b5:ae:53:49:61:fb:2a:d4:1c:24:81:3f:a5:ef:a4:d2:75:a7:
         8f:43:28:71:45:23:6d:04:66:bf:65:bf:36:c0:63:a1:ee:57:
         35:46:71:cc:ef:80:f1:20:2b:e0:d4:23:f1:4a:3e:57:23:1a:
         5b:16:01:73:23:92:83:a6:78:5b:17:b4:2e:e0:12:6d:ee:ff:
         36:f2:d7:0d:50:73:c2:ba:61:ab:09:8c:55:eb:05:5d:0b:2f:
         ba:d7:c9:65:28:ff:d9:de:b3:c9:c0:9c:4b:25:bd:05:37:88:
         d8:6b:e3:1c:5c:32:77:7a:61:94:bc:89:77:80:6c:5c:42:13:
         10:1e:de:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----