Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539/94cdb467-3d36-3bfa-a8a7-08a40c2ad510.roa
File:                     94cdb467-3d36-3bfa-a8a7-08a40c2ad510.roa (raw, json)
Hash identifier:          jwSTqFbZDtMiVMG9QljBKNrhjwJjPiuyUzkD6E3nsF0=
Subject key identifier:   BA:19:C2:FB:ED:A7:B3:71:E4:AF:0A:A1:6E:B4:78:F8:BC:97:12:D9
Certificate issuer:       /CN=1e0f0616-6e03-49de-b5f8-4b874e6d8539
Certificate serial:       010D0C9F4328584863CAFDA3C89711766359B900
Authority key identifier: 76:7B:57:64:B0:C8:12:01:60:AE:B6:F3:E4:B4:F9:B6:73:7A:8F:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539/94cdb467-3d36-3bfa-a8a7-08a40c2ad510.roa
Signing time:             Tue 31 Dec 2024 14:00:53 +0000
ROA not before:           Tue 31 Dec 2024 14:00:53 +0000
ROA not after:            Mon 31 Mar 2025 13:00:53 +0000
asID:                     6327
IP address blocks:        50.64.0.0/13 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:63:ca:fd:a3:c8:97:11:76:63:59:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e0f0616-6e03-49de-b5f8-4b874e6d8539
        Validity
            Not Before: Dec 31 14:00:53 2024 GMT
            Not After : Mar 31 13:00:53 2025 GMT
        Subject: CN=5944126d-917a-47fb-a10c-01cb26f50780
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:71:54:ae:4f:f8:c7:5e:94:32:c4:3c:9b:bf:
                    72:c1:37:a7:98:f4:e3:eb:c7:f6:5b:4a:bb:7b:b3:
                    c7:67:3b:2d:19:1e:fa:20:8d:34:71:cb:43:6c:11:
                    db:11:41:71:30:b9:f4:f9:e1:f9:d4:04:86:e2:5a:
                    a9:97:79:34:3e:8e:b0:0f:a5:8f:22:06:65:26:d6:
                    f8:3b:70:28:a7:2e:f8:bd:09:1c:47:1e:cc:60:54:
                    77:58:c8:42:cf:02:f8:c4:32:35:62:78:bb:69:a5:
                    a2:66:51:ff:be:dd:e9:21:4d:98:5d:5c:6c:87:ad:
                    50:f3:32:15:30:40:64:e5:c7:72:29:df:e0:4c:a1:
                    fa:35:ee:56:4d:30:90:dc:0b:6e:ad:30:fd:bb:52:
                    99:e3:cc:78:25:14:9d:8a:9d:03:c6:9b:23:5a:17:
                    e7:9a:cb:14:d6:d0:e1:ec:8b:5e:e7:ad:99:2a:2c:
                    77:b5:d0:59:77:65:a4:10:56:b9:0c:4e:db:ec:8d:
                    7e:db:19:69:a0:1f:8a:eb:83:79:9d:79:ca:74:59:
                    39:1f:de:9d:ba:04:f0:da:fa:02:5b:e3:ed:dc:76:
                    31:30:ce:54:6b:8c:a2:20:34:8b:07:f9:f7:43:67:
                    d5:5d:46:5f:9a:e0:fa:82:1a:10:ce:23:96:a1:34:
                    0b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:19:C2:FB:ED:A7:B3:71:E4:AF:0A:A1:6E:B4:78:F8:BC:97:12:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539/94cdb467-3d36-3bfa-a8a7-08a40c2ad510.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539/1e0f0616-6e03-49de-b5f8-4b874e6d8539.crl

            X509v3 Authority Key Identifier:
                keyid:76:7B:57:64:B0:C8:12:01:60:AE:B6:F3:E4:B4:F9:B6:73:7A:8F:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.64.0.0/13

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:63:7c:57:62:b3:70:ad:0f:c2:68:b0:9b:17:1f:14:f7:fc:
         e8:ff:bb:6b:3f:73:24:e2:bd:88:f6:84:03:40:6e:13:4d:af:
         d0:80:a2:19:88:f5:21:ee:56:7c:9b:a5:6b:3f:2f:a9:e9:c7:
         0c:05:ee:23:aa:d7:e2:1d:f7:c9:96:a5:89:3d:1f:8a:14:a2:
         e1:e6:a2:38:03:b8:68:75:87:2e:60:da:09:95:98:1a:a3:36:
         39:30:7b:4d:ea:3e:fc:63:eb:96:ef:39:fa:90:fb:90:4a:2f:
         7f:9f:1c:e6:e2:b5:0d:78:4e:d7:6b:08:c4:71:06:a7:e5:a1:
         cf:ea:9b:b2:a0:48:30:86:d8:fd:58:87:c3:62:12:e9:46:0d:
         23:e5:b0:d9:43:8e:e1:e9:8a:b3:73:7d:25:05:d8:d1:41:35:
         4d:c0:c9:d6:61:ce:30:be:e4:fb:6e:0a:2a:c5:8b:3b:2e:f5:
         06:88:69:cb:86:e8:82:2f:20:5f:3d:02:17:69:19:c8:2b:20:
         b1:8a:02:65:52:1a:aa:33:4c:89:9d:59:ff:c7:b0:3b:f5:54:
         c9:6a:8f:7a:37:56:12:7b:5a:ff:8f:38:5c:ea:de:71:d6:ac:
         ae:46:c0:5d:77:9e:5e:1a:9c:13:4f:fd:ca:2b:fc:47:6c:c7:
         cb:37:f8:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----