Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/842a56a6-b6a1-3310-a883-8f339b98db65.roa
File:                     842a56a6-b6a1-3310-a883-8f339b98db65.roa (raw, json)
Hash identifier:          LaXiQHqI9RWYRpsjMbicDHoUxoPjqPIkH7tIsRpbpTU=
Subject key identifier:   C9:30:C2:F7:DF:42:08:23:CC:B4:2E:F9:E7:26:E2:CD:68:6C:8D:B1
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858482EC01126F6ADDF1F680B61C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/842a56a6-b6a1-3310-a883-8f339b98db65.roa
Signing time:             Thu 12 Dec 2024 14:00:51 +0000
ROA not before:           Thu 12 Dec 2024 14:00:51 +0000
ROA not after:            Wed 12 Mar 2025 13:00:51 +0000
asID:                     20940
IP address blocks:        184.51.102.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2e:c0:11:26:f6:ad:df:1f:68:0b:61:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Dec 12 14:00:51 2024 GMT
            Not After : Mar 12 13:00:51 2025 GMT
        Subject: CN=45cc9ae3-c424-45d2-af72-ad55658e33cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:00:25:0d:76:1e:2a:cc:9d:c7:09:e1:5c:d2:
                    ca:59:b0:5f:a2:ea:87:09:b8:dd:4e:a8:21:96:01:
                    a4:4e:dd:f5:96:89:e6:c2:db:07:72:3b:07:12:ee:
                    2f:68:90:cc:70:00:17:4a:fc:20:94:f1:b1:1c:91:
                    e2:fe:9f:b0:dc:46:5f:1a:e2:66:c2:2f:67:a5:1f:
                    d5:f0:12:09:c8:fd:e9:09:05:6c:2d:7b:90:96:3f:
                    41:cb:b3:ee:2d:1b:ae:fc:b9:69:23:24:3f:2f:92:
                    ea:fe:58:74:6c:15:d2:d2:34:75:c4:3b:34:bf:d2:
                    69:91:e7:20:5c:e1:4b:21:fd:13:66:07:8b:82:2b:
                    53:a3:05:7d:e4:f5:ed:8f:f4:16:d8:ef:84:02:21:
                    65:a0:34:3c:11:01:db:02:fe:26:17:a1:c4:29:ef:
                    1a:19:3e:4f:f5:e9:70:32:37:9f:aa:c2:93:f6:50:
                    fd:72:74:da:ec:6a:d3:bb:d4:f0:43:2a:89:5f:40:
                    64:d2:8f:11:57:00:a9:48:fd:bb:4b:a3:f5:f6:fe:
                    ec:49:fe:dd:92:d6:ba:b9:1b:9a:3a:d2:54:d8:83:
                    79:c1:dc:b1:3a:da:63:a7:19:7f:55:54:d8:5d:71:
                    a3:a7:95:2e:d3:e3:ae:f6:4e:2d:c2:7d:b4:74:1a:
                    f2:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:30:C2:F7:DF:42:08:23:CC:B4:2E:F9:E7:26:E2:CD:68:6C:8D:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/842a56a6-b6a1-3310-a883-8f339b98db65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.51.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:7e:4f:7a:bd:66:6a:e1:54:38:c1:5e:69:fb:99:f6:a6:f9:
         f6:77:70:07:3d:77:c6:a0:b6:9a:28:85:f6:da:f5:d1:60:aa:
         73:0b:e9:3f:b3:f4:60:e7:71:de:29:37:ed:09:82:f9:b2:6b:
         cf:44:c7:3a:f1:ed:a3:c7:10:8e:16:3f:6f:41:33:06:d2:59:
         ec:8b:81:b1:03:bb:71:ec:8f:04:9f:74:e6:22:0f:e1:3d:dd:
         0d:b7:25:b2:85:36:c2:31:b3:46:0a:ca:f8:04:df:7b:0f:b1:
         36:ef:2c:9f:08:3f:3f:22:ba:a0:a6:c3:6c:0b:9b:e6:98:3e:
         1e:21:67:8d:c7:e4:8a:d6:8d:10:f4:d4:3f:8c:0b:e1:25:cb:
         54:b8:84:8e:d9:b6:9c:0d:41:ed:34:39:93:b0:08:3f:43:37:
         a6:35:2c:d2:77:1c:11:d1:0d:28:9b:cd:97:5d:1c:c7:8d:63:
         4b:76:da:32:06:66:84:e6:fa:f9:99:9e:7f:09:82:21:eb:9d:
         50:a0:e0:75:e2:44:e6:f6:f5:78:9b:12:4a:0a:ac:43:39:b6:
         7b:a5:33:4b:70:1f:63:64:1e:7e:97:c8:03:b9:3d:12:73:4a:
         08:c1:de:9e:5b:3d:f0:49:b9:d1:9d:cd:04:f0:76:1b:78:4a:
         cf:e5:17:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----