Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9b0a9ba0-b204-3727-ac46-0ccf4a15b919.roa
File:                     9b0a9ba0-b204-3727-ac46-0ccf4a15b919.roa (raw, json)
Hash identifier:          ShzNCzHCiVXAKz7sBsiil9Cj71wLxAn3rHkNC868y/8=
Subject key identifier:   E3:9B:2A:9B:7F:23:A3:63:E9:B2:50:40:2C:A1:90:63:36:94:7D:71
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847F2BA3CE67305D2D7C73DDA80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9b0a9ba0-b204-3727-ac46-0ccf4a15b919.roa
Signing time:             Thu 21 Nov 2024 02:00:38 +0000
ROA not before:           Thu 21 Nov 2024 02:00:38 +0000
ROA not after:            Wed 19 Feb 2025 02:00:38 +0000
asID:                     16625
IP address blocks:        23.37.8.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f2:ba:3c:e6:73:05:d2:d7:c7:3d:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov 21 02:00:38 2024 GMT
            Not After : Feb 19 02:00:38 2025 GMT
        Subject: CN=6a62d165-0f7f-4a71-a5b6-d48d85765679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:64:cf:f2:84:d2:8c:e2:cf:c8:cd:e5:c4:7f:
                    ff:68:fc:f8:c7:86:d3:02:8d:78:7d:d3:15:e0:ff:
                    d3:02:35:63:5d:87:ef:bd:8b:75:7a:01:fd:42:83:
                    e9:5a:de:f4:90:a9:b6:85:c7:21:87:b1:77:17:8d:
                    a6:22:78:61:69:2f:73:a8:82:7b:71:70:ff:4e:2b:
                    62:87:fd:6c:2a:10:13:03:a2:70:24:13:11:9f:04:
                    74:3a:8d:da:c4:02:17:37:f7:fc:a7:07:0b:ac:fa:
                    8f:ef:7d:46:bc:82:82:a7:25:9a:d0:b5:1a:00:0c:
                    0e:49:b8:21:d4:58:14:09:04:45:9c:94:a5:41:47:
                    2d:a7:f6:c2:cc:ef:4b:1f:45:26:ca:fe:82:33:cb:
                    b1:da:dd:1f:bd:a4:d2:53:50:d9:1f:d4:49:2a:5b:
                    ea:63:cf:99:ee:cc:45:55:eb:9e:81:da:96:5c:49:
                    b9:fe:52:1a:de:2e:cd:85:2f:36:15:a8:cc:fc:a3:
                    70:d9:db:8a:74:48:5d:51:67:b5:d3:1d:f3:cd:e6:
                    25:07:3e:63:ee:54:3c:aa:fc:15:ad:1d:d9:b0:bf:
                    16:e6:6f:a8:74:ef:c6:6f:f7:47:7d:17:14:38:28:
                    3f:20:f7:e3:97:2f:ba:dc:50:94:08:9e:9d:38:99:
                    cc:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:9B:2A:9B:7F:23:A3:63:E9:B2:50:40:2C:A1:90:63:36:94:7D:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9b0a9ba0-b204-3727-ac46-0ccf4a15b919.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.37.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:b5:1a:e8:a7:13:bb:db:e8:b5:79:d5:97:bc:d5:41:e6:e9:
         61:1b:56:db:b6:c9:f5:12:34:34:92:76:09:61:64:2c:ad:17:
         c7:e7:a0:f2:0e:76:22:79:f4:e6:8d:74:a2:df:ef:60:3d:66:
         75:31:2d:c0:d2:03:21:fc:f8:f9:08:0b:0e:41:88:45:79:d5:
         cb:47:7a:26:f2:6b:54:d7:12:1b:b0:5b:9b:f8:e3:af:61:d5:
         b8:3e:e6:6c:0f:12:6a:08:42:3b:b3:33:90:1f:e9:78:ce:00:
         47:38:f5:c7:c1:73:79:68:ff:b4:b4:e0:70:8a:18:70:16:b1:
         68:ed:ad:b3:c4:9d:b4:9e:33:33:64:a3:91:63:e6:b9:9e:5a:
         c0:fa:c1:e3:6d:e3:9c:78:a5:f1:10:1f:04:6d:2a:72:2e:bd:
         f9:78:2d:0e:0b:47:65:5f:3e:5b:c1:51:86:6e:e6:bb:50:e7:
         1a:04:75:4e:4a:e2:04:11:4d:b9:04:92:ae:fb:b3:47:be:54:
         a7:ca:40:f3:89:cd:18:b9:55:20:58:6e:4b:95:d1:69:42:12:
         fb:54:33:32:1f:03:9f:c2:f5:69:02:19:ac:d0:ef:4a:bc:e3:
         79:b5:b2:73:aa:e5:9a:04:e9:41:bb:18:88:d5:66:3e:e4:16:
         0d:cc:90:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----