Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fe92a841-6ac8-3125-a7b7-e4ecb562e36d.roa
File:                     fe92a841-6ac8-3125-a7b7-e4ecb562e36d.roa (raw, json)
Hash identifier:          oxjbPyTGNAGXzwm50Z3/uNL4s0xtvbCL80Y+8Hg8H+c=
Subject key identifier:   70:41:05:15:51:B1:ED:51:E8:72:4C:F2:D1:6F:35:EC:8E:A5:26:20
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584832F04B191AA31A60C203A000
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fe92a841-6ac8-3125-a7b7-e4ecb562e36d.roa
Signing time:             Sat 14 Dec 2024 02:00:39 +0000
ROA not before:           Sat 14 Dec 2024 02:00:39 +0000
ROA not after:            Fri 14 Mar 2025 01:00:39 +0000
asID:                     701
IP address blocks:        173.49.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:f0:4b:19:1a:a3:1a:60:c2:03:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Dec 14 02:00:39 2024 GMT
            Not After : Mar 14 01:00:39 2025 GMT
        Subject: CN=8e2eda88-a236-4712-8dc4-2b2db47d24b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:48:ba:eb:43:ee:05:ad:d5:0e:40:42:71:7e:
                    5c:4a:3b:9f:ec:d7:bc:ba:1e:4a:2a:7f:51:10:53:
                    6f:db:62:14:b4:67:e2:ca:44:68:fb:3c:74:0d:e2:
                    a0:0c:7b:f8:65:85:c8:aa:24:22:8c:01:2f:67:03:
                    da:b4:06:fa:e0:18:33:12:ea:aa:8b:6a:eb:a4:c9:
                    f7:bb:fc:e3:96:4d:de:d8:51:da:1d:11:bd:14:e4:
                    ee:33:8c:f9:3f:c2:69:53:b5:47:39:b1:10:34:41:
                    26:fb:43:4e:d3:03:66:32:e8:6c:98:d1:74:e4:ae:
                    31:b4:db:31:c2:4a:6d:42:d2:8c:92:80:27:0a:d2:
                    4a:f8:bb:3f:3f:4c:98:81:93:ce:54:bd:45:87:69:
                    08:28:74:ec:f9:bd:18:c1:19:54:3c:1b:57:b8:1f:
                    4f:85:4a:49:65:d9:b1:c5:76:25:f7:f9:ef:47:5b:
                    9a:42:a6:f3:68:91:d8:eb:63:5b:eb:0d:52:bd:fc:
                    a2:a0:23:17:ec:86:8b:2d:82:97:92:95:c0:7c:3b:
                    2d:51:93:51:53:a3:62:ab:c6:71:61:a6:92:3a:33:
                    45:e6:d9:13:84:38:c3:53:4e:0f:77:82:99:78:7d:
                    1e:d9:7e:a4:2e:11:f2:60:cf:15:75:77:a4:8a:aa:
                    7a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:41:05:15:51:B1:ED:51:E8:72:4C:F2:D1:6F:35:EC:8E:A5:26:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fe92a841-6ac8-3125-a7b7-e4ecb562e36d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.49.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:0a:f6:e0:45:5d:cb:ae:36:4e:47:a5:d9:c4:22:c3:9a:c3:
         7f:79:d7:ea:f7:2e:3a:2a:9b:42:e9:fd:4a:12:00:e3:d0:5b:
         3b:44:36:03:67:dd:98:74:5f:26:26:36:27:b5:93:a1:aa:c4:
         09:04:90:2f:93:ff:63:2e:0e:b5:bf:4b:80:f0:9b:82:af:56:
         8e:3e:c2:78:30:f5:99:44:2e:93:00:6b:f0:8e:f6:09:dd:1f:
         8b:a2:ac:00:09:11:73:97:fa:6f:5a:65:cc:a6:3f:09:b7:63:
         d6:48:82:73:c4:40:8a:b3:c6:36:8c:51:d0:32:4e:2d:23:46:
         46:35:0b:be:dd:c7:4c:c0:9b:0b:15:b8:af:72:05:db:1c:e6:
         f1:e8:21:c9:b5:da:52:d1:fa:bf:c5:13:9b:e1:6b:48:49:17:
         e2:ee:15:27:19:77:6b:8b:f3:1c:b8:a4:c0:5c:6c:8f:8b:38:
         be:b0:17:c3:23:f1:87:5e:89:62:43:34:e0:7e:2e:d0:8f:01:
         e6:36:53:17:a3:5d:70:80:64:0b:51:88:21:a9:23:0e:93:cb:
         e3:54:94:fa:ac:99:05:31:b9:17:15:d7:5f:97:96:28:8b:c4:
         7b:64:dc:c6:f5:c7:4c:ce:3e:a6:55:5d:5b:77:b3:23:eb:6d:
         2a:ef:46:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----