Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6fdde3c9-47a8-3cba-bc21-219b161432bf.roa
File:                     6fdde3c9-47a8-3cba-bc21-219b161432bf.roa (raw, json)
Hash identifier:          nCmeXtoSNt5lVO3XSOdytKQMo/OK9/jbPYHWzbSzXa0=
Subject key identifier:   CE:26:9F:6F:1E:8B:00:8A:19:33:17:91:D5:AB:D6:5E:45:1F:2C:ED
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848424B174AC48E7BD1F1316D80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6fdde3c9-47a8-3cba-bc21-219b161432bf.roa
Signing time:             Thu 19 Dec 2024 14:00:52 +0000
ROA not before:           Thu 19 Dec 2024 14:00:52 +0000
ROA not after:            Wed 19 Mar 2025 13:00:52 +0000
asID:                     22394
IP address blocks:        141.207.140.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:4b:17:4a:c4:8e:7b:d1:f1:31:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Dec 19 14:00:52 2024 GMT
            Not After : Mar 19 13:00:52 2025 GMT
        Subject: CN=48016b71-5931-4174-b785-7b5cef0bda4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:bf:c9:7f:c5:ee:96:ab:46:31:9f:5e:0b:df:
                    7d:9c:6a:8b:80:61:4c:a8:26:52:47:dd:de:12:9e:
                    2e:8b:e9:ab:76:a8:54:1d:ba:1b:67:79:d5:b3:5f:
                    d7:a2:24:34:9f:3a:f6:0e:2b:73:12:bf:78:18:59:
                    e1:24:76:0d:e7:ae:79:8e:a3:1b:a6:a7:4b:8b:27:
                    49:e9:0b:f9:7e:fa:f9:c6:10:a8:06:e3:f4:9e:59:
                    67:0b:1a:63:8a:06:d6:c4:82:b1:2e:aa:d1:7f:c0:
                    62:e7:2b:ac:b8:b8:ce:2a:ef:d6:92:79:d8:5c:42:
                    ea:a3:1a:38:16:e2:e6:a7:97:83:5f:c2:ac:02:57:
                    6f:39:b0:a8:4c:18:82:45:61:66:ad:82:dc:f1:44:
                    44:28:6c:b3:76:4f:f8:75:e6:3e:3a:00:fa:b5:81:
                    5b:3d:79:1a:84:07:d3:e0:4e:dc:38:65:96:41:f0:
                    df:49:7b:fb:b2:6b:ed:1e:e8:71:73:f6:ef:98:ee:
                    fe:4e:8d:25:38:a7:d3:75:21:0c:16:00:66:a5:5f:
                    94:00:52:f3:a0:f6:a3:ac:f6:c0:95:11:17:87:d1:
                    59:66:26:96:92:9d:cb:c4:28:de:a8:c0:cb:ed:88:
                    2f:a9:e7:e4:f1:a1:3e:0e:79:17:0b:da:31:c0:30:
                    ba:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:26:9F:6F:1E:8B:00:8A:19:33:17:91:D5:AB:D6:5E:45:1F:2C:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6fdde3c9-47a8-3cba-bc21-219b161432bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.207.140.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:97:e6:c1:a6:98:97:6f:11:9b:8e:d0:dc:dc:40:f3:b5:2d:
         5d:b8:55:3e:70:5d:a4:2a:d1:f5:a5:03:09:e2:ec:67:9f:78:
         55:29:dd:19:a1:97:49:01:86:4a:08:6b:14:91:54:87:47:0c:
         00:63:f4:46:25:ab:b2:a6:0e:96:b9:7d:d4:5d:03:a4:df:4a:
         07:2d:ee:ff:ae:8b:bf:6b:a6:95:b8:e3:55:71:d5:9a:33:0d:
         e2:2c:a4:82:f4:e8:74:10:86:4d:cf:22:c5:a2:a2:e2:12:35:
         45:52:de:78:89:82:c8:41:69:e0:00:84:22:7d:24:37:36:85:
         b1:ae:4b:06:f0:91:d0:ec:09:ec:c9:b4:0c:14:48:83:62:a9:
         85:48:55:f9:35:3a:d5:6c:52:87:9b:c4:ad:f7:30:ab:0f:14:
         1a:73:b1:47:27:f3:de:d4:1c:60:3a:d2:84:b1:cd:51:f7:b3:
         a0:5d:58:c7:81:33:a4:c3:73:fd:c9:06:a4:de:ef:9b:c4:c5:
         e4:06:77:83:76:e4:37:aa:2e:96:4d:0b:7a:cc:3e:c3:4f:1d:
         c5:bf:15:27:e0:6a:d7:85:1e:2b:c1:16:47:41:40:65:7e:64:
         46:d7:dc:b4:66:4b:4a:fc:48:ae:e7:40:d8:03:6b:4b:96:cf:
         d7:d1:84:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----