Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9d4d0e8b-df52-4033-8ede-1f00c69412ba/79478485-67f1-3e17-8641-73be6a6774f6.roa
File:                     79478485-67f1-3e17-8641-73be6a6774f6.roa (raw, json)
Hash identifier:          LPCJDVSAUI2gilEZ0lBv9eYpxZ7r9AZOwgN5TKxV0jU=
Subject key identifier:   0A:83:1A:5A:73:B2:2D:8E:32:CF:BB:4F:89:D0:B2:5C:79:2A:A8:C6
Certificate issuer:       /CN=9d4d0e8b-df52-4033-8ede-1f00c69412ba
Certificate serial:       010D0C9F432858447DBF36BF3DAE426368CB7560
Authority key identifier: 3E:C0:79:9B:58:B6:1A:C0:FE:10:11:04:83:57:5E:4E:22:35:30:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9d4d0e8b-df52-4033-8ede-1f00c69412ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9d4d0e8b-df52-4033-8ede-1f00c69412ba/79478485-67f1-3e17-8641-73be6a6774f6.roa
Signing time:             Tue 09 Jan 2024 02:00:24 +0000
ROA not before:           Tue 09 Jan 2024 02:00:24 +0000
ROA not after:            Mon 08 Apr 2024 01:00:24 +0000
asID:                     61317
IP address blocks:        199.188.239.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:7d:bf:36:bf:3d:ae:42:63:68:cb:75:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d4d0e8b-df52-4033-8ede-1f00c69412ba
        Validity
            Not Before: Jan  9 02:00:24 2024 GMT
            Not After : Apr  8 01:00:24 2024 GMT
        Subject: CN=6ca20db4-225e-4e4d-af2b-37cd6b204430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f1:64:d9:90:6a:c7:06:a5:77:87:80:15:59:
                    da:8e:b9:d4:21:e7:d2:97:8a:ba:fd:de:c3:a3:9c:
                    1c:ab:52:29:18:cf:e3:91:c5:8f:3f:01:42:24:92:
                    54:50:39:78:02:a7:e5:6c:9d:0e:b3:ae:08:39:20:
                    4a:ba:c5:66:60:a3:36:ab:d6:e3:3a:a7:95:ce:51:
                    af:da:76:24:99:4f:b1:59:4f:d4:68:b6:57:0f:07:
                    f8:e8:5f:72:ab:b4:94:55:16:1a:8e:ce:73:bd:9d:
                    3c:8e:49:9d:bd:10:83:3f:a1:e3:52:d8:d5:2d:fb:
                    32:bb:99:1a:26:44:16:f6:2e:30:70:9b:c6:e8:7b:
                    92:4c:b3:9b:81:58:f2:92:4b:c3:5a:64:6e:f9:11:
                    b9:31:72:9e:3d:7c:13:94:a0:2c:e9:16:48:aa:3b:
                    a2:93:b1:dc:20:0b:1c:63:0d:b6:16:b6:37:8b:33:
                    6b:b9:cb:e6:b9:5c:f6:34:ab:38:a9:03:3a:f3:eb:
                    af:cc:ba:11:8f:69:bc:0f:a6:7b:41:0f:9d:47:1d:
                    92:d6:d1:09:dc:e7:74:ac:5a:5c:4e:62:cb:58:10:
                    36:5e:3d:5c:1a:5e:44:7f:2c:1d:b7:c7:93:87:37:
                    67:32:e3:61:2d:59:3a:b7:7f:74:02:c2:c3:96:1c:
                    a7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:83:1A:5A:73:B2:2D:8E:32:CF:BB:4F:89:D0:B2:5C:79:2A:A8:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9d4d0e8b-df52-4033-8ede-1f00c69412ba/79478485-67f1-3e17-8641-73be6a6774f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9d4d0e8b-df52-4033-8ede-1f00c69412ba/9d4d0e8b-df52-4033-8ede-1f00c69412ba.crl

            X509v3 Authority Key Identifier:
                keyid:3E:C0:79:9B:58:B6:1A:C0:FE:10:11:04:83:57:5E:4E:22:35:30:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9d4d0e8b-df52-4033-8ede-1f00c69412ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.188.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:5f:32:90:8c:42:9f:a6:cf:af:72:1f:4a:7e:af:07:63:b0:
         8f:60:e3:08:a4:c2:55:37:23:75:85:49:15:f7:5a:87:ce:a5:
         b1:87:c7:94:14:3d:5e:96:f0:6f:c3:0d:dc:f4:8e:8f:4d:4a:
         0a:9c:3f:c3:9b:c7:74:02:3a:64:e4:b3:da:e7:25:95:c6:3b:
         76:28:e9:e4:fd:5a:58:86:c7:a9:85:f9:ad:43:b5:20:d3:5b:
         01:31:ab:05:fe:60:ff:de:ec:7c:83:57:9e:80:65:97:63:61:
         a6:f9:a1:18:14:b2:ae:de:9a:06:c5:32:04:5a:8d:ba:80:98:
         48:f7:83:a3:e0:51:c3:ce:41:e0:85:b5:f1:d6:78:ba:f7:52:
         e8:41:e4:69:4e:83:a3:45:8e:25:75:ee:6f:a7:c0:ae:d8:1a:
         f1:7f:e8:c4:ad:89:e7:f4:5a:47:8b:34:6f:c6:b5:9b:dd:78:
         e2:fd:f5:41:f7:2f:c5:5d:af:1d:d4:45:b2:ee:25:a8:80:ef:
         8b:83:78:51:ec:fd:a1:20:d3:ec:f8:86:17:a7:ed:90:fe:85:
         1c:62:1f:8f:2f:e3:6b:3c:2b:23:27:02:f5:d8:a9:11:ae:a7:
         19:0f:34:32:f4:ac:75:a2:37:a9:b3:13:e4:4f:86:e9:da:a6:
         4e:ec:12:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----