Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2b081813-029c-3a9c-955c-27ea6d791c03.roa
File:                     2b081813-029c-3a9c-955c-27ea6d791c03.roa (raw, json)
Hash identifier:          QbqP/R3mMSGUZeGjGnd8psQsCCwwLS+c5V+E1ctjsNo=
Subject key identifier:   7B:FA:D9:40:10:3B:F0:C1:1B:FB:2E:05:F2:B7:32:6E:00:C3:3A:5F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584832F04C75AAA89A5D24B71E00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2b081813-029c-3a9c-955c-27ea6d791c03.roa
Signing time:             Sat 14 Dec 2024 02:00:39 +0000
ROA not before:           Sat 14 Dec 2024 02:00:39 +0000
ROA not after:            Fri 14 Mar 2025 01:00:39 +0000
asID:                     701
IP address blocks:        71.161.224.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:f0:4c:75:aa:a8:9a:5d:24:b7:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Dec 14 02:00:39 2024 GMT
            Not After : Mar 14 01:00:39 2025 GMT
        Subject: CN=a40d4768-ae5c-49a3-ada7-e87b7fe9708f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:df:62:50:38:85:5c:44:66:c8:da:65:f5:ed:
                    36:ab:60:da:f7:84:8e:9f:85:cf:bb:34:b6:bf:63:
                    8b:d4:ad:11:97:9d:ff:43:ae:9b:37:10:06:52:0e:
                    e9:eb:ac:e8:ce:ef:11:8e:72:89:f7:0d:d0:ed:43:
                    89:27:87:03:37:85:e2:3c:3a:2b:3b:ad:9a:fe:3d:
                    13:80:ba:34:0d:a3:18:86:8e:3b:6f:32:11:f4:8c:
                    16:83:4d:bb:eb:ae:e8:83:5f:ee:04:c4:41:c8:ff:
                    3c:45:17:74:1e:fb:c5:67:4f:14:34:68:78:3f:99:
                    b1:9b:e9:58:ee:f8:86:6b:da:af:7f:74:02:51:10:
                    9a:23:9c:c9:3b:d2:41:88:e8:4d:f1:3a:87:1e:99:
                    3f:d3:aa:26:42:81:e6:d1:5d:9d:e9:0a:85:d4:00:
                    b0:be:d6:5a:e2:be:e4:4a:51:d1:9d:63:12:48:13:
                    1a:84:5d:04:a7:9b:ba:52:3e:16:e5:3c:2a:44:12:
                    5f:f5:f3:43:c5:68:95:09:26:a2:eb:bb:8f:28:ab:
                    91:d4:2c:49:03:3c:fb:ef:e5:3f:bb:cb:f2:d1:f6:
                    7d:b3:0d:b3:15:db:4d:66:58:da:af:19:f8:0d:85:
                    3c:90:28:8e:9b:07:7a:97:88:4d:11:92:76:0a:50:
                    22:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:FA:D9:40:10:3B:F0:C1:1B:FB:2E:05:F2:B7:32:6E:00:C3:3A:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2b081813-029c-3a9c-955c-27ea6d791c03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.161.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:8c:26:5f:1d:ee:79:87:69:5a:6e:b8:aa:ee:52:62:40:fd:
         95:25:da:37:cd:2d:cb:77:e2:6b:ad:97:1b:13:70:53:72:d2:
         d4:fc:9d:f5:a4:3f:ae:6e:ab:e4:3e:2b:85:ef:ac:4d:9c:a0:
         25:e2:7d:f2:13:ee:35:04:66:3a:d9:bd:bd:9f:53:a1:1b:8b:
         eb:fc:11:d8:00:d0:c3:13:91:2d:95:c5:2c:8a:81:9b:9f:be:
         29:ab:49:b8:10:de:22:ec:ab:75:23:b9:12:e2:0d:76:47:ab:
         94:41:09:e4:ff:ff:b6:e2:b7:e8:6f:39:05:83:37:24:b1:23:
         9e:c8:8f:8b:bb:3a:a6:a7:ca:e1:46:4f:25:98:2c:c5:f5:69:
         ee:35:02:c4:53:2d:bc:e6:90:56:fc:3d:b3:02:b2:44:6b:6f:
         e9:69:79:51:d4:e2:01:37:8f:bb:89:fd:73:55:da:ed:7e:b1:
         4e:a6:02:2e:74:f8:15:9b:26:ac:2c:41:c6:64:e8:dc:e0:4c:
         22:51:5e:f3:77:de:46:f8:f9:ba:73:71:5b:d9:13:e1:92:31:
         1d:57:fa:84:70:98:fb:c6:e2:c3:15:59:aa:60:27:06:1e:8c:
         de:57:33:24:67:48:ee:b4:b6:d2:5b:9a:f2:4f:0e:db:7e:70:
         b5:85:ed:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----