Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98f58f3d-707a-4dc1-8d25-5cdc95fb1746/161f850d-cb53-3750-9d41-e3214c40e3ba.roa
File:                     161f850d-cb53-3750-9d41-e3214c40e3ba.roa (raw, json)
Hash identifier:          ImRQi6n/2vtZZ/BM0FJkcf02+sqGKj17y//GMM9qjPQ=
Subject key identifier:   9F:B8:5E:6B:06:81:FF:84:40:D2:F0:9C:9D:BF:97:53:73:6A:CF:23
Certificate issuer:       /CN=98f58f3d-707a-4dc1-8d25-5cdc95fb1746
Certificate serial:       010D0C9F43285847FF74DA254079D967E69B2580
Authority key identifier: 88:0A:07:1D:19:77:B5:EF:FF:02:0D:0E:B5:6C:C9:82:A0:44:5E:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98f58f3d-707a-4dc1-8d25-5cdc95fb1746.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98f58f3d-707a-4dc1-8d25-5cdc95fb1746/161f850d-cb53-3750-9d41-e3214c40e3ba.roa
Signing time:             Mon 25 Nov 2024 15:26:31 +0000
ROA not before:           Mon 25 Nov 2024 15:26:31 +0000
ROA not after:            Sun 23 Feb 2025 15:26:31 +0000
asID:                     396982
IP address blocks:        216.153.30.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ff:74:da:25:40:79:d9:67:e6:9b:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98f58f3d-707a-4dc1-8d25-5cdc95fb1746
        Validity
            Not Before: Nov 25 15:26:31 2024 GMT
            Not After : Feb 23 15:26:31 2025 GMT
        Subject: CN=91869336-9e5c-4f4f-b9d4-b1d04be919eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:45:bc:0c:0e:ae:b3:fc:b0:e5:cd:cf:88:c0:
                    d4:36:6d:a2:b8:37:ff:bd:e6:07:77:e8:48:5d:9b:
                    7e:27:10:fc:f0:03:c7:86:58:33:90:11:0c:89:2f:
                    62:53:9b:57:63:f4:98:41:59:85:0f:4a:a7:e2:b1:
                    49:9a:5d:5f:fb:5a:6b:55:8c:71:38:70:7c:33:b9:
                    b9:f5:ec:86:c2:a4:ee:ab:7d:64:3c:29:d1:3b:e5:
                    db:c4:6b:61:4c:89:c3:8d:a6:37:c6:80:17:19:f7:
                    b4:18:dc:2b:b0:88:97:ab:63:7c:c9:42:77:6c:95:
                    fb:06:a4:b9:e4:2c:f4:13:24:70:f2:3a:ad:86:39:
                    d2:47:33:ab:14:8f:6a:91:dd:0c:19:0b:ab:4c:56:
                    18:50:a1:37:df:bf:6e:ce:59:14:77:d0:06:31:c9:
                    37:0f:5f:91:ac:97:6f:c8:1c:e1:c4:61:ec:74:ec:
                    a7:95:fb:52:62:35:34:af:09:49:7d:35:2a:4d:ad:
                    fe:77:59:c1:ef:68:42:2c:ad:95:26:f3:cd:11:a1:
                    e8:b3:de:10:cc:a5:71:6c:8d:d1:92:dd:5f:e1:b8:
                    9d:bf:be:3c:62:04:84:f6:18:f6:4d:2a:d4:4c:72:
                    bf:26:5b:b0:87:74:01:b5:28:05:ff:9e:a6:54:3b:
                    a3:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:B8:5E:6B:06:81:FF:84:40:D2:F0:9C:9D:BF:97:53:73:6A:CF:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98f58f3d-707a-4dc1-8d25-5cdc95fb1746/161f850d-cb53-3750-9d41-e3214c40e3ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98f58f3d-707a-4dc1-8d25-5cdc95fb1746/98f58f3d-707a-4dc1-8d25-5cdc95fb1746.crl

            X509v3 Authority Key Identifier:
                keyid:88:0A:07:1D:19:77:B5:EF:FF:02:0D:0E:B5:6C:C9:82:A0:44:5E:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98f58f3d-707a-4dc1-8d25-5cdc95fb1746.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.153.30.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:1f:b7:61:9c:79:68:13:6f:d3:e5:77:54:8c:0c:bf:fd:7b:
         9b:87:86:9e:d2:60:21:56:46:f0:81:61:5c:20:a9:72:5c:4b:
         5b:4c:53:23:e5:a3:fa:f8:c6:e1:64:da:92:5e:1b:8c:f9:a9:
         df:2f:cd:bd:22:27:37:cd:7d:dc:e1:50:15:26:c6:6b:68:66:
         82:1b:d2:c7:12:47:cc:9c:e4:8e:eb:fa:e0:4d:fb:44:37:3f:
         fd:3f:39:60:b6:d3:af:f8:ee:d5:55:a8:33:50:ec:ff:db:aa:
         54:79:78:68:7c:05:9c:f6:4d:1b:b2:6d:a9:8d:44:1e:da:d2:
         b9:19:a8:b3:23:b4:10:c7:e1:d1:7e:e2:6c:96:04:14:e9:8d:
         2d:07:8d:4f:7d:d7:24:b6:c1:d1:b9:cf:11:aa:1b:e0:33:97:
         1c:a1:1e:cd:10:3e:a2:0c:4d:a1:8a:82:1c:18:54:1e:f4:c6:
         aa:e4:8c:26:23:68:f1:f1:5a:0d:c2:24:b4:fd:73:9a:92:47:
         a1:91:d4:6d:0f:de:a7:9c:1f:ad:f6:98:4e:f5:8f:1d:2f:b9:
         10:83:e8:a7:fc:73:fc:19:85:85:cc:d4:b4:f6:a0:32:0b:29:
         d3:8a:c5:bd:ff:8f:e0:2f:dc:09:b7:92:46:cd:11:8d:99:28:
         a1:ec:1d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----