Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c57e5ac1-46c1-3492-98bd-9981c146c475.roa
File:                     c57e5ac1-46c1-3492-98bd-9981c146c475.roa (raw, json)
Hash identifier:          YwFIk4xrpBDwmi3ffmlTiHjVnbPSTY9p1YElx2oKZ3Q=
Subject key identifier:   B5:91:92:D3:86:26:B6:35:8D:3A:47:91:CD:AA:12:C4:44:8D:E7:1C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285848451590FD07E8C90D8E343C00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c57e5ac1-46c1-3492-98bd-9981c146c475.roa
Signing time:             Fri 20 Dec 2024 14:00:51 +0000
ROA not before:           Fri 20 Dec 2024 14:00:51 +0000
ROA not after:            Thu 20 Mar 2025 13:00:51 +0000
asID:                     9498
IP address blocks:        23.12.192.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:45:15:90:fd:07:e8:c9:0d:8e:34:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Dec 20 14:00:51 2024 GMT
            Not After : Mar 20 13:00:51 2025 GMT
        Subject: CN=3dd86976-7b87-466e-a27c-3148058b3ce9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:3f:1b:d1:9c:b4:00:90:bb:a5:7a:c0:65:d2:
                    3d:05:f0:96:72:c8:2d:e6:e5:8f:e7:0b:61:9e:3d:
                    66:6d:52:35:9f:a1:c5:49:ae:1e:93:a4:08:4a:24:
                    33:5d:80:31:be:46:58:32:59:5f:6e:ee:60:5a:6a:
                    e3:36:0f:b5:f4:8d:09:96:c0:60:1a:95:0c:46:12:
                    39:81:d4:5c:4a:2d:af:29:5a:60:de:83:26:7e:0e:
                    d4:4b:41:0d:cb:23:95:ea:cc:39:cf:d1:68:46:6e:
                    09:f0:35:06:bf:a9:88:6e:f9:60:76:68:00:f2:0e:
                    7e:26:eb:f8:3f:47:38:ab:4e:11:1a:1f:0c:ad:78:
                    b1:87:bf:df:84:ce:f2:f2:08:dd:c4:2d:3e:c0:9f:
                    6b:7e:80:d7:89:9a:fa:b0:02:64:3a:47:53:1e:da:
                    bd:e1:5c:f1:89:8d:cf:3f:7e:9b:92:ff:19:6e:7b:
                    89:cc:86:51:36:42:19:1b:6d:2c:28:1f:16:db:8b:
                    a2:b2:3e:42:81:2a:5f:04:63:98:6c:d6:94:2f:e3:
                    be:8d:e0:73:ce:74:e7:9e:4f:54:10:a8:d9:86:48:
                    62:7e:f6:57:03:b0:f2:16:4d:43:85:5a:b7:a7:17:
                    2b:61:fd:d7:53:5a:3e:5e:5b:2b:7d:0f:96:09:54:
                    44:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:91:92:D3:86:26:B6:35:8D:3A:47:91:CD:AA:12:C4:44:8D:E7:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c57e5ac1-46c1-3492-98bd-9981c146c475.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.12.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:8a:c8:c7:5a:95:b3:af:97:6e:67:e7:1b:ca:08:01:83:e6:
         72:dd:f2:22:be:c4:7b:f4:37:11:07:0a:94:af:01:30:8f:45:
         ad:fa:d4:ed:f8:88:db:0d:0c:73:44:b5:6f:bc:6c:d8:f8:55:
         58:76:a2:a5:c8:2b:62:c5:2a:d1:71:33:aa:c9:26:3d:62:e0:
         66:4a:9b:ee:66:61:e9:36:4c:28:80:20:e5:4c:0c:41:56:84:
         34:a5:47:60:a2:57:26:c3:6c:98:87:f5:d0:a2:a2:fd:21:f0:
         3e:f1:00:bd:83:8a:61:d6:a0:df:8f:1c:1d:25:9c:0b:cf:f8:
         5e:02:25:54:a8:43:34:1e:95:1d:38:6f:72:96:c4:3e:c3:50:
         03:d4:a5:76:d0:b5:fa:a5:b9:83:7c:a4:0d:af:1b:01:04:a5:
         c7:b7:d4:68:86:15:38:14:47:43:02:13:31:c8:9d:17:f6:97:
         d9:bf:f7:43:66:33:2c:e3:e8:b9:a7:33:e8:91:76:c3:5b:69:
         d4:f9:3c:d3:48:31:5b:fe:bb:db:f5:99:9b:f6:bd:e3:98:d2:
         62:86:45:a2:ed:75:4d:ff:3e:42:68:e8:a2:44:42:3f:48:8a:
         40:df:ae:9c:dc:3c:91:fc:e3:cc:c9:7e:eb:b7:40:c2:9b:e8:
         c8:6f:02:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----