Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/11729fca-8fe7-346f-86fc-0cb8e5c2e3ec.roa
File:                     11729fca-8fe7-346f-86fc-0cb8e5c2e3ec.roa (raw, json)
Hash identifier:          te50H4hMF896bf2qxly2YAszl9M/Reyfx0SQ/1I65Rg=
Subject key identifier:   EB:70:F7:42:5C:06:76:75:D8:CC:31:DC:C3:DC:73:86:83:8F:9C:C2
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848037B1F5B04D82E6D1D86E5E0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/11729fca-8fe7-346f-86fc-0cb8e5c2e3ec.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     20115
IP address blocks:        71.8.16.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7b:1f:5b:04:d8:2e:6d:1d:86:e5:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=6632f8bb-964d-4e20-b51f-f1d8995ca94b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7e:bb:28:b9:5e:85:5b:cd:31:4e:ef:b5:dd:
                    81:56:28:ce:5e:a0:18:40:9d:f5:e5:3f:8d:a1:e8:
                    32:94:c0:34:ed:b9:e5:82:84:cc:57:33:4b:40:38:
                    32:df:9b:22:33:f1:43:d2:49:6c:dc:55:4b:3e:8c:
                    d1:a3:51:a8:76:42:ce:6b:83:40:e1:80:6b:03:aa:
                    77:ca:74:54:26:1b:11:71:2d:64:61:f5:2f:2c:15:
                    a3:ac:12:67:07:3c:6d:48:91:1c:6f:a3:dd:83:b4:
                    ea:f9:d9:22:77:8d:e1:8e:74:13:c5:ae:1e:63:5b:
                    f8:7a:b9:dc:84:9f:d1:39:3e:42:fa:d8:24:93:72:
                    67:0c:55:1f:1e:10:12:f1:34:d2:0d:b0:2b:0a:b5:
                    de:dc:9f:41:40:e5:48:16:18:2d:a3:5d:46:3a:05:
                    b3:69:e1:e0:67:be:3c:d8:df:8d:8e:e2:4d:83:1a:
                    be:94:e5:1e:34:a8:6f:56:a5:14:a7:0d:e1:04:bf:
                    ea:d2:61:e8:84:39:3a:3b:03:7e:bc:32:56:9f:fb:
                    37:f3:15:4b:9a:31:ed:da:26:d6:0a:43:a8:3e:ec:
                    55:43:bd:bb:d8:c2:b5:b7:1f:5b:3e:22:ff:d8:c2:
                    2d:63:50:ed:4f:61:cf:14:58:fd:17:de:a7:b0:86:
                    4c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:70:F7:42:5C:06:76:75:D8:CC:31:DC:C3:DC:73:86:83:8F:9C:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/11729fca-8fe7-346f-86fc-0cb8e5c2e3ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.8.16.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:bd:b1:7c:ee:58:b9:b4:6e:3f:20:fe:d9:94:64:c2:0f:15:
         57:eb:c0:8f:ad:dd:f0:55:5e:a3:0b:93:09:fb:a7:5f:cf:5c:
         a9:a8:f1:84:39:01:0f:af:92:48:16:d2:93:7f:12:b3:5f:32:
         70:00:78:db:39:3a:2a:da:76:3d:da:d2:9b:cc:3d:2e:22:30:
         88:a5:e0:e0:3b:3f:22:e7:2b:72:d1:c2:d1:f1:4c:76:99:0c:
         c2:0d:1b:64:2a:a7:3b:a3:cf:a8:b7:4d:d5:14:dd:a9:94:16:
         88:b9:af:e2:d8:34:e3:56:f9:c9:f3:69:bf:ee:70:ae:00:25:
         3f:18:16:f9:47:2e:8e:db:ad:24:e6:b9:c8:05:a7:46:98:2a:
         0a:8a:a2:9c:d6:3d:a2:d1:53:0f:e0:d2:91:38:5a:d8:35:bc:
         c7:58:ad:88:a0:df:10:d9:2c:7c:4a:9e:38:b2:d5:8a:ad:6f:
         cf:a7:87:2e:c0:4e:6a:85:45:13:5f:ba:c9:83:e8:0a:63:e3:
         a6:64:51:be:e4:20:4e:9a:27:ec:7b:2f:d1:57:58:2d:48:cc:
         7a:49:5d:16:1a:20:f3:13:36:75:3a:c2:d1:47:09:9a:24:1f:
         e3:5e:88:6b:ad:3c:ee:6f:9e:f0:62:73:06:e1:5f:66:db:d4:
         b3:95:55:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----