Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/856e770f-696e-3e92-989e-4ad87cdfde06.roa
File:                     856e770f-696e-3e92-989e-4ad87cdfde06.roa (raw, json)
Hash identifier:          WgrjmlEvjph3P0bzTpMT6BLR/KDRfOdhKQWmqyWHxRM=
Subject key identifier:   6E:96:8D:B5:15:ED:AF:BC:0E:79:B8:B2:BC:AA:FB:73:1E:3A:45:FC
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285848530B0A6FF5E191D1B25DC080
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/856e770f-696e-3e92-989e-4ad87cdfde06.roa
Signing time:             Wed 25 Dec 2024 14:00:52 +0000
ROA not before:           Wed 25 Dec 2024 14:00:52 +0000
ROA not after:            Tue 25 Mar 2025 13:00:52 +0000
asID:                     16625
IP address blocks:        104.77.8.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:53:0b:0a:6f:f5:e1:91:d1:b2:5d:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Dec 25 14:00:52 2024 GMT
            Not After : Mar 25 13:00:52 2025 GMT
        Subject: CN=4e8aa031-4dc3-49e3-a3d0-278186b705be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:50:ca:69:08:76:00:7b:84:88:1f:1b:37:d5:
                    58:8a:be:70:38:77:75:f0:de:cd:a1:9d:07:90:7c:
                    f4:78:bc:e3:35:84:bb:47:e6:77:85:99:68:4e:01:
                    1d:44:e9:73:64:61:ec:f8:02:05:d3:89:6c:ef:15:
                    32:61:54:f4:cf:02:48:05:c5:eb:38:c7:19:fb:d8:
                    f3:b5:ac:8a:c4:bf:53:2d:fa:17:33:e4:aa:ca:92:
                    e6:4e:fb:35:ab:9d:a0:aa:15:0c:97:81:1a:2e:be:
                    87:83:86:b4:0f:e6:11:8c:15:2c:39:af:4d:bf:92:
                    65:91:34:0b:34:34:1e:75:4e:6c:b0:57:54:1f:bf:
                    22:ae:44:04:8c:8a:d6:af:6d:b4:a3:f7:a0:a4:24:
                    8f:55:a0:ad:7e:b1:81:2e:00:fb:ea:be:2e:4d:c5:
                    09:21:d3:9f:4c:fb:0f:ce:3e:bf:8b:12:ce:fc:17:
                    32:5c:8a:c6:ca:62:eb:5b:cb:f2:9b:00:55:2e:51:
                    f6:32:7e:1e:dc:5e:fa:64:48:66:b8:03:30:fc:44:
                    01:35:97:5d:23:45:96:66:c7:3c:ce:30:15:8a:98:
                    d9:a6:f2:a1:d5:71:3f:30:29:a1:b0:fe:c2:5a:77:
                    65:90:8e:df:c1:32:13:2f:bd:dd:b4:78:fd:85:63:
                    29:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:96:8D:B5:15:ED:AF:BC:0E:79:B8:B2:BC:AA:FB:73:1E:3A:45:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/856e770f-696e-3e92-989e-4ad87cdfde06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.77.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:27:a9:57:4c:e8:a8:ed:f1:01:8c:fc:9c:e6:f4:ca:8d:90:
         07:5f:21:4d:22:8a:00:e0:73:96:a3:c7:2e:b0:68:93:5e:64:
         df:49:b2:b1:e3:8d:8e:1b:02:73:3b:85:c6:a9:ea:25:1b:db:
         8b:64:d1:66:dd:d8:ea:85:e6:92:ed:f8:ac:b4:72:34:d5:d8:
         7d:f0:c1:56:74:15:a4:ed:7b:93:5c:c5:7c:aa:d0:94:53:42:
         b5:f5:13:da:a7:97:13:9e:cb:0f:d6:d1:90:f1:7d:0d:cb:09:
         8e:8d:1e:c4:0c:c6:52:f7:e0:7d:3f:e6:bb:fa:b4:70:f5:51:
         14:d7:bc:bd:37:61:09:4e:3a:68:93:6c:8d:28:b6:21:9e:dd:
         05:de:86:0a:8e:94:15:85:ba:00:b8:be:41:69:70:34:07:a7:
         f4:18:07:16:09:cd:5b:3a:99:81:b9:f1:64:87:e9:4c:ba:46:
         5b:ca:60:c1:83:88:fe:75:90:a5:fb:9b:ce:c8:75:bc:e2:da:
         a9:6d:42:59:a2:d3:c0:8b:3a:35:f1:29:b5:8f:6a:d3:c5:0e:
         08:bb:9e:c1:0d:4b:22:ea:b0:5d:92:9d:94:0b:70:5f:ed:45:
         f1:2a:e9:01:04:c4:cb:f0:52:93:ef:d7:7f:ec:b8:3c:18:bf:
         7c:8b:99:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----