Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a35baa76-e684-3820-b991-b427086bcfb8.roa
File:                     a35baa76-e684-3820-b991-b427086bcfb8.roa (raw, json)
Hash identifier:          BXDuo38zIuvB4wpbCYj/kXenjeNrO7TWD5usLMOKxkk=
Subject key identifier:   6C:8F:54:D9:15:0E:C9:93:B9:97:31:85:23:9D:CE:60:BC:B7:C5:1B
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584827C535C3D7EAE70DDFD2A968
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a35baa76-e684-3820-b991-b427086bcfb8.roa
Signing time:             Tue 10 Dec 2024 02:00:40 +0000
ROA not before:           Tue 10 Dec 2024 02:00:40 +0000
ROA not after:            Mon 10 Mar 2025 01:00:40 +0000
asID:                     24319
IP address blocks:        23.200.217.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:27:c5:35:c3:d7:ea:e7:0d:df:d2:a9:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Dec 10 02:00:40 2024 GMT
            Not After : Mar 10 01:00:40 2025 GMT
        Subject: CN=e907a0a8-a422-4a5f-bada-d380d82cd02f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:05:48:a8:18:2e:33:8e:22:8c:a2:70:92:84:
                    60:23:80:1d:57:e8:65:4d:40:4d:77:1a:e0:8d:05:
                    a0:3f:2d:6d:f9:72:b0:a9:90:91:bc:2c:91:4f:9b:
                    53:06:62:a9:b6:ff:a7:1a:d8:a6:09:df:a3:30:b0:
                    7d:11:cd:6c:48:1c:ce:1f:07:7c:e4:36:83:a3:70:
                    81:6d:ae:46:af:ed:34:9b:e1:5a:e0:c9:a6:89:b1:
                    11:d5:78:61:f1:d8:0f:9c:ae:c0:4d:33:32:e3:46:
                    5e:6a:74:8e:54:2c:e6:9e:34:26:0e:9c:76:48:6a:
                    20:95:8d:72:8f:8e:c8:80:e9:8f:8f:d5:d8:7d:56:
                    a5:f2:3a:b9:9f:a6:bc:61:c9:dc:de:7d:37:83:e0:
                    10:c8:57:87:4b:f7:5b:67:fe:fd:b7:3b:a1:16:3a:
                    48:55:44:0a:16:61:3b:4d:78:d4:03:75:99:d3:40:
                    b7:5d:c0:1c:37:8e:97:13:e1:7a:e9:ae:3c:a9:d6:
                    f8:89:f2:88:16:e3:22:83:7f:9b:f9:4b:4f:a9:75:
                    3d:57:c5:36:5e:c4:69:07:d7:dc:5f:fd:40:be:5f:
                    5e:12:4b:b2:76:8c:8e:e5:84:cd:26:75:5c:ee:e9:
                    6b:13:76:15:8a:79:0b:e3:e5:5a:dd:ae:ea:70:4b:
                    b5:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:8F:54:D9:15:0E:C9:93:B9:97:31:85:23:9D:CE:60:BC:B7:C5:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a35baa76-e684-3820-b991-b427086bcfb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.200.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:8a:7d:5b:a3:26:ad:7e:34:59:11:b2:54:b5:44:20:44:c1:
         1d:3f:d5:d5:de:ff:dd:f3:f7:f4:63:12:f1:75:3f:67:b3:35:
         47:28:d2:4a:cd:ea:84:55:03:cb:74:73:95:37:2e:c1:0f:c9:
         36:12:c3:b8:59:71:ab:08:c0:75:c6:ad:e9:3b:03:a9:55:47:
         28:cb:55:55:c7:17:fb:cc:14:d6:93:69:1c:44:e0:6f:ce:6b:
         ff:6f:0c:e2:87:11:a0:44:f4:92:0b:c6:a3:72:a1:a0:88:28:
         44:e0:34:81:b2:66:d0:41:41:77:84:2f:58:27:18:7e:d8:3a:
         5e:32:15:71:d7:b7:27:20:da:d8:42:a9:69:47:23:aa:d4:c8:
         65:a1:8a:c2:fd:53:bd:44:66:8d:f8:93:5d:1f:35:39:43:cd:
         cc:04:44:df:ab:e9:65:a4:81:27:ae:8a:6e:a0:f6:74:99:4d:
         fe:0e:e1:9d:55:df:0f:51:d4:96:f2:aa:61:a2:ae:13:46:83:
         4a:16:d1:78:8e:d2:1b:fb:e6:69:4e:16:a5:ab:87:4b:5c:8b:
         82:9b:17:ed:b8:4d:43:f6:7c:fa:32:28:dc:af:f5:4c:c0:54:
         ae:78:c0:e2:23:59:85:2f:b2:f3:da:c0:aa:96:73:d0:fd:c6:
         04:75:ab:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----