Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357/e19adf6a-3a84-313c-9ff3-eea3f710beda.roa
File:                     e19adf6a-3a84-313c-9ff3-eea3f710beda.roa (raw, json)
Hash identifier:          ID3ivCePI902P4/SwY+GEnzIyiLY5HWvcQvPX3+egOc=
Subject key identifier:   FF:2D:C7:27:C6:FF:9E:B0:82:0C:FC:D7:DB:EC:62:29:16:73:0E:C3
Certificate issuer:       /CN=161143c9-c030-4270-91a4-41e54bbb2357
Certificate serial:       010D0C9F432858480BDA6EF48B8B369377312BC0
Authority key identifier: 3F:1F:91:EE:51:47:94:04:0E:68:02:55:C7:6B:C2:2A:74:D9:CE:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357/e19adf6a-3a84-313c-9ff3-eea3f710beda.roa
Signing time:             Sat 30 Nov 2024 02:00:39 +0000
ROA not before:           Sat 30 Nov 2024 02:00:39 +0000
ROA not after:            Fri 28 Feb 2025 02:00:39 +0000
asID:                     14630
IP address blocks:        205.174.0.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0b:da:6e:f4:8b:8b:36:93:77:31:2b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=161143c9-c030-4270-91a4-41e54bbb2357
        Validity
            Not Before: Nov 30 02:00:39 2024 GMT
            Not After : Feb 28 02:00:39 2025 GMT
        Subject: CN=8ef7512f-340a-4a82-9fab-c07392acb9fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:10:65:f8:fd:d0:a0:c2:de:92:ab:e1:1b:f0:
                    9c:f2:6c:21:c2:53:b7:df:f7:fa:f1:5d:1d:68:46:
                    cc:26:f1:d7:cd:e8:82:9e:64:4e:aa:0f:08:2f:84:
                    bf:aa:ec:0a:7b:81:bd:42:47:4e:1a:0c:04:b3:f6:
                    09:fe:71:de:b4:78:0d:a8:69:f9:37:09:6d:50:31:
                    e5:72:f8:5c:ba:3a:3f:d7:31:45:bf:b0:0b:3e:40:
                    f0:76:b7:d6:ac:bf:fa:dc:70:33:1d:32:2d:71:58:
                    81:56:cb:5e:9f:9c:66:56:28:1b:96:99:b1:24:60:
                    8e:81:46:64:03:31:db:43:b5:ed:6b:20:8b:8f:64:
                    d2:5b:56:06:32:6d:89:f4:e6:1e:44:5a:69:45:6b:
                    56:aa:e1:4c:48:83:74:96:08:33:6b:e8:10:48:89:
                    04:9f:08:96:46:b7:f9:e3:ce:4d:b7:35:0d:0b:af:
                    09:d5:a5:11:ee:82:ad:61:6c:00:dc:a2:e8:dd:4a:
                    f5:7f:56:0f:f6:dd:cf:e2:79:f5:9a:01:14:1c:e2:
                    89:13:88:51:ee:e3:de:16:f6:8e:6d:47:a1:20:a0:
                    74:ab:b0:eb:2f:72:18:ec:f1:6c:4f:57:c0:90:57:
                    ed:2a:5a:62:7f:4e:b9:e7:ef:5f:8f:20:a1:ba:f7:
                    9c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:2D:C7:27:C6:FF:9E:B0:82:0C:FC:D7:DB:EC:62:29:16:73:0E:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357/e19adf6a-3a84-313c-9ff3-eea3f710beda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357/161143c9-c030-4270-91a4-41e54bbb2357.crl

            X509v3 Authority Key Identifier:
                keyid:3F:1F:91:EE:51:47:94:04:0E:68:02:55:C7:6B:C2:2A:74:D9:CE:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.174.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:d8:ee:c1:62:2d:4a:5e:3f:2f:ee:43:95:aa:e6:93:b1:4a:
         6c:74:a4:07:f1:b9:2c:93:cc:53:df:6c:24:56:f6:79:a7:46:
         67:f8:52:26:fe:0a:77:b1:6b:87:00:82:13:85:1c:40:22:93:
         3e:51:37:c6:bd:38:b9:1b:77:bd:b8:f2:51:41:7d:50:02:f6:
         7d:dd:1a:a6:57:92:2f:f7:3e:7c:50:4f:68:95:55:1e:74:49:
         e3:7d:25:e0:23:be:d5:f1:a5:34:05:c2:8a:60:d7:5e:d0:c4:
         bf:9d:3f:9d:4e:b7:b0:cf:fa:1e:2f:d8:c6:ec:76:fe:7b:d5:
         b8:bc:c7:68:7b:0c:05:4a:44:48:c4:40:c9:a8:a7:dc:d7:4b:
         7d:98:e0:5e:e8:0c:17:60:13:99:3b:28:7f:3a:f1:dc:b2:1c:
         a2:89:89:00:37:38:1a:df:9f:76:2a:bb:18:16:17:73:de:ef:
         00:6b:16:f8:16:b6:eb:6e:39:fd:91:e9:d3:7c:8a:2f:91:28:
         2b:98:3d:84:08:dd:ba:e5:95:4c:0e:74:8b:26:16:73:ff:9e:
         e8:16:89:f3:d2:95:51:e5:00:27:94:03:c1:28:c5:71:70:86:
         92:ae:49:e0:45:c0:bc:86:15:29:5c:1e:f4:eb:97:f4:f0:9e:
         44:bc:19:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----