Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/92d9528e-d363-3bf9-b54d-27688042ade9.roa
File:                     92d9528e-d363-3bf9-b54d-27688042ade9.roa (raw, json)
Hash identifier:          gy9J3/FS82ulBcAoOktTajdISOy6ThcxHG+SIPU7BZk=
Subject key identifier:   A3:C6:46:79:1F:E2:42:D0:2A:D8:52:2E:ED:CC:1E:53:E3:7D:79:67
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584832F04D51BCA0A184407E7500
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/92d9528e-d363-3bf9-b54d-27688042ade9.roa
Signing time:             Sat 14 Dec 2024 02:00:39 +0000
ROA not before:           Sat 14 Dec 2024 02:00:39 +0000
ROA not after:            Fri 14 Mar 2025 01:00:39 +0000
asID:                     701
IP address blocks:        98.118.240.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:f0:4d:51:bc:a0:a1:84:40:7e:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Dec 14 02:00:39 2024 GMT
            Not After : Mar 14 01:00:39 2025 GMT
        Subject: CN=341ddaf6-56ba-4660-82db-991ac721b59b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:d6:8e:92:f0:1f:e9:bf:9b:1a:6b:72:7d:96:
                    18:20:8f:d0:b9:0f:3b:6b:ef:8d:e4:3d:f1:c7:aa:
                    71:9e:24:37:d9:c5:ae:8a:48:d2:5c:25:8d:b0:7e:
                    d5:7c:a3:2d:22:2c:33:6c:8a:92:3c:74:28:20:39:
                    76:7d:cc:fd:62:83:8d:97:05:e2:f6:76:a2:a8:b3:
                    2d:55:e8:3c:a0:78:b4:0d:5f:13:aa:26:4a:52:ec:
                    49:77:3f:da:a5:37:4f:ba:09:aa:75:09:54:14:c8:
                    40:25:8d:03:8e:d7:be:c4:13:98:f2:59:de:74:35:
                    ce:d6:81:7f:15:ef:0b:e3:8b:fe:6b:07:95:a8:65:
                    38:e5:a4:2d:ad:f4:44:56:ca:31:cf:ce:1c:f7:c0:
                    d1:32:d7:dd:49:d4:7b:fe:bf:bc:2e:6e:c9:c7:64:
                    a3:2d:9b:a9:52:89:a1:b2:0a:c6:3e:1f:8d:64:f8:
                    af:bb:87:79:07:c8:2f:bd:6e:d2:11:4a:e5:2a:2b:
                    25:11:79:99:d5:38:39:fa:22:0b:53:5d:d5:b6:e4:
                    fe:b4:3e:d9:95:7f:9d:fe:d8:51:5d:cb:46:2a:ac:
                    28:50:c7:c1:46:cb:10:5e:e7:1d:10:a0:d9:0c:93:
                    76:af:54:74:e5:3b:9f:c1:8c:63:06:ff:06:03:3b:
                    18:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:C6:46:79:1F:E2:42:D0:2A:D8:52:2E:ED:CC:1E:53:E3:7D:79:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/92d9528e-d363-3bf9-b54d-27688042ade9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.118.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:44:f4:53:46:b0:40:7d:98:3d:a7:6f:c2:ef:35:5d:d2:8f:
         a6:e7:48:d4:8b:8b:6f:12:01:a8:bc:92:e4:b4:9e:48:9b:09:
         87:66:12:bb:35:2d:52:a7:f1:23:ce:b3:89:c6:3e:c4:eb:0f:
         f7:6f:cd:3f:59:70:be:48:4a:97:f2:8f:27:23:dd:da:2c:33:
         49:25:2b:c0:14:ee:95:3d:6b:56:a3:aa:76:f6:a0:3c:a1:66:
         2d:c8:3a:eb:14:2b:e6:cc:e1:8c:6b:52:04:1a:7a:35:ac:b3:
         eb:5e:d0:bf:4a:2d:f2:e4:37:7a:da:c7:d2:6e:c6:3d:28:6b:
         a8:5f:74:3f:e2:78:0a:a9:5e:00:2a:d8:81:04:e2:48:26:b8:
         71:55:01:7c:48:ae:fa:30:56:06:98:56:a1:44:35:8f:98:69:
         5e:e1:11:5f:a4:d1:23:50:e3:62:c8:2a:43:93:de:24:5a:06:
         54:1f:64:dc:60:59:69:0a:e2:d2:8b:2e:f1:32:92:41:7b:ef:
         92:32:8a:be:5e:25:fa:78:88:7d:d4:30:a7:58:e0:93:40:44:
         09:44:55:72:7e:86:42:13:f7:e3:98:23:12:ca:aa:99:1d:84:
         27:73:04:63:7a:88:b8:8b:48:57:fe:2a:87:a7:01:8e:c9:ba:
         97:bd:21:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----