Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b82d89a6-214a-3597-ad89-c35d53431114.roa
File:                     b82d89a6-214a-3597-ad89-c35d53431114.roa (raw, json)
Hash identifier:          JEu8ADAidISXHdU+WFn0jZewLlLncmBM5aek4Yiph+o=
Subject key identifier:   34:A0:B7:E2:0A:3C:F1:FE:78:E3:02:ED:36:5F:BB:97:B6:77:86:10
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285847E8F530977C55BCE9A8F0E9C0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b82d89a6-214a-3597-ad89-c35d53431114.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     396982
IP address blocks:        70.32.154.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f5:30:97:7c:55:bc:e9:a8:f0:e9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=8c4c5d89-0e47-42f1-be29-0f184ad1c742
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:21:29:91:6c:d3:8d:21:fb:bf:4f:06:45:61:
                    2b:46:e9:ed:c8:17:39:98:e0:58:9a:4a:2e:a6:49:
                    b6:5a:7a:9a:11:e1:a5:1f:04:aa:c4:e3:f0:13:0d:
                    bb:f6:5f:fc:bc:3c:1f:b3:58:d0:5d:47:fc:70:e3:
                    5f:e6:e2:fe:a0:90:c1:a0:54:33:46:96:9c:71:2e:
                    fb:3e:fd:d1:a9:6a:3d:40:54:e5:67:08:ca:56:47:
                    a8:d5:ea:2d:62:45:9d:72:b4:34:33:da:27:27:89:
                    d2:7d:f2:0f:a0:9e:2d:78:79:6a:23:35:2f:48:e2:
                    9a:7a:32:d5:14:42:3d:8f:d9:05:6a:41:67:e9:e9:
                    fd:8a:46:75:75:7f:bd:a0:ae:3a:44:64:a7:5a:89:
                    4b:7e:34:f0:40:bc:eb:dd:77:0c:73:8d:45:c5:9b:
                    cb:f0:46:58:ef:c6:59:64:9e:72:ec:a7:48:c3:ad:
                    d8:05:cb:f8:1f:50:f4:0c:65:5d:bd:05:86:d0:8d:
                    88:eb:0f:47:0a:d8:93:17:78:d1:c9:04:3c:d9:9f:
                    e6:94:aa:e1:89:04:30:b3:29:94:7a:ca:08:5c:57:
                    f6:9a:08:73:d2:74:7e:83:0b:fb:61:34:7b:6b:1a:
                    6f:70:5c:f6:cf:54:45:4c:0f:33:e3:39:27:ff:7f:
                    b3:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:A0:B7:E2:0A:3C:F1:FE:78:E3:02:ED:36:5F:BB:97:B6:77:86:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b82d89a6-214a-3597-ad89-c35d53431114.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.32.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:f2:c9:39:14:1f:1e:97:40:37:f5:2d:05:8b:40:23:6c:2a:
         4f:73:f9:68:3e:e7:4b:b6:4c:8c:f5:36:0b:cd:c4:02:cf:6d:
         d9:ec:13:c2:c7:4b:61:96:2f:38:be:8f:6b:23:e6:65:89:2d:
         0c:2d:17:a9:5d:71:79:fc:1a:68:71:ba:25:4e:4c:0d:81:cc:
         16:30:4f:ac:23:e2:8e:80:1c:a4:24:4e:4b:64:c4:6d:2d:0b:
         ee:0a:55:d9:01:55:7c:7b:c3:88:d2:40:99:cf:6b:5f:00:6e:
         3d:3a:3e:25:b6:8d:93:d3:0e:eb:12:94:f7:a6:0f:0a:fa:26:
         5d:1a:56:18:e3:43:96:84:b1:d4:b5:bd:87:4b:96:1e:c4:69:
         cc:c5:51:92:a1:d8:dd:34:c6:3a:14:3b:02:fb:24:0d:c1:e3:
         61:a6:49:47:fd:a6:2f:04:fd:42:ae:f0:27:fa:ee:53:26:19:
         a2:95:b3:6f:5f:10:78:6a:0e:c3:78:85:cb:96:3d:2b:56:07:
         13:cc:48:b1:70:45:4e:f4:99:a8:8e:3e:1a:22:db:51:c7:a6:
         76:9b:50:b7:2d:84:37:fb:33:38:33:6a:b3:7a:aa:ae:f0:39:
         a9:42:64:41:39:e3:df:e3:b1:98:60:fd:11:ad:99:9a:e8:14:
         a9:b4:35:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----