Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2d544106-455b-318a-b19f-1f4827a11348.roa
File:                     2d544106-455b-318a-b19f-1f4827a11348.roa (raw, json)
Hash identifier:          alQaes8kxU6dx5t77buV/ZU2Xbqxr0zZWsdTejMpC30=
Subject key identifier:   9C:21:78:24:98:FE:7B:65:B5:48:D5:26:D6:06:BC:86:24:DE:C4:1B
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848037B2D00DF8DD8E7260ED680
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2d544106-455b-318a-b19f-1f4827a11348.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     20115
IP address blocks:        71.88.192.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7b:2d:00:df:8d:d8:e7:26:0e:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=2fe9fe26-07ac-4b96-a428-ced2ffe97a6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:68:59:f3:39:00:28:d3:84:fd:1f:0e:c9:48:
                    fb:4b:46:68:cb:56:27:ce:7e:1f:ee:bd:15:8b:4f:
                    59:0e:05:05:82:89:1d:a6:55:d5:2d:e5:e7:27:85:
                    cb:83:ce:26:f3:21:00:e6:0d:da:20:18:de:3c:85:
                    2e:49:e3:b3:9f:e9:ad:d0:70:ee:0c:dc:4f:1b:43:
                    5c:ed:76:5c:ec:41:f5:a5:31:88:97:f8:9b:0c:ca:
                    c0:d9:a0:55:e0:3a:74:31:35:31:23:9f:1d:be:2b:
                    00:59:64:1c:86:8a:24:23:44:10:51:98:b8:4f:84:
                    28:77:ce:b5:70:8a:57:9e:66:4a:5b:78:93:cb:0e:
                    45:65:84:56:b4:ee:56:11:19:f2:cb:89:09:08:66:
                    ec:ea:5f:c9:35:43:d6:04:e5:4e:17:5c:79:23:d2:
                    67:1f:f0:70:70:47:91:fe:29:67:2e:d8:57:a7:52:
                    25:ee:e6:30:50:f6:63:e8:01:c3:28:23:98:1a:1e:
                    83:f0:b4:11:b7:cf:2b:2a:de:0c:bf:81:68:2b:b8:
                    da:a9:02:6b:cc:71:0a:9b:f4:b7:02:2e:b1:a1:b9:
                    a6:54:82:0b:7a:14:66:cb:fe:e9:23:ec:fd:34:9e:
                    bb:d2:6f:9b:30:f9:69:5d:8a:53:5c:57:13:59:d1:
                    5e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:21:78:24:98:FE:7B:65:B5:48:D5:26:D6:06:BC:86:24:DE:C4:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2d544106-455b-318a-b19f-1f4827a11348.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.88.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:28:74:2b:23:f4:6c:ec:54:67:e5:34:62:e6:90:32:d6:66:
         06:6e:80:85:3f:70:0a:af:18:43:c4:42:e3:74:a5:a7:1c:8b:
         f7:d3:a4:1d:aa:6a:1c:f3:7f:23:e0:6a:f5:ca:77:ff:78:23:
         87:54:d9:e6:2f:4d:fa:a1:7a:b3:20:7d:fc:b1:ab:eb:3c:1d:
         64:17:2e:ed:0e:f8:e0:ed:a9:ee:2b:4c:f6:61:ff:c4:16:55:
         b1:6c:ff:35:50:9c:ea:db:b0:39:93:9a:a7:49:20:e5:91:cb:
         e2:17:3c:10:29:06:62:7a:ff:5a:79:28:8d:b6:ec:62:31:69:
         ea:8e:9f:26:a1:84:23:ce:ac:3b:86:7d:df:28:bc:6b:3c:c8:
         5f:0f:47:81:a7:7b:01:11:0d:79:bf:5a:dc:cb:49:40:28:c7:
         03:d0:d7:b8:3d:d2:99:b7:9e:9f:30:51:af:20:68:3f:96:2d:
         b5:5d:2d:36:4c:9e:d6:86:27:89:9a:17:b4:f0:63:06:c3:02:
         69:ce:ec:e5:e3:4f:d6:d6:17:16:95:4f:8b:98:2c:f7:44:93:
         dc:b2:d9:ec:24:f6:83:83:89:d7:4a:77:22:b2:fe:8e:2b:62:
         76:c9:c4:6e:67:66:40:21:15:f1:2f:27:e8:1b:20:e1:19:12:
         d6:93:b9:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----