Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8c4dbf51-ade1-3de8-994f-a1d77a328cd8.roa
File:                     8c4dbf51-ade1-3de8-994f-a1d77a328cd8.roa (raw, json)
Hash identifier:          fdHPxJdT4i482XUv5uiRz9kJZ3HWyegJ1JTqYZhD1Ak=
Subject key identifier:   7E:2E:E9:2B:83:A8:2F:FC:BC:CC:69:4B:C9:71:F5:17:C6:2C:3D:3C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584832F0502D98EF5A08C7C9B300
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8c4dbf51-ade1-3de8-994f-a1d77a328cd8.roa
Signing time:             Sat 14 Dec 2024 02:00:39 +0000
ROA not before:           Sat 14 Dec 2024 02:00:39 +0000
ROA not after:            Fri 14 Mar 2025 01:00:39 +0000
asID:                     701
IP address blocks:        96.253.0.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:f0:50:2d:98:ef:5a:08:c7:c9:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Dec 14 02:00:39 2024 GMT
            Not After : Mar 14 01:00:39 2025 GMT
        Subject: CN=e3f731c0-5444-4ea5-a429-f6c7dc70e0e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ff:2c:71:cf:29:2d:e1:bf:09:4e:c8:d5:69:
                    86:df:b2:4d:26:77:05:59:00:b0:cd:f6:9a:1d:f7:
                    0e:26:e6:ad:6b:e4:48:51:ed:5d:f1:4b:65:13:d9:
                    95:5c:1d:7f:60:60:7f:e6:b2:6e:d7:da:6a:e5:8a:
                    82:1c:d1:a2:cb:b1:a4:f5:91:91:f2:ae:73:4c:90:
                    2f:29:52:36:5e:6e:cd:f1:99:8f:8c:0f:de:38:02:
                    55:ac:01:5d:f8:cc:8a:b2:90:f4:b9:66:60:57:7c:
                    a0:6e:81:d0:6d:61:f3:7e:a2:8d:7a:6b:87:56:d3:
                    8a:c4:9b:42:f0:0e:ad:48:15:50:4e:f5:74:ad:f5:
                    5c:bf:c8:71:8e:c9:c7:14:d0:44:d6:6c:70:2b:42:
                    fa:3d:2a:9b:71:05:96:34:e3:c9:52:f0:82:7f:70:
                    41:0f:14:49:28:7b:eb:0f:04:08:2c:70:17:77:40:
                    45:3a:71:18:88:b6:fe:7d:6d:54:be:68:9b:f5:95:
                    c0:2b:b3:55:b7:1c:08:d0:3d:f4:ca:64:ad:fa:ce:
                    4a:14:04:87:90:5b:a9:1b:9a:0e:bf:af:a1:1d:4b:
                    ec:7b:de:06:fa:ea:44:52:39:1c:39:df:03:f2:bf:
                    d1:62:c6:d5:aa:24:c6:07:a5:ed:c5:5b:2d:93:10:
                    b5:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:2E:E9:2B:83:A8:2F:FC:BC:CC:69:4B:C9:71:F5:17:C6:2C:3D:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8c4dbf51-ade1-3de8-994f-a1d77a328cd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.253.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:6e:ca:93:c9:e9:c0:df:56:24:76:57:f5:8b:39:1b:aa:2c:
         a9:d8:12:bf:0f:04:20:bf:a1:fd:14:af:f0:a3:17:8b:dd:b9:
         f1:8c:ba:fc:b2:83:05:a0:f8:25:69:e8:9b:0e:b0:da:ed:d2:
         02:f6:25:d8:b0:0a:1e:30:ca:8c:7b:61:ad:4e:ec:ca:c2:83:
         54:7e:e1:76:d4:4e:83:94:07:4f:dd:28:7d:62:b8:f3:18:2a:
         0a:11:55:af:32:03:d0:e1:ef:68:30:f2:da:50:e5:50:d5:3d:
         71:45:da:96:6c:e6:0c:dc:ce:8d:27:33:98:45:a7:be:84:7f:
         30:af:2c:e8:63:f8:2c:65:57:35:17:1d:82:10:3b:d0:23:98:
         ef:a2:34:95:d9:3d:be:02:c0:0b:4b:1a:97:24:09:31:7e:77:
         42:c8:1e:89:a1:66:b2:8b:44:25:4c:d2:82:58:5d:9b:46:f0:
         6e:60:3f:0c:3c:5d:3f:bd:07:52:b4:94:77:9c:0f:2d:bb:84:
         32:c9:ac:0c:3c:84:ae:10:8e:72:ee:79:87:b8:c0:e3:99:15:
         64:1b:7c:ed:82:a3:74:f4:ae:a3:8f:de:23:0e:48:80:5f:a6:
         37:bd:45:a5:4d:c2:83:d7:c2:68:28:4e:8c:a5:5e:24:b7:64:
         70:bf:57:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----