Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/62629c3c-9771-30ad-85b2-d0b397e73c7c.roa
File:                     62629c3c-9771-30ad-85b2-d0b397e73c7c.roa (raw, json)
Hash identifier:          fYfG1eQLgYfJtRpzHWLk63qpEDX2oHom7mv5y2CWqFc=
Subject key identifier:   15:31:A8:43:BF:CD:A8:13:3F:43:EE:C4:A4:2E:41:E8:93:68:A7:B0
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584807AA8C53F2950574366A1C80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/62629c3c-9771-30ad-85b2-d0b397e73c7c.roa
Signing time:             Thu 28 Nov 2024 14:00:52 +0000
ROA not before:           Thu 28 Nov 2024 14:00:52 +0000
ROA not after:            Wed 26 Feb 2025 14:00:52 +0000
asID:                     6167
IP address blocks:        174.249.80.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:07:aa:8c:53:f2:95:05:74:36:6a:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov 28 14:00:52 2024 GMT
            Not After : Feb 26 14:00:52 2025 GMT
        Subject: CN=cf6d522d-0ba1-480f-af7a-3f868ddf06e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:10:73:65:a2:62:b3:c8:d5:fd:4d:3f:bf:16:
                    74:d3:56:f0:47:5a:f8:b0:76:b0:8c:8d:d6:2a:7a:
                    39:cb:b0:72:bf:ac:f9:f3:fe:30:85:e8:7a:c9:97:
                    b1:6c:58:9f:48:6b:27:f2:71:86:a1:63:fb:5c:dc:
                    39:f3:fd:91:09:18:8d:34:3c:88:7b:9c:f2:a3:5e:
                    cf:a1:a8:d7:89:69:4e:60:cf:08:85:bf:05:d3:9b:
                    39:d5:51:33:1b:69:fe:a4:7a:a8:df:b0:61:10:a1:
                    b9:cf:e8:bd:94:7c:a1:a1:16:5b:9c:87:d0:85:de:
                    fa:64:c3:8a:12:be:1c:d6:4e:3d:97:91:7f:7f:c6:
                    4c:49:30:ab:28:3c:7a:fa:6f:00:94:1b:a3:63:4a:
                    01:23:81:10:6e:80:52:96:dc:1f:ab:ab:5e:56:03:
                    8c:fb:8d:4c:6d:be:03:41:47:5a:58:6d:37:72:34:
                    1f:bc:77:9f:dd:0a:fe:76:05:af:cc:8e:58:62:f5:
                    66:15:45:6e:22:0c:3b:79:d8:1b:3d:1b:1e:b8:d4:
                    ba:be:1d:e0:dc:78:89:f1:a1:d4:fe:cf:13:7c:cd:
                    5f:6e:bc:71:eb:bf:bb:5c:91:7c:22:7e:25:7b:20:
                    3d:f6:7c:b3:d8:e1:d7:24:57:dc:da:fb:11:90:0c:
                    9f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:31:A8:43:BF:CD:A8:13:3F:43:EE:C4:A4:2E:41:E8:93:68:A7:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/62629c3c-9771-30ad-85b2-d0b397e73c7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.249.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:d0:78:43:e4:de:ca:9f:36:28:2d:74:d7:b6:b3:dd:a2:fa:
         6c:51:12:67:d7:b4:d6:e7:d6:3d:3e:30:f6:8b:cb:92:a9:1c:
         04:69:1f:3e:66:83:de:db:2a:60:b9:29:d2:c5:70:01:06:bf:
         f1:a4:72:1b:b8:63:3f:8e:9b:3b:44:21:3a:89:04:89:f3:1d:
         e5:60:e0:19:9f:05:0f:71:0e:ae:8d:86:3d:00:2a:eb:46:d2:
         b9:51:a0:96:ec:20:b7:79:b6:0e:cc:b0:b9:f3:35:16:4c:66:
         d6:6b:3b:ac:fe:02:73:54:c6:38:51:08:03:66:21:7b:a5:44:
         c1:7b:9a:5a:da:2e:6e:3d:65:5b:14:a0:d5:fc:93:f2:44:7d:
         c9:3e:98:1c:86:5e:a0:04:84:39:c1:92:8e:cd:13:53:e1:7d:
         33:fc:f0:21:99:09:22:d8:e8:ca:99:9f:62:39:b6:a9:de:89:
         b1:3c:8b:5e:bf:9f:29:bf:fd:49:63:8f:4e:8a:8b:ec:67:f9:
         c2:48:3f:1d:e5:4b:94:24:1f:89:6d:00:68:25:6f:47:6b:91:
         25:c6:29:05:61:de:05:a1:c4:49:56:ef:bb:40:01:54:83:7a:
         31:be:72:cb:5e:53:9f:9c:1f:71:b8:be:a8:e7:5e:99:c0:46:
         b2:bf:f5:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----