Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b559110b-5d04-3e56-a4ff-131551edc642.roa
File:                     b559110b-5d04-3e56-a4ff-131551edc642.roa (raw, json)
Hash identifier:          BSwuianPfHXfOFXQ5QV2LrZaQotvnqaw4Ci/MkCniic=
Subject key identifier:   1F:3E:70:65:2B:B1:24:14:1D:F6:84:E1:C8:28:8C:34:84:10:6F:EB
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584807AA8798E8AA19F928215300
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b559110b-5d04-3e56-a4ff-131551edc642.roa
Signing time:             Thu 28 Nov 2024 14:00:52 +0000
ROA not before:           Thu 28 Nov 2024 14:00:52 +0000
ROA not after:            Wed 26 Feb 2025 14:00:52 +0000
asID:                     6167
IP address blocks:        174.244.144.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:07:aa:87:98:e8:aa:19:f9:28:21:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov 28 14:00:52 2024 GMT
            Not After : Feb 26 14:00:52 2025 GMT
        Subject: CN=31f8d1b9-7fae-40db-aee1-cb8dc4e25c74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:28:15:9e:e4:cd:c4:f1:47:42:e4:74:2c:d2:
                    76:bd:12:c0:1f:41:76:f7:2d:b4:46:1b:de:f2:46:
                    84:04:d8:27:2d:41:5e:44:89:cd:87:a6:91:cd:ac:
                    84:fa:97:87:7b:57:f7:e0:75:9b:68:0b:59:fa:36:
                    cb:e9:82:87:c2:d7:7e:fe:60:15:22:41:5a:72:e4:
                    ad:d4:a5:cf:99:f2:20:95:ac:6d:7a:83:9c:e0:68:
                    e2:b3:d8:b2:73:b6:2b:b9:a5:46:81:70:4d:24:9f:
                    c0:b4:55:d7:29:34:ef:31:9b:c3:fc:37:56:24:1f:
                    55:cd:30:00:6c:7d:36:3b:1f:bf:11:43:3b:28:d6:
                    dc:ee:30:e6:c2:28:c4:68:33:db:45:5b:6d:78:e6:
                    bb:c0:f4:46:52:fb:d8:c3:be:26:93:c2:8f:a3:24:
                    a8:73:ea:55:dd:ad:9a:ca:85:e7:94:db:3c:2c:34:
                    24:84:2a:da:8a:62:8f:71:79:e6:11:69:13:9a:74:
                    be:af:48:1a:fc:65:5d:ec:93:6f:af:bc:cd:f6:06:
                    77:31:71:18:d9:ac:05:ab:b4:d0:33:05:b2:97:e9:
                    6a:f3:8a:08:83:f0:d9:c3:37:c4:b6:d5:a9:ac:e4:
                    35:cb:3e:a6:00:c8:91:22:23:f3:1f:27:41:73:af:
                    0f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:3E:70:65:2B:B1:24:14:1D:F6:84:E1:C8:28:8C:34:84:10:6F:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b559110b-5d04-3e56-a4ff-131551edc642.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.244.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:28:b1:7e:d3:56:8f:c2:c4:40:3a:4e:10:28:5d:b2:fc:28:
         3d:33:0e:12:36:5e:3b:42:ed:a1:91:bb:93:cd:94:87:c0:e4:
         ee:3a:59:87:43:a9:d1:40:70:53:fe:ce:91:d4:93:b0:e3:3e:
         cb:8c:f4:dc:f8:11:7f:42:d1:78:90:fd:0f:7a:56:64:b6:89:
         0b:83:8e:29:ae:85:75:6b:64:cc:a1:63:fb:9f:de:87:5c:c4:
         61:17:3c:c2:b0:0a:c0:08:d2:88:a5:7a:9d:94:5d:3b:16:14:
         13:07:80:d9:ec:89:6d:3f:91:b7:80:2f:69:9c:66:c3:32:17:
         3d:e2:fa:88:17:0e:98:87:f3:6c:8f:07:06:57:97:cc:6d:d0:
         07:14:e0:59:fd:35:b0:88:e5:2b:14:76:83:ee:d3:45:0f:41:
         ce:91:90:b0:7f:09:32:1c:8c:6b:12:8f:4d:1f:28:05:61:7a:
         3a:09:8c:ff:8b:3e:f3:0a:8b:4b:6c:5f:a8:f7:ab:23:ba:56:
         52:36:74:88:d8:5a:e3:ba:e8:84:b6:b6:9b:1e:02:df:b7:a3:
         27:7a:fc:0b:5b:e2:3b:c7:d2:e0:da:51:49:96:4b:98:69:2a:
         c9:70:0f:e1:22:96:f9:2e:d5:01:8c:c9:04:9c:b1:1d:d7:a1:
         62:8b:3b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----