Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1eba12ff-c221-4ab3-9aa6-d542d0812543/178d43be-7fcb-33ce-91a3-0b6220dbd542.roa
File:                     178d43be-7fcb-33ce-91a3-0b6220dbd542.roa (raw, json)
Hash identifier:          5X5Qf8MG7LFGYE7AbT+rFUBt4XCPxozEGzp+oi7aqgM=
Subject key identifier:   98:87:53:CA:BB:39:00:16:7C:FC:D7:22:3C:51:F0:BC:86:09:D2:03
Certificate issuer:       /CN=1eba12ff-c221-4ab3-9aa6-d542d0812543
Certificate serial:       010D0C9F43285848EFBB5A551B59B11F92EA9280
Authority key identifier: 3B:70:9B:73:AD:F2:99:6A:00:65:29:B1:43:4D:FC:F5:D2:40:52:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1eba12ff-c221-4ab3-9aa6-d542d0812543.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1eba12ff-c221-4ab3-9aa6-d542d0812543/178d43be-7fcb-33ce-91a3-0b6220dbd542.roa
Signing time:             Wed 19 Feb 2025 17:02:35 +0000
ROA not before:           Wed 19 Feb 2025 17:02:35 +0000
ROA not after:            Tue 20 May 2025 16:02:35 +0000
asID:                     10973
IP address blocks:        216.128.100.124/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:bb:5a:55:1b:59:b1:1f:92:ea:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1eba12ff-c221-4ab3-9aa6-d542d0812543
        Validity
            Not Before: Feb 19 17:02:35 2025 GMT
            Not After : May 20 16:02:35 2025 GMT
        Subject: CN=d60d3ee0-7d19-4199-8573-0f3c5ca88f03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3c:46:13:dc:fb:81:8e:f6:59:f6:91:b4:d6:
                    18:3b:f2:55:70:10:cc:9b:09:0b:e1:03:3e:1e:01:
                    d0:a1:69:c5:63:70:5a:b8:da:03:2e:3f:bb:84:9c:
                    34:10:2c:e0:9d:e3:f1:12:d0:df:e5:17:48:a9:49:
                    41:1d:0f:63:7b:20:42:dc:bc:8c:3b:c0:0b:b8:ba:
                    58:06:61:8c:13:9c:9e:33:52:b2:32:91:c2:16:79:
                    c3:46:d9:0d:4a:2e:83:02:a9:e9:1e:86:8c:bb:50:
                    13:5b:23:91:84:a9:ff:71:18:26:52:f9:9a:b0:0f:
                    fe:f4:f7:aa:5a:4d:f1:c7:3c:92:3e:9b:5e:d8:bf:
                    1c:ba:fa:7d:25:fe:00:3b:0c:c4:8f:8e:61:c4:4e:
                    e3:fe:39:9a:17:b0:c2:27:c0:45:53:82:e3:36:f1:
                    64:b9:69:1f:bc:16:fc:9d:43:6e:ea:7f:f2:ab:09:
                    ce:68:56:05:74:f4:aa:57:28:7f:18:a9:16:bb:d6:
                    d5:26:d0:42:57:97:e8:9c:c8:71:d3:f0:50:55:2a:
                    03:1e:e0:63:57:5b:45:b1:67:15:70:e6:fe:c1:2e:
                    36:56:c0:22:b6:07:86:ce:dd:73:d5:04:ed:45:2b:
                    c2:b2:65:55:4f:88:23:8f:34:e4:cc:fa:62:63:3e:
                    1a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:87:53:CA:BB:39:00:16:7C:FC:D7:22:3C:51:F0:BC:86:09:D2:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1eba12ff-c221-4ab3-9aa6-d542d0812543/178d43be-7fcb-33ce-91a3-0b6220dbd542.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1eba12ff-c221-4ab3-9aa6-d542d0812543/1eba12ff-c221-4ab3-9aa6-d542d0812543.crl

            X509v3 Authority Key Identifier:
                keyid:3B:70:9B:73:AD:F2:99:6A:00:65:29:B1:43:4D:FC:F5:D2:40:52:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1eba12ff-c221-4ab3-9aa6-d542d0812543.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.128.100.124/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:40:b8:cc:11:2b:c8:63:d8:6b:7a:6d:bc:52:7b:ce:de:6e:
         8e:08:3a:b8:82:99:16:c6:8e:8a:14:8b:d1:a5:ad:d5:01:ec:
         63:e5:2e:c0:6c:5a:25:2a:c9:e8:ea:37:59:87:00:0f:ca:86:
         28:80:ed:5f:f1:ba:33:6c:70:f3:32:0b:33:ef:7f:f1:05:25:
         f5:1d:eb:ba:28:2c:02:73:e2:e1:8c:e9:1e:01:ab:4d:2b:70:
         0a:74:d8:bb:c3:98:8e:d3:78:fc:b2:fd:56:26:b5:6a:30:f2:
         2e:65:10:8a:95:e2:3d:e8:12:ed:d1:4f:5a:92:28:e3:0c:23:
         15:7e:07:40:a0:82:2a:52:0c:34:7a:ae:64:c9:bf:61:76:90:
         f3:fa:82:77:5e:ea:ed:fa:b3:5a:37:cf:f2:d7:02:85:6d:69:
         df:df:ec:a5:35:03:90:20:99:a0:8f:d5:16:62:0f:b7:69:e0:
         30:a3:a9:53:e4:8b:e1:a7:f3:85:81:4a:0b:7a:82:15:b4:42:
         3c:e7:dc:27:65:74:ee:cd:56:f6:0d:2e:e1:5e:91:75:d9:88:
         9b:bf:70:ed:7a:0d:09:72:48:af:8a:03:9a:21:64:cd:17:e9:
         ab:27:35:b2:18:2d:fe:aa:f1:ed:32:bf:ee:73:d9:29:0b:0d:
         ca:da:7c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----