Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/80e94ccc-6a7d-3919-bea4-419524e432d1.roa
File:                     80e94ccc-6a7d-3919-bea4-419524e432d1.roa (raw, json)
Hash identifier:          T5Natmi3QsZE3rZD0WbA6twAdlAT6ChHmVdr1dWM3Ig=
Subject key identifier:   F7:4D:5F:A2:4F:DF:B9:1E:51:7B:81:64:CB:2F:27:83:D0:91:52:56
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848854B669326B502CE208FC880
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/80e94ccc-6a7d-3919-bea4-419524e432d1.roa
Signing time:             Sun 12 Jan 2025 14:00:53 +0000
ROA not before:           Sun 12 Jan 2025 14:00:53 +0000
ROA not after:            Sat 12 Apr 2025 13:00:53 +0000
asID:                     6167
IP address blocks:        75.236.0.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:85:4b:66:93:26:b5:02:ce:20:8f:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jan 12 14:00:53 2025 GMT
            Not After : Apr 12 13:00:53 2025 GMT
        Subject: CN=a9bf3f01-659c-4a98-9568-0d7a93d8b0c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:21:24:31:29:6b:53:cc:06:c5:bd:a3:5b:72:
                    c1:76:a1:60:00:71:14:b8:ba:ce:cb:eb:94:69:05:
                    8f:17:f6:10:12:5b:cb:9c:85:d9:0f:9d:62:75:20:
                    a3:2a:4a:aa:a5:82:42:d4:1c:a6:34:bc:3e:78:d9:
                    27:17:40:f7:97:0a:12:f2:4d:5e:cd:b2:6e:bf:ff:
                    9a:55:37:d7:57:a6:d3:d6:f2:ed:de:c1:50:24:ee:
                    f4:1d:88:1b:c5:2c:44:4f:8b:ed:af:d7:67:2f:7c:
                    50:cc:b6:9f:de:08:5f:e4:e7:96:e4:f6:15:87:23:
                    25:5e:f4:5f:1c:28:b5:e4:f5:cd:ef:50:c2:60:72:
                    5f:bc:fb:f0:2f:d4:11:a4:3f:74:e6:63:c8:f2:66:
                    36:fc:7e:07:48:4f:6a:ed:2d:63:d1:b8:d0:7a:0b:
                    07:91:7a:30:8e:9e:93:96:42:50:c9:71:b5:06:18:
                    9e:c9:0e:78:d9:a7:62:b3:ac:a5:d7:22:70:b0:eb:
                    42:e4:6c:59:06:55:17:f1:36:f6:ef:b0:eb:22:c9:
                    05:96:a8:06:9b:93:bc:b7:1b:d1:f1:02:e7:a0:58:
                    56:10:61:57:9f:8e:45:68:3b:62:c2:a9:c7:e9:d2:
                    cf:b4:d0:00:28:5b:9b:a4:c4:8e:f3:1f:8c:24:b8:
                    9d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:4D:5F:A2:4F:DF:B9:1E:51:7B:81:64:CB:2F:27:83:D0:91:52:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/80e94ccc-6a7d-3919-bea4-419524e432d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.236.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:84:34:1d:ca:5d:d5:2f:c0:0a:58:35:12:b2:e0:ba:ca:5d:
         db:59:0b:6c:2a:ed:c1:d6:28:29:63:7a:70:c3:f1:94:e8:52:
         05:a9:4b:0a:c0:8b:a8:ae:00:a4:aa:82:66:e9:a7:96:bf:8a:
         9f:bf:18:16:d1:bc:8d:91:e0:b3:39:fb:ef:72:49:0c:68:b7:
         78:f5:57:b2:4a:26:13:69:aa:64:f2:91:bf:c6:f0:ca:de:08:
         44:85:c1:b7:be:16:55:6e:11:10:ba:a7:4c:2a:01:48:71:db:
         38:08:02:e5:fb:b3:68:41:78:7f:c3:02:94:86:c7:e2:71:5b:
         ca:e1:75:d8:60:f5:3f:dd:aa:08:a3:04:25:bd:5c:7f:c7:27:
         9e:8f:34:b0:ee:80:3c:ad:57:2f:7f:06:89:f8:45:04:be:4b:
         d3:00:59:b6:db:42:d3:79:f0:aa:c9:a1:8e:53:3f:87:5b:3a:
         b4:70:31:ea:7d:90:e6:b5:4f:35:84:ad:6f:32:03:eb:e0:30:
         c8:ae:4d:4d:d5:1d:f7:de:91:8b:26:33:4c:5b:6d:75:48:75:
         0d:37:ff:e8:ec:23:13:e6:c4:22:70:fc:f0:56:72:d1:81:7b:
         3d:7e:8b:78:e4:be:80:63:36:6d:7d:6a:c9:a3:85:0d:6d:e2:
         2d:f2:3b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----