Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ceea99d1-41ec-30a8-8c92-fa7a6243a20e.roa
File:                     ceea99d1-41ec-30a8-8c92-fa7a6243a20e.roa (raw, json)
Hash identifier:          ocsUqOS5NSs8ysilLA0RRZrAcjEnqjYvDcqqqH6fXT4=
Subject key identifier:   EA:FD:9B:51:3C:9B:1A:0C:6F:54:43:0B:43:34:1F:41:79:BF:1A:45
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584807AA7D26269CBD2DDA18D3B0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ceea99d1-41ec-30a8-8c92-fa7a6243a20e.roa
Signing time:             Thu 28 Nov 2024 14:00:52 +0000
ROA not before:           Thu 28 Nov 2024 14:00:52 +0000
ROA not after:            Wed 26 Feb 2025 14:00:52 +0000
asID:                     6167
IP address blocks:        174.232.184.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:07:aa:7d:26:26:9c:bd:2d:da:18:d3:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov 28 14:00:52 2024 GMT
            Not After : Feb 26 14:00:52 2025 GMT
        Subject: CN=04a3c426-2531-4741-9cb3-510761fb0da1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:7e:d4:d1:19:56:6a:26:5e:b1:4c:d5:1b:bf:
                    5a:9d:58:28:b0:5d:b8:17:3b:c9:59:5b:02:b7:3b:
                    0e:b7:67:af:33:fb:52:ab:59:32:a8:7f:18:d9:9a:
                    1f:af:99:6d:6e:8a:24:0b:6c:8c:f5:eb:f5:18:59:
                    e1:61:9b:06:90:78:21:f8:9d:66:6e:2c:8e:0f:ca:
                    12:a5:50:12:a6:4f:9f:7a:62:b8:ba:24:33:ce:5a:
                    d1:e9:3f:3e:12:a4:e9:ea:f2:d7:59:ed:a6:5e:69:
                    41:9d:7a:de:65:c6:3f:39:73:39:a9:c2:fa:99:7c:
                    7d:a4:fd:81:e7:55:3d:cf:c3:80:39:3c:49:54:8f:
                    43:11:97:e8:22:30:a3:69:f6:be:2e:e2:56:7a:60:
                    b1:34:d8:6f:c2:c8:83:b7:44:cc:b1:7b:95:08:6c:
                    f2:41:c9:09:57:a6:11:be:97:14:4a:da:2d:63:8f:
                    d1:ab:5b:f1:2a:ec:51:cd:bd:8c:df:83:b1:95:c8:
                    6e:03:2d:10:f9:6a:5f:87:f7:0e:83:a4:31:7d:18:
                    48:fb:b3:ea:3f:59:52:ef:c7:6b:a5:ac:95:ec:15:
                    cc:11:51:ae:92:4f:72:61:b8:7d:43:b4:8e:79:61:
                    71:a3:ee:27:d0:8e:6f:c2:28:c4:c0:8a:1d:57:49:
                    52:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:FD:9B:51:3C:9B:1A:0C:6F:54:43:0B:43:34:1F:41:79:BF:1A:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ceea99d1-41ec-30a8-8c92-fa7a6243a20e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.232.184.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:72:ff:7d:9b:94:4c:57:67:81:10:b0:52:55:31:64:11:19:
         1c:d7:6b:d1:2d:07:06:c1:97:f6:87:aa:ab:f4:61:bf:2b:08:
         74:06:d1:6d:42:7c:11:2c:5e:40:02:f2:db:80:00:aa:2e:e0:
         04:81:6d:79:9f:83:ca:93:85:95:10:4f:2c:fd:94:f8:0b:31:
         34:50:12:7f:1d:09:16:28:8d:09:6d:b2:98:15:89:6a:ab:f6:
         67:86:d2:92:0d:24:5f:20:6e:14:c0:4f:37:8e:16:26:ff:c0:
         92:7a:04:f0:65:f1:68:c8:d7:68:66:5c:4f:8a:58:08:28:3f:
         a4:ab:27:2f:ad:73:3a:24:ed:c6:ce:0b:50:b8:65:11:c6:b1:
         36:27:cd:b5:83:31:1b:64:d8:6a:80:e9:5f:5f:5d:a8:48:cb:
         6c:41:ce:6d:0c:12:d2:91:d9:6c:b2:f1:4f:a5:d0:f8:53:73:
         39:e7:91:1d:d7:6e:0e:8c:f5:54:ea:ba:01:3b:47:de:93:aa:
         b9:0d:32:95:ff:53:9b:68:e6:49:cf:56:18:88:f5:8a:32:74:
         43:a3:ad:51:92:7a:09:0c:33:80:20:30:79:70:29:3a:7f:97:
         d1:68:16:bf:e8:96:88:fd:3f:f1:30:c5:af:66:c7:4f:23:3e:
         55:91:e7:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----