Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/53b7f778-5a96-3717-a5cc-6e40949fe6c2.roa
File:                     53b7f778-5a96-3717-a5cc-6e40949fe6c2.roa (raw, json)
Hash identifier:          ESr0o0AXxh3d3C0HJ+iIqrUxSn/jisHRcZ8Ee3iz2no=
Subject key identifier:   A5:0D:DC:3E:9D:C2:EC:5E:0F:A1:C0:86:5F:26:A0:36:29:11:E6:01
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285848424AFB2636F93C24202E35C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/53b7f778-5a96-3717-a5cc-6e40949fe6c2.roa
Signing time:             Thu 19 Dec 2024 14:00:52 +0000
ROA not before:           Thu 19 Dec 2024 14:00:52 +0000
ROA not after:            Wed 19 Mar 2025 13:00:52 +0000
asID:                     16625
IP address blocks:        184.29.208.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:4a:fb:26:36:f9:3c:24:20:2e:35:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Dec 19 14:00:52 2024 GMT
            Not After : Mar 19 13:00:52 2025 GMT
        Subject: CN=2d86090a-abd4-4667-a6e8-696a03ba4cd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a2:96:56:69:b0:69:51:0e:f2:27:8d:d7:2b:
                    da:e3:6c:28:d5:b0:78:20:3f:f6:99:6f:aa:14:7d:
                    47:07:6b:38:3d:49:cb:6d:48:ff:47:2a:06:49:a0:
                    d1:0a:e5:b8:ac:2c:10:09:72:9e:ed:31:38:81:c0:
                    57:6a:68:15:c3:25:b7:45:b2:48:fc:25:19:ed:85:
                    a5:72:5f:d9:ee:34:bf:5b:56:31:e0:5f:c7:fe:b0:
                    7f:68:ea:08:eb:fa:5c:07:49:6b:ef:e8:f9:c7:d9:
                    2e:31:35:9b:4d:b0:ff:38:8c:f8:7f:bf:27:77:0c:
                    18:f7:30:65:d5:69:19:8f:b6:2e:f9:9a:3d:50:1f:
                    de:bf:e5:e6:c1:09:0d:2e:67:cc:36:ed:b1:8c:db:
                    95:d4:2f:d2:95:98:fd:8c:4e:76:ed:22:68:06:dd:
                    01:05:5e:96:73:83:2c:31:de:bd:18:2e:c9:d6:61:
                    64:56:ec:c0:19:c7:0a:d8:bd:81:0f:0b:d7:45:b1:
                    2d:fa:84:ef:9c:14:c5:4a:4e:69:6c:53:9b:77:29:
                    17:13:62:48:a0:bc:a7:04:06:bf:13:1d:1b:d1:ff:
                    69:d3:67:d8:56:3f:8d:b5:b8:8c:76:b8:bd:35:90:
                    52:b8:cc:5e:ca:1c:f2:04:ee:5f:4c:bb:a4:7f:9d:
                    f1:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:0D:DC:3E:9D:C2:EC:5E:0F:A1:C0:86:5F:26:A0:36:29:11:E6:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/53b7f778-5a96-3717-a5cc-6e40949fe6c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.29.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:3b:fe:01:9b:09:84:a2:eb:9c:c4:9c:58:96:29:7d:a8:28:
         af:e0:c1:7f:9c:2f:32:6c:e4:a6:d4:cf:e0:29:3f:73:8a:7e:
         b3:0b:70:f5:91:20:1e:5f:f6:45:c6:37:8d:53:98:b6:78:7f:
         70:1a:cf:78:7a:e3:6e:be:6e:31:0a:db:60:81:9a:96:11:78:
         66:3d:7d:44:cf:e6:8e:fb:72:fa:6f:6a:09:30:f7:b9:8b:9e:
         58:7c:1e:88:60:dd:1d:68:cc:c3:20:e0:18:64:2e:3c:e9:d0:
         22:59:41:72:f3:58:30:cb:b6:b1:b6:b6:ee:ea:7a:9c:d1:f2:
         8d:b9:e6:b2:e1:84:f5:38:47:93:6c:95:a0:f9:30:ae:cf:a5:
         83:77:9e:9a:0e:e0:3a:1c:56:34:9b:82:b8:f8:0b:9a:e3:0a:
         cc:c2:75:50:dd:7a:15:7f:34:32:d0:e6:14:9c:9a:dc:5a:71:
         79:e1:06:87:69:42:d1:82:b8:f2:36:47:d7:d4:97:e8:4c:03:
         1c:35:df:17:77:2c:e0:29:6a:fd:d6:e3:af:e1:df:ed:1a:20:
         84:74:10:7a:7d:d2:b0:de:77:ff:33:ea:cf:83:19:7a:ff:38:
         72:66:84:26:20:8c:e2:cf:23:fb:a9:4d:89:70:6f:b3:f8:28:
         2f:8c:68:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----