Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7478acd1-d1d7-3306-9188-e13245360079.roa
File:                     7478acd1-d1d7-3306-9188-e13245360079.roa (raw, json)
Hash identifier:          u9ddCwqdqgDC3ObFsuWrS5qOfU0Ngct6XmeToSsuPss=
Subject key identifier:   A1:B2:DD:F8:B6:F8:3E:38:6C:FE:01:74:71:2E:C3:73:91:96:18:16
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848037B23D622C630FF796DDB00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7478acd1-d1d7-3306-9188-e13245360079.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     20115
IP address blocks:        24.216.80.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7b:23:d6:22:c6:30:ff:79:6d:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=a069e014-0f03-4de9-9e4c-500bbcbbd033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c0:53:87:a3:61:06:cf:c0:3a:ac:44:e2:12:
                    3a:50:19:37:42:22:91:67:69:41:2c:0e:61:39:94:
                    db:a2:52:81:49:0c:33:75:ed:da:23:03:61:30:a2:
                    e9:5c:b9:dc:bc:6d:d2:45:e6:06:9e:21:33:18:ef:
                    bb:bf:4c:79:fa:df:b3:c2:55:b9:8c:46:87:d0:22:
                    f0:a1:bf:4d:c9:44:9d:07:fb:60:a4:fb:f5:f2:24:
                    5f:f9:68:bc:ba:fe:bc:a0:75:44:34:40:9a:95:d7:
                    a1:15:be:69:fa:ed:c8:4c:c0:73:b4:45:fe:f6:ef:
                    7d:d6:82:82:77:64:24:5e:33:3b:da:64:74:ef:ec:
                    a3:39:b1:99:d3:9c:10:e5:36:17:bd:17:1b:cf:cc:
                    9f:40:8b:02:1d:5c:4b:90:f3:3a:2b:94:29:3c:95:
                    c1:65:75:80:46:e1:f1:c8:3d:98:4e:b2:b4:f8:12:
                    6b:02:7e:22:b6:58:be:ec:c9:89:0d:07:e4:6e:31:
                    e3:57:2c:ca:a7:b9:67:06:d0:49:5d:27:de:6a:38:
                    c5:99:73:03:cd:21:d3:ed:59:0b:29:f6:0f:97:2b:
                    75:74:3d:da:0a:65:92:ea:b1:06:9f:8f:ab:63:2c:
                    8b:27:65:32:b4:c6:1e:1c:58:9f:48:23:c3:ef:b8:
                    0f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:B2:DD:F8:B6:F8:3E:38:6C:FE:01:74:71:2E:C3:73:91:96:18:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7478acd1-d1d7-3306-9188-e13245360079.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.216.80.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:f6:7e:84:b6:db:c7:40:f2:69:b5:68:71:cd:04:70:37:a2:
         7b:e4:bd:b2:44:f7:63:4f:4c:4f:98:cf:ab:51:f2:a7:5c:c9:
         00:b4:e8:02:39:99:98:2d:a9:cc:95:9b:36:3d:7e:ae:24:cc:
         e0:63:b4:8c:0f:a1:1e:58:a6:74:db:ab:25:b5:30:ec:be:e9:
         df:d3:cc:9a:eb:8b:3a:b8:ae:b8:73:aa:41:39:d7:9c:52:10:
         c4:25:29:78:6c:f3:2b:e4:84:d0:72:21:a8:ea:59:5c:83:56:
         02:1b:4e:18:79:55:c7:7a:42:59:ce:5d:bf:b4:ca:e3:a6:e7:
         0c:27:4d:94:38:cd:f3:f7:ab:3d:27:87:6d:a2:a9:95:6d:47:
         91:9d:a4:e8:e4:af:08:3d:4b:79:0c:49:f2:bb:4f:32:9f:cd:
         ef:07:37:e5:c8:02:2f:c4:5e:e4:47:0d:15:26:b9:c3:68:4a:
         cc:fb:65:f9:f1:b8:32:34:88:de:d5:38:94:a9:df:f9:07:63:
         79:23:b5:d0:0f:63:a6:3c:2d:77:c9:6b:6f:2a:1e:9d:f0:5c:
         c7:7c:f3:14:28:a5:c1:61:6a:1e:7c:e4:1f:dc:9f:11:a0:db:
         59:f9:7d:82:c0:61:2f:a5:b8:37:e2:c6:59:fe:a4:a6:9d:40:
         1a:ef:4e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----