Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dbde8d70-0f57-3229-b406-03351a5f8311.roa
File:                     dbde8d70-0f57-3229-b406-03351a5f8311.roa (raw, json)
Hash identifier:          jvi3pZZKQwO9U3gRGh7A7hEBi7rJCKpLJVcOGvF3QGo=
Subject key identifier:   32:97:06:A9:05:02:89:F1:90:25:74:C0:BA:33:AD:D9:E4:1D:74:5A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584832F04B424ED2A1548A4E3800
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dbde8d70-0f57-3229-b406-03351a5f8311.roa
Signing time:             Sat 14 Dec 2024 02:00:39 +0000
ROA not before:           Sat 14 Dec 2024 02:00:39 +0000
ROA not after:            Fri 14 Mar 2025 01:00:39 +0000
asID:                     701
IP address blocks:        173.56.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:f0:4b:42:4e:d2:a1:54:8a:4e:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Dec 14 02:00:39 2024 GMT
            Not After : Mar 14 01:00:39 2025 GMT
        Subject: CN=538799f2-c751-46af-a336-fcd66bcd38f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:16:d8:de:bf:ed:73:b9:07:ed:0f:a3:44:9c:
                    af:85:74:73:9d:5b:d5:fd:cd:99:7e:0c:dd:82:31:
                    11:2b:68:70:76:d3:92:71:f9:26:fc:38:8c:db:18:
                    ce:39:ca:a0:72:89:54:c7:19:bd:bc:e4:9c:b5:99:
                    4d:b0:2c:9c:8f:26:52:08:dd:8c:04:1b:f6:5c:74:
                    a7:39:5e:f0:3b:e4:53:ce:5b:1c:b4:7a:78:d8:6c:
                    36:b3:87:cb:ad:da:0d:6a:9f:9a:89:73:25:99:d0:
                    f4:aa:90:db:5a:b3:63:7a:27:cd:88:2b:dd:ad:f0:
                    81:5c:b6:36:14:0c:ed:e0:6d:20:19:aa:aa:d2:24:
                    be:73:51:ea:81:da:12:a1:18:62:e5:e0:90:74:8a:
                    ba:28:d2:4b:e2:e7:c2:ca:cf:d8:87:5e:bb:42:b6:
                    7d:2b:b7:53:b8:c4:8d:97:57:32:1b:38:33:8f:cb:
                    cf:dd:dd:91:ea:ab:b4:4c:69:19:d2:f3:c3:e2:55:
                    3b:0c:10:79:e9:46:ba:7f:66:1e:91:4f:90:da:f1:
                    83:af:70:29:46:f6:06:2a:04:ca:5d:80:38:74:55:
                    c0:d0:60:0d:1c:04:8b:37:8d:cd:b1:21:b4:e8:5d:
                    9b:e1:a5:5f:6c:f4:fb:74:c8:48:1f:71:e4:b5:74:
                    4c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:97:06:A9:05:02:89:F1:90:25:74:C0:BA:33:AD:D9:E4:1D:74:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dbde8d70-0f57-3229-b406-03351a5f8311.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.56.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:ce:bd:f2:7f:ec:27:62:0d:15:85:78:10:44:24:86:6e:ed:
         82:3c:63:5a:3d:3e:ea:88:47:91:59:89:ed:77:32:9a:03:03:
         01:4a:1a:9b:d1:46:e2:cb:81:e4:72:41:2e:9a:d4:d3:c3:fc:
         a2:63:d8:49:62:7b:c0:88:d1:d0:cd:d1:9c:29:b0:99:3a:b5:
         f5:44:d8:bd:86:33:1d:90:81:35:a3:de:a9:8a:7d:ad:ba:b5:
         3d:9e:36:82:cb:b7:f0:65:d4:05:62:bc:8b:c3:e7:41:d5:4b:
         f0:6e:93:ed:7a:e8:f7:98:cc:00:ef:38:9a:1f:95:aa:18:de:
         df:fe:dc:8c:32:71:4b:ab:50:ca:25:d6:a8:49:b5:28:ac:d9:
         f4:6f:6f:39:10:9f:87:11:52:8a:5b:33:ca:85:77:24:9c:7b:
         4f:ce:dd:c0:fb:0f:bb:14:14:1e:da:3f:73:6b:c1:6a:9b:09:
         c3:87:a2:bf:ad:1c:7b:f2:16:6a:4e:05:81:6c:dd:5e:84:18:
         9c:16:8d:ca:04:3e:a6:9b:6d:59:fa:a3:38:6f:af:36:fe:30:
         9d:76:b8:48:ea:54:af:de:e7:7c:65:87:6b:94:6e:f1:cc:7b:
         69:ed:d7:17:97:6d:a2:46:8d:4c:f8:d1:ed:ac:67:a7:e3:5a:
         4b:26:b3:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----