Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/caeeda35-12d7-3682-b5f9-940c9406f1df.roa
File:                     caeeda35-12d7-3682-b5f9-940c9406f1df.roa (raw, json)
Hash identifier:          tn+FFksEBR7ggQfZqYw3fR08PiIrS2TN34czXRWGbtM=
Subject key identifier:   AF:FD:F4:50:63:45:6D:14:E1:5B:A5:8F:2B:4A:02:4F:75:25:5D:02
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F43285848530AF56632A35D0AEF4CF600
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/caeeda35-12d7-3682-b5f9-940c9406f1df.roa
Signing time:             Wed 25 Dec 2024 14:00:52 +0000
ROA not before:           Wed 25 Dec 2024 14:00:52 +0000
ROA not after:            Tue 25 Mar 2025 13:00:52 +0000
asID:                     401104
IP address blocks:        144.172.118.0/23 maxlen: 24
                          2605:6400:d814::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:53:0a:f5:66:32:a3:5d:0a:ef:4c:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: Dec 25 14:00:52 2024 GMT
            Not After : Mar 25 13:00:52 2025 GMT
        Subject: CN=ae1c4144-60cc-4d8f-b6f5-e32d65906fcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f7:8a:31:c4:5f:ff:3b:6e:ef:d9:4f:9d:8c:
                    0e:a0:3a:e7:d0:8a:d2:b8:7d:a7:a0:a3:e3:3c:2c:
                    18:71:bf:23:d2:5d:3a:37:61:8d:1c:11:d3:32:11:
                    84:aa:97:78:94:99:7b:23:a4:4b:e9:ea:62:2b:4b:
                    cf:46:af:50:07:49:99:86:a4:94:11:b8:ec:4d:f3:
                    f4:ac:a5:95:d7:b6:ba:08:de:ba:fb:c4:54:23:cf:
                    18:67:9c:47:73:a1:81:82:4e:29:6c:32:c9:09:ec:
                    29:9c:c5:94:8d:a4:bf:4a:ab:50:08:35:4d:0f:96:
                    f9:e5:53:7d:6c:8a:d0:30:f5:7d:bd:80:ad:fe:6c:
                    43:19:3c:3f:ee:d4:a2:2e:3f:c5:50:bf:91:93:60:
                    b4:7b:2b:4d:df:34:db:c7:64:e3:c3:48:b4:4d:ff:
                    ae:b1:3e:08:48:b5:56:a3:be:ff:d1:f3:1c:ed:8d:
                    8a:5c:4d:70:98:8a:af:b5:36:77:b5:24:24:3f:79:
                    9e:e0:04:08:9a:3b:38:62:41:aa:fc:65:f0:0b:e3:
                    47:4b:35:67:57:f6:5a:61:4b:a9:fe:24:c4:2e:17:
                    c1:d9:6c:f6:c9:cb:94:59:c5:1c:17:33:b7:54:01:
                    9c:87:f5:9c:0e:33:5b:d7:74:57:b4:4e:e9:c8:93:
                    35:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:FD:F4:50:63:45:6D:14:E1:5B:A5:8F:2B:4A:02:4F:75:25:5D:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/caeeda35-12d7-3682-b5f9-940c9406f1df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.172.118.0/23
                IPv6:
                  2605:6400:d814::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:5f:8e:e2:01:24:e7:31:60:6f:9d:2b:a6:68:89:b0:b8:44:
         ca:a9:96:37:8b:9a:49:00:9c:76:b0:9c:27:07:6e:33:4a:5b:
         19:c0:7f:40:c1:a8:82:d2:8b:27:9f:e2:f0:f2:6e:0e:ae:fc:
         87:3d:3d:2a:c7:2d:24:f5:ae:8f:54:ad:37:41:1a:c8:79:a8:
         62:d0:3e:3d:8e:63:4d:fe:9b:a1:21:f3:65:ca:5a:16:50:d6:
         7f:89:d5:ae:10:b2:dd:21:65:89:d1:84:67:51:b7:58:f8:31:
         2d:44:30:ef:0d:60:dc:07:3a:ae:aa:47:d6:f5:b3:8f:1a:c7:
         1c:9e:0a:86:16:d4:e1:80:91:81:a7:44:50:67:0a:6a:46:9a:
         86:ca:dc:fb:ec:d7:3e:76:56:db:8c:cb:df:c6:8a:97:8a:07:
         4c:e8:ca:ee:a3:ae:94:78:01:bb:f3:49:6b:80:27:70:f1:de:
         8e:85:74:b3:02:25:c5:18:70:15:43:92:d1:f5:71:3d:44:ce:
         ce:fa:9e:25:21:2d:14:d0:02:51:16:2d:ef:0e:e6:4d:55:5c:
         5a:de:70:df:a1:99:27:e2:b4:f3:1d:8b:27:d6:a8:ba:a4:7d:
         bd:db:ae:81:46:fb:4a:2f:bc:b8:48:07:14:75:4c:2f:21:8b:
         12:d8:15:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----