Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fd89eaa8-8018-3cab-89c5-193f22b37608.roa
File:                     fd89eaa8-8018-3cab-89c5-193f22b37608.roa (raw, json)
Hash identifier:          XUOelwEXDRSAsLyisRcI42cPC+ifo4NOOsnFgq1/KRA=
Subject key identifier:   C9:AC:54:12:01:52:4B:D6:25:B6:2D:FD:7A:8A:B1:5E:FC:05:53:0A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848854B61334C5730812F9CD100
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fd89eaa8-8018-3cab-89c5-193f22b37608.roa
Signing time:             Sun 12 Jan 2025 14:00:53 +0000
ROA not before:           Sun 12 Jan 2025 14:00:53 +0000
ROA not after:            Sat 12 Apr 2025 13:00:53 +0000
asID:                     6167
IP address blocks:        75.205.176.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:85:4b:61:33:4c:57:30:81:2f:9c:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jan 12 14:00:53 2025 GMT
            Not After : Apr 12 13:00:53 2025 GMT
        Subject: CN=8d6abb1b-7404-4284-b38c-5ce0c9877ab8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:92:69:59:7f:fd:e4:52:17:74:df:b4:ec:25:
                    d2:78:94:0d:ed:7c:2f:07:c1:7c:34:1b:04:0e:ea:
                    8d:5a:70:f2:3b:d3:4c:c9:ec:70:85:ea:72:af:e3:
                    85:fe:31:02:88:54:65:ff:64:36:18:e3:3d:38:11:
                    7b:cf:8d:36:ac:7e:30:d2:f9:81:a7:3d:36:b7:3b:
                    18:bd:1b:82:6f:84:33:c8:1d:19:4f:9c:f8:d4:7f:
                    09:0a:48:38:9f:79:ce:e9:11:eb:40:70:a0:24:bd:
                    58:a7:e2:c7:14:39:c5:21:5e:ab:39:f8:2f:5b:f9:
                    b8:bd:5f:8d:ec:54:90:97:28:fe:e2:28:3f:fc:1a:
                    02:63:46:9f:1e:5d:f2:10:45:28:4e:06:2f:c8:04:
                    63:85:02:98:a1:40:0e:f0:ef:81:db:59:6c:83:37:
                    f1:f4:e6:36:10:bc:98:e9:62:ed:41:00:76:fe:60:
                    61:f8:9e:5c:dd:bf:d7:b2:ad:4d:32:84:e9:c3:41:
                    3e:92:88:99:61:e6:e4:42:ce:c3:89:df:ca:e8:3d:
                    28:d7:cf:66:8c:06:0a:86:88:d5:80:80:94:c2:e9:
                    8b:84:b2:1c:e2:13:47:33:5a:b4:91:52:f6:9d:d6:
                    3c:18:9c:0b:b0:2d:f7:49:ab:35:54:af:8f:16:f8:
                    3a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:AC:54:12:01:52:4B:D6:25:B6:2D:FD:7A:8A:B1:5E:FC:05:53:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fd89eaa8-8018-3cab-89c5-193f22b37608.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.205.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:08:e4:ee:3a:56:5a:99:9f:c1:2e:30:11:98:0d:5f:ba:19:
         44:7b:b2:bc:e1:18:f5:b3:13:1d:88:29:ff:95:63:3c:04:10:
         98:7e:b9:bf:94:9c:4f:6c:5e:e9:42:1c:cd:25:e0:23:9f:b7:
         48:6c:4b:05:e0:f5:b0:7f:0a:ec:d0:b5:e0:ed:56:fd:99:68:
         f3:8b:78:f4:4c:a2:8b:bc:17:5e:cc:c8:7f:6d:ec:eb:0a:84:
         53:9f:21:c9:6b:dc:b8:94:61:20:94:35:82:25:eb:e6:90:71:
         a6:72:c7:14:08:6f:c5:8a:57:90:ec:90:fd:97:ad:6f:81:35:
         0a:72:bf:b6:8a:88:a3:5f:4c:f7:d7:1c:f8:d3:05:d6:35:7e:
         8c:e1:ee:ce:9b:19:e0:90:1a:87:d9:2e:e9:8b:8e:b4:32:de:
         29:0e:0f:51:15:07:5f:99:94:63:a3:95:40:82:01:bc:eb:e3:
         02:e5:a5:6e:41:ce:a1:68:68:61:02:32:31:f5:79:61:2a:27:
         60:e2:ed:45:18:58:ec:b0:21:df:9c:69:c8:6b:c3:db:a0:d0:
         82:77:b5:11:93:ab:fd:40:0a:73:c9:98:b4:85:fc:8d:46:1a:
         4d:92:e3:bb:8d:71:bc:5a:03:8e:9a:b2:3f:11:21:38:1d:fb:
         1d:39:52:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----