Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d32537d0-0235-3940-a787-c0253f83861b.roa
File:                     d32537d0-0235-3940-a787-c0253f83861b.roa (raw, json)
Hash identifier:          Sqvq/3h/PZ8XNmGQYlCPCiZFtT1si4z0kG8tXAILE+I=
Subject key identifier:   E7:DB:F2:77:EC:61:60:9E:79:45:9B:8D:98:58:B7:9A:3C:E7:DC:65
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848854B5D4E55897A186AC98AE0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d32537d0-0235-3940-a787-c0253f83861b.roa
Signing time:             Sun 12 Jan 2025 14:00:53 +0000
ROA not before:           Sun 12 Jan 2025 14:00:53 +0000
ROA not after:            Sat 12 Apr 2025 13:00:53 +0000
asID:                     6167
IP address blocks:        75.194.224.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:85:4b:5d:4e:55:89:7a:18:6a:c9:8a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jan 12 14:00:53 2025 GMT
            Not After : Apr 12 13:00:53 2025 GMT
        Subject: CN=b2bf144e-c18e-4530-b247-1c71cb647758
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:a5:b6:95:40:16:71:c8:32:f9:17:a4:c0:69:
                    87:94:6a:b8:c5:99:ab:15:dd:2a:d2:1f:1d:bb:47:
                    e0:15:0c:f6:9d:f2:f8:a9:2a:69:d6:67:a6:0a:6e:
                    69:13:1d:9f:5a:be:7f:2e:99:ac:97:fb:0a:e6:a7:
                    eb:3c:9d:60:59:a9:68:08:ca:82:09:f8:0c:85:eb:
                    ec:99:58:7a:7a:cf:4d:71:93:c9:2b:e4:de:48:95:
                    2f:de:bf:7a:9f:a0:a2:ac:32:2f:4a:6d:1d:38:6c:
                    12:24:b8:d0:03:c4:12:85:3e:bd:a9:dc:62:f6:87:
                    e1:a9:66:96:c2:8a:a4:c1:32:fc:b6:4c:40:59:fc:
                    9d:b2:26:d1:f4:ca:11:bc:e2:ae:9d:20:44:49:33:
                    17:fa:51:eb:19:78:00:c2:31:e3:97:10:0f:b8:64:
                    ea:30:a9:cf:a3:37:a4:81:e4:58:b8:8d:64:86:f6:
                    cc:8a:be:c6:d7:39:e4:10:27:e6:0e:71:de:86:7d:
                    84:98:f9:d7:4e:f9:8c:ef:41:42:7c:e1:27:fd:32:
                    65:f0:d5:3c:7b:6e:a3:1d:60:01:12:34:d7:62:a2:
                    93:31:6e:a8:2e:74:1a:bd:ad:95:61:c8:2f:ea:01:
                    bc:74:04:83:ca:1c:1b:a1:92:05:ce:65:82:27:81:
                    75:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:DB:F2:77:EC:61:60:9E:79:45:9B:8D:98:58:B7:9A:3C:E7:DC:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d32537d0-0235-3940-a787-c0253f83861b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.194.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:19:62:4f:33:55:d0:50:94:74:fb:a8:c2:07:c4:0f:ec:af:
         75:f5:21:67:c6:bb:cf:c5:94:37:03:ef:7c:01:c8:24:e4:d6:
         3a:6a:79:ce:ca:63:7d:48:79:56:aa:d6:75:ae:c8:f0:c1:a6:
         8a:e7:3b:ac:08:71:55:05:a4:15:32:ec:29:53:b0:5e:27:3c:
         8d:ea:81:c7:26:6f:3b:c6:53:8c:0d:bb:c0:00:c3:39:10:c2:
         79:18:44:75:87:31:a3:5d:49:72:cb:67:ad:1e:85:ee:2f:3f:
         7b:11:85:61:27:97:e9:ec:61:5e:f2:fd:6e:56:aa:55:61:8a:
         2e:3c:7a:98:6b:ac:af:1b:72:59:20:84:e1:9f:e1:ad:28:e2:
         10:e1:9f:e9:3e:ae:cb:55:ad:cb:1d:60:8e:1a:e7:3f:ec:b9:
         af:6d:b4:67:87:23:21:e7:62:77:c6:be:f5:2c:b6:55:90:6b:
         70:21:93:36:55:61:bc:bf:d5:ae:5f:4a:7d:51:5e:61:75:29:
         c8:27:84:1e:4c:4f:62:f0:82:cb:94:c6:fb:00:49:c8:d0:59:
         49:9e:b6:c7:55:24:83:9c:9e:b2:17:c1:f5:7a:be:89:4d:23:
         4b:10:f7:4e:34:49:d2:b3:83:4b:e6:f3:54:ae:d2:8f:a9:b9:
         92:9e:c1:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----