Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f87e3e69-9b73-3983-8e82-949f113a7ef7.roa
File:                     f87e3e69-9b73-3983-8e82-949f113a7ef7.roa (raw, json)
Hash identifier:          Cs8INuHkA7tt952SESzFk16z91ZDD8GbpJKwDON1Mxw=
Subject key identifier:   2D:E4:31:19:2A:E1:97:65:1E:58:41:6D:A7:70:5D:CC:B3:B3:B0:B0
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847E1FA016E4FAD1A4B392D8E30
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f87e3e69-9b73-3983-8e82-949f113a7ef7.roa
Signing time:             Fri 15 Nov 2024 02:00:28 +0000
ROA not before:           Fri 15 Nov 2024 02:00:28 +0000
ROA not after:            Thu 13 Feb 2025 02:00:28 +0000
asID:                     6167
IP address blocks:        174.207.64.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e1:fa:01:6e:4f:ad:1a:4b:39:2d:8e:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov 15 02:00:28 2024 GMT
            Not After : Feb 13 02:00:28 2025 GMT
        Subject: CN=b91eef2c-ad87-46fd-be78-1ebc14cda68e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:78:a3:2c:97:99:e1:1e:fc:67:32:13:95:66:
                    4f:a1:09:92:f6:5f:ef:2e:57:38:31:ef:71:28:89:
                    cd:fc:a5:f7:4e:db:b2:97:d3:2b:a2:bb:88:cc:27:
                    33:f7:19:b9:65:4b:e5:4a:ff:2b:02:33:ab:04:63:
                    8a:83:2a:73:00:5c:39:1a:ea:0a:1d:fc:c8:71:22:
                    c2:e1:8d:57:bc:88:4c:27:64:c4:45:25:84:5f:81:
                    f1:f5:ed:ae:32:2d:03:9f:f6:3c:7c:31:0c:72:2f:
                    07:ba:ab:d5:d4:79:55:6f:54:a5:f6:bb:49:d6:1c:
                    56:31:f8:2a:51:8f:7d:68:1d:63:33:8e:94:1e:6e:
                    ac:b8:2b:09:64:67:7f:df:9f:67:5c:69:e8:50:cc:
                    4b:2e:5b:1d:0b:c4:55:ab:1d:1c:2b:b8:92:03:be:
                    cd:7d:e0:dc:81:0c:09:eb:e6:97:00:d6:1d:86:29:
                    e2:e6:04:7b:47:68:de:78:d2:17:96:a2:c3:7a:0f:
                    03:4c:cf:1b:6d:60:e3:b3:18:fd:65:29:80:8d:55:
                    93:c0:9b:6c:b1:47:37:af:08:df:f0:ff:dd:ae:f9:
                    45:09:ce:d1:39:33:ed:f6:41:54:c4:dd:ae:55:15:
                    b4:02:b3:a2:35:4c:d8:76:c4:b7:c4:55:8b:a9:e3:
                    77:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:E4:31:19:2A:E1:97:65:1E:58:41:6D:A7:70:5D:CC:B3:B3:B0:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f87e3e69-9b73-3983-8e82-949f113a7ef7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.207.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:bf:1e:48:be:75:9e:a0:37:e2:ba:55:4a:5e:72:d5:03:64:
         39:d8:a3:5f:b1:b1:c2:59:f7:6b:28:b2:f8:9f:89:d9:c1:1d:
         c0:a9:83:2e:22:71:6e:9f:c8:55:7c:f6:01:14:6d:5a:8d:01:
         78:fc:fd:11:dc:12:6e:f6:61:3c:e8:3f:98:99:60:b0:33:c3:
         fb:7b:6b:fc:c0:20:90:a6:f7:26:ce:06:83:0f:5a:25:2f:a7:
         d3:b1:70:0d:0f:11:f9:b9:b7:65:7d:48:50:7a:f3:02:2b:3a:
         22:7f:77:21:60:6b:90:c2:f0:e6:5a:80:e6:fe:c8:6b:11:80:
         0a:b0:d2:04:5a:37:3b:a4:b6:f1:c6:17:bd:59:c4:ef:db:f9:
         7d:ac:a2:5a:f2:17:aa:99:42:de:1e:07:e1:99:ed:00:23:17:
         48:53:72:27:7f:e9:c3:05:0f:95:4f:6d:1c:0e:6d:12:30:c4:
         8c:8b:62:c4:32:7d:d8:d8:ff:e9:8c:47:7b:3e:21:c7:d5:5c:
         60:a4:15:8b:d7:91:fc:80:57:c9:0c:6d:bc:75:3c:c3:19:ca:
         19:51:f4:e4:bb:7f:c7:d2:49:df:4e:89:38:6a:d1:49:ce:6c:
         9a:9d:28:79:58:6d:a1:75:b7:1b:73:e2:26:8a:6d:fe:d6:ed:
         19:0c:c2:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----