Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/7e749191-2e43-3084-ab33-137f842ac4e4.roa
File:                     7e749191-2e43-3084-ab33-137f842ac4e4.roa (raw, json)
Hash identifier:          vkTaeWcWeHoT3L0vsvuCksepeAFfW1/iyxqRzEO8h5E=
Subject key identifier:   F6:63:AD:7E:7A:52:77:DA:C8:41:75:56:D5:79:C0:72:83:60:CF:7E
Certificate issuer:       /CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
Certificate serial:       010D0C9F4328584863CB0A24E03B8E8919B0B7AC
Authority key identifier: B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/7e749191-2e43-3084-ab33-137f842ac4e4.roa
Signing time:             Tue 31 Dec 2024 14:00:53 +0000
ROA not before:           Tue 31 Dec 2024 14:00:53 +0000
ROA not after:            Mon 31 Mar 2025 13:00:53 +0000
asID:                     13807
IP address blocks:        24.223.112.0/20 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:63:cb:0a:24:e0:3b:8e:89:19:b0:b7:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
        Validity
            Not Before: Dec 31 14:00:53 2024 GMT
            Not After : Mar 31 13:00:53 2025 GMT
        Subject: CN=06c7809e-10ef-4efe-b047-f1c105b353ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c1:9d:99:66:70:f9:7a:f6:8d:a3:ee:60:d8:
                    65:de:0f:d8:9c:b3:f4:c6:18:55:f4:45:b5:26:26:
                    06:99:30:60:f0:ce:b5:d6:df:22:b9:d5:86:13:7e:
                    76:db:1a:94:43:b2:89:ac:d7:85:9b:00:af:31:f0:
                    0a:8b:df:3a:d5:7d:08:7e:d3:0a:cc:b6:27:71:f8:
                    01:d5:20:cd:42:ce:c5:53:d9:69:59:75:18:00:39:
                    32:b4:87:4e:51:cb:3d:86:a4:bd:8d:0e:a0:27:6d:
                    bb:ba:87:87:e3:3b:10:05:3e:8f:9e:dd:8c:d9:ac:
                    68:1c:e8:1b:bc:f3:49:25:ee:a8:64:de:96:82:e0:
                    7d:05:5f:96:79:a6:38:19:14:c3:ec:33:14:41:29:
                    a7:80:10:cd:e0:e4:63:43:19:70:0a:bf:73:ee:f1:
                    a4:44:52:0e:c0:9f:f9:57:ad:b7:8c:7d:38:9c:72:
                    28:b8:e6:a4:d6:b4:53:0c:b9:75:2c:85:3f:d3:b2:
                    95:4a:aa:91:20:f7:63:60:35:74:96:dc:20:ae:43:
                    bc:28:a4:b2:c6:e7:6b:70:18:9b:bc:f1:80:ac:bf:
                    49:28:a0:e9:d6:1c:19:78:6e:e7:57:96:fe:20:ec:
                    dc:53:3b:27:88:b0:19:a2:0a:39:8d:64:0b:0c:ac:
                    5c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:63:AD:7E:7A:52:77:DA:C8:41:75:56:D5:79:C0:72:83:60:CF:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/7e749191-2e43-3084-ab33-137f842ac4e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl

            X509v3 Authority Key Identifier:
                keyid:B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.223.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:2c:b0:46:67:b0:34:b1:73:89:f2:e2:14:0a:ac:a3:b6:b1:
         e9:7b:26:1d:5f:94:ec:e3:25:cb:59:1e:f6:de:07:73:0d:73:
         55:c2:a0:c1:e5:4b:0d:03:b7:82:1f:e2:22:4d:35:1f:dd:a1:
         7e:b0:03:50:b4:eb:f0:0c:f2:11:cb:00:bd:f2:a5:d1:90:15:
         14:5d:46:e9:61:aa:40:9d:79:22:e5:f4:19:a3:bd:d8:b6:fe:
         32:55:53:7f:54:3d:cc:e8:d8:57:5e:7e:09:fa:6e:f5:07:ce:
         66:f9:f6:b1:e3:10:46:37:d8:6a:3c:55:6c:31:ac:c3:bf:7a:
         86:a6:43:57:a9:35:58:28:c0:f8:e4:2d:25:a0:d5:82:51:dc:
         b2:bc:dc:e3:9c:3d:b8:34:b7:30:6b:fa:0b:e1:ac:ed:83:5a:
         de:42:36:d7:88:97:43:02:a0:74:41:d0:73:16:f6:10:93:4f:
         55:8c:6d:b5:a0:ed:2a:f6:fc:ac:d3:ba:9d:e9:52:2b:97:f2:
         47:6b:56:57:f4:31:96:7e:39:24:b7:a6:c8:5a:36:ad:15:b5:
         f8:35:11:79:5c:7a:45:84:91:11:95:da:6b:a8:3f:2e:4d:62:
         d8:33:3e:51:12:de:b7:1b:89:80:a2:84:0b:b9:67:34:69:26:
         09:0e:c0:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----