Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fce860c3-d994-3efa-9439-3049c07989e5.roa
File:                     fce860c3-d994-3efa-9439-3049c07989e5.roa (raw, json)
Hash identifier:          HMM8ffB7Q0cqd3hHZwAtSwTFxLJztPgykDF/JZILqPY=
Subject key identifier:   E6:43:53:46:D5:63:7F:52:E1:F4:1D:A3:84:34:9F:70:DE:52:6F:58
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584832F0575331167B65467E6680
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fce860c3-d994-3efa-9439-3049c07989e5.roa
Signing time:             Sat 14 Dec 2024 02:00:39 +0000
ROA not before:           Sat 14 Dec 2024 02:00:39 +0000
ROA not after:            Fri 14 Mar 2025 01:00:39 +0000
asID:                     701
IP address blocks:        108.46.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:f0:57:53:31:16:7b:65:46:7e:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Dec 14 02:00:39 2024 GMT
            Not After : Mar 14 01:00:39 2025 GMT
        Subject: CN=fa4643fb-54c3-4fe2-81b6-7556e4148e9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3f:fe:b4:1d:0b:0c:69:72:72:91:8e:ae:b6:
                    f1:94:69:b1:9f:dc:07:57:50:69:1c:f4:d3:68:4f:
                    4e:42:77:00:43:f7:af:8b:79:4d:1c:e0:c6:5a:87:
                    09:11:b1:eb:5c:11:b3:47:c8:30:93:46:7e:56:23:
                    5d:1a:7f:02:1e:56:05:ce:2d:77:dd:e6:21:52:56:
                    40:db:11:d4:81:71:5a:b2:16:e5:f0:04:f8:24:80:
                    c9:50:7e:67:47:7a:72:f2:59:bd:8f:43:37:6c:40:
                    7b:2c:29:5e:0e:8d:b4:41:a7:07:38:e8:42:8d:39:
                    05:cc:fe:8e:7f:88:27:36:bf:07:e1:71:3c:25:c2:
                    a3:91:7c:cc:af:e6:13:92:81:02:e1:b7:15:cb:f8:
                    d5:95:68:5f:c9:59:0e:d0:11:c2:ab:d8:2f:66:e8:
                    19:b4:99:3d:f6:49:a4:23:6b:c7:30:e6:4f:f1:6f:
                    28:9a:1c:38:4c:3d:59:bf:59:2c:04:1c:9d:a2:68:
                    15:34:ef:08:b4:4d:62:ea:5f:f6:ab:26:76:10:a5:
                    7f:49:ff:4f:c0:dd:52:38:2c:ee:63:7f:05:bf:e3:
                    fa:af:f9:16:82:ea:a0:75:cf:42:77:c7:fc:89:88:
                    0f:c2:ec:2f:d8:46:ad:42:a7:fe:34:c9:af:d9:ce:
                    61:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:43:53:46:D5:63:7F:52:E1:F4:1D:A3:84:34:9F:70:DE:52:6F:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fce860c3-d994-3efa-9439-3049c07989e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.46.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:74:fc:2a:8d:39:49:7b:49:bf:4e:5d:6c:4f:59:0b:a7:71:
         97:21:4c:65:64:d7:21:f7:40:66:68:79:d2:58:d7:64:7d:53:
         8c:fa:f9:12:ec:9f:a2:d7:9a:fa:c7:16:6a:aa:9c:d3:1c:6f:
         71:b5:8c:60:63:20:b3:c8:b5:2a:c2:01:ff:ab:0c:b7:24:44:
         34:d7:72:0f:ba:14:2d:3d:87:53:70:b8:4e:eb:2f:8b:ff:73:
         b0:10:1e:1f:63:93:34:cf:80:1e:a3:81:45:00:ba:86:67:28:
         07:30:96:5a:0e:36:a5:54:65:19:cb:aa:df:36:ec:72:00:18:
         48:e7:3a:e3:8f:60:d5:21:6f:d2:dc:51:27:96:31:77:54:60:
         d3:11:c8:cf:1b:4d:90:3c:ed:e8:93:7c:b5:2e:5d:36:54:b7:
         0e:27:54:3d:8a:09:df:bb:19:1d:3d:3a:d0:6f:fc:9e:da:90:
         68:c9:ce:40:a1:d9:86:b9:73:6b:a3:27:2d:e9:61:28:98:97:
         be:d0:47:55:42:7b:5f:62:8b:74:bb:1f:d6:2a:77:86:ca:f4:
         90:55:76:05:45:00:73:6f:5c:f9:e6:a5:5c:6b:a9:07:07:4b:
         41:e7:aa:df:1e:cf:48:be:58:cb:2b:f4:b5:90:a2:74:0e:3a:
         e9:30:b3:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----