Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/bcc30403-87eb-3c69-8f8d-9f0ffc87e28b.roa
File:                     bcc30403-87eb-3c69-8f8d-9f0ffc87e28b.roa (raw, json)
Hash identifier:          kOkMdxLTvGD1KURpU735DWsNmjSWwz3b73sDRpOYdAU=
Subject key identifier:   8E:04:CD:F3:41:E9:AA:E1:CD:87:0F:4B:E4:53:22:4E:87:81:97:43
Certificate issuer:       /CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
Certificate serial:       010D0C9F43285847FF4A4F79F711C49CA8321510
Authority key identifier: B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/bcc30403-87eb-3c69-8f8d-9f0ffc87e28b.roa
Signing time:             Mon 25 Nov 2024 14:00:39 +0000
ROA not before:           Mon 25 Nov 2024 14:00:39 +0000
ROA not after:            Sun 23 Feb 2025 14:00:39 +0000
asID:                     13807
IP address blocks:        216.8.192.0/18 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ff:4a:4f:79:f7:11:c4:9c:a8:32:15:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
        Validity
            Not Before: Nov 25 14:00:39 2024 GMT
            Not After : Feb 23 14:00:39 2025 GMT
        Subject: CN=5c47d013-b0dc-4adc-8a9c-5d37f47bda07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f9:5b:04:d7:e7:2b:d2:fc:46:10:c8:ae:1e:
                    f0:13:d3:03:85:16:3b:83:42:00:b5:52:3c:75:f4:
                    0e:b3:32:89:f4:54:d1:40:26:14:e0:67:38:4c:4e:
                    d5:36:88:26:c2:34:9d:e9:2e:9d:f2:95:0f:64:d0:
                    4d:75:a6:06:0d:83:25:a9:9b:d9:d7:13:e5:a7:e3:
                    27:8e:ab:db:0c:6c:6f:49:92:5b:34:5a:cb:c9:76:
                    af:6e:55:f4:d8:0b:e1:84:69:1e:b8:72:13:f8:ab:
                    b9:d9:8d:a7:3c:f9:d6:09:44:12:f7:42:6a:67:69:
                    b9:44:09:fb:bf:e0:23:6f:52:e7:07:7d:a7:c9:8a:
                    49:02:d0:d7:13:51:15:12:ae:3f:ac:a1:28:fe:59:
                    e0:ec:87:a2:bf:83:b8:76:b6:b9:80:a1:96:0b:11:
                    d1:07:e9:52:ad:a0:04:b9:e6:d8:bd:00:b1:b1:0b:
                    b3:00:94:89:65:d6:48:0e:41:bc:31:ef:a7:40:4c:
                    45:df:18:23:f3:43:2e:62:40:2e:56:e7:b5:9f:46:
                    7f:61:e3:f8:80:83:96:4b:20:f2:64:e9:df:c1:37:
                    8a:bb:5b:9d:9d:da:db:04:ae:8a:96:4a:0d:08:15:
                    35:a1:0f:d0:9d:97:a7:34:8b:8e:3a:72:ab:43:37:
                    32:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:04:CD:F3:41:E9:AA:E1:CD:87:0F:4B:E4:53:22:4E:87:81:97:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/bcc30403-87eb-3c69-8f8d-9f0ffc87e28b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl

            X509v3 Authority Key Identifier:
                keyid:B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.8.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:a6:c2:dd:dc:2c:6e:02:08:ea:19:33:3e:70:94:e3:6f:00:
         79:12:00:f9:31:2e:da:b8:9e:da:04:39:16:1c:2b:3e:56:65:
         d1:23:1a:a9:a9:c6:41:eb:0b:f1:93:5c:0f:8d:e7:af:34:78:
         63:1c:f6:9c:3c:f5:db:e2:e6:b7:de:a2:c6:b5:f4:48:9c:d1:
         d5:b3:2a:1b:ec:7f:07:7a:d0:65:10:5e:81:55:51:43:c5:17:
         3a:f1:fb:a9:5b:62:ca:c1:ba:32:02:04:43:88:a7:80:a0:9a:
         0c:c3:73:e1:a2:64:74:51:9c:b4:ad:98:60:06:64:47:e4:93:
         aa:e4:f9:69:59:f0:e7:96:4f:ce:72:dd:c8:5f:b7:34:52:ee:
         f0:56:b4:e6:b5:33:e5:f0:8c:8d:ff:d7:b2:cb:ab:6f:e3:22:
         ba:00:fd:84:ad:ac:c1:89:06:9b:9d:58:8e:69:01:2b:02:1d:
         13:18:4a:cf:67:43:9d:9d:84:1c:7d:ed:a4:bf:62:25:91:09:
         78:b1:dd:4d:c2:aa:e7:ae:87:8d:f6:aa:ca:b3:a8:8d:c4:f2:
         de:4b:ac:39:59:d2:50:68:28:89:bc:2f:08:0d:3e:c8:47:0b:
         dc:e1:68:42:a6:7d:35:cc:a2:72:ef:66:24:eb:c8:11:d7:1c:
         26:01:12:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----