Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/bea233f7-8a64-378f-9dc5-2458cdb4223a.roa
File:                     bea233f7-8a64-378f-9dc5-2458cdb4223a.roa (raw, json)
Hash identifier:          vriaqTIyAFKP0jxLUKUjhzwHq9VUlWZ/pvw33Yzg3Z8=
Subject key identifier:   3E:16:4F:1F:D3:0C:BF:44:94:AB:47:5C:17:AC:FE:9E:59:52:11:8E
Certificate issuer:       /CN=45de47ca-0b52-44ab-af26-767d8a671192
Certificate serial:       010D0C9F43285847FB1A324F094026303E08B180
Authority key identifier: C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/bea233f7-8a64-378f-9dc5-2458cdb4223a.roa
Signing time:             Sun 24 Nov 2024 02:00:27 +0000
ROA not before:           Sun 24 Nov 2024 02:00:27 +0000
ROA not after:            Sat 22 Feb 2025 02:00:27 +0000
asID:                     5645
IP address blocks:        108.175.224.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:fb:1a:32:4f:09:40:26:30:3e:08:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45de47ca-0b52-44ab-af26-767d8a671192
        Validity
            Not Before: Nov 24 02:00:27 2024 GMT
            Not After : Feb 22 02:00:27 2025 GMT
        Subject: CN=af8dda5e-97f3-4233-8bd2-2e41ccd00379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:71:98:16:a3:7d:06:d5:42:69:57:7c:d3:9b:
                    b4:7c:72:c3:96:28:77:38:dc:2c:08:9e:09:d3:e3:
                    18:65:49:03:f6:72:96:d8:47:e8:ce:34:78:47:93:
                    c6:f9:a0:ba:df:58:d1:5a:11:c1:0b:67:9a:b1:a2:
                    ec:ad:e4:21:da:c8:f9:54:23:57:f6:d7:88:a9:fc:
                    1a:8e:b9:31:b3:e4:5c:fd:a6:9f:de:43:6c:96:94:
                    5e:a2:ba:91:f9:75:3a:5d:4c:6b:1b:44:f6:c6:f2:
                    c1:47:eb:7c:88:bf:ba:18:78:dd:09:a4:26:d4:8e:
                    d9:5c:5b:bc:b5:84:a4:d3:e3:43:fc:a4:08:93:9f:
                    bb:21:f0:3a:72:d3:eb:30:8a:b7:0e:82:2d:1f:c5:
                    ed:af:cd:6e:98:e7:40:f9:97:e6:53:75:c9:88:e1:
                    59:c2:8c:8a:27:cc:e3:b3:fa:7e:45:02:f9:25:3a:
                    04:01:62:1f:b9:50:c9:7b:17:f0:60:41:3e:35:81:
                    3f:cb:3a:32:2a:d2:12:93:61:2a:1d:c6:3a:b3:e2:
                    39:42:39:d8:58:97:f9:b9:36:69:b3:4b:7d:43:c2:
                    d0:f0:fe:65:2d:fa:59:06:52:a8:0a:ab:3d:3c:44:
                    36:9b:33:f0:d4:fd:88:3b:d9:76:21:68:27:8a:64:
                    42:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:16:4F:1F:D3:0C:BF:44:94:AB:47:5C:17:AC:FE:9E:59:52:11:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/bea233f7-8a64-378f-9dc5-2458cdb4223a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl

            X509v3 Authority Key Identifier:
                keyid:C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.175.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:94:62:b1:9e:02:8b:c5:29:b7:2b:2b:b6:15:4b:c3:e3:ea:
         62:2a:ea:64:d5:1d:43:e0:5f:db:0b:59:5f:67:7f:a3:67:23:
         c3:51:4e:ea:a4:ba:27:e7:a1:a9:c5:99:83:9d:d7:e1:4c:93:
         fb:1a:c7:62:9a:f0:b7:76:57:b5:9a:38:64:32:5f:f5:f6:3a:
         5d:eb:f8:62:34:e7:7f:50:e1:e8:e6:b5:e4:aa:f3:86:be:91:
         53:cf:bf:6f:2d:94:3f:c9:5e:52:f6:58:68:79:89:16:9b:5d:
         06:d5:db:f6:e6:bd:4c:61:fd:61:23:42:42:ba:86:7a:09:f1:
         a1:ef:db:73:03:b6:4b:a4:68:9a:84:68:56:7a:65:21:dd:9f:
         5c:07:7b:17:93:37:2e:3a:b1:f7:bb:92:2e:1b:e7:25:3a:c7:
         d2:6f:07:51:72:21:93:bf:a8:9b:db:59:9c:b4:e5:eb:28:cf:
         4e:23:f5:bc:6a:43:e0:4f:0c:74:29:cb:5d:37:83:ec:2f:07:
         a0:40:6f:5a:51:e4:de:0f:18:6e:7f:e3:59:78:38:a5:e9:cb:
         1d:44:6a:89:73:cb:23:02:e4:58:7a:e8:76:85:90:2f:65:b4:
         e9:f3:f8:13:d8:b1:f3:85:dc:db:b9:19:69:be:d8:d6:c0:73:
         37:b8:11:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----