Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7f319efb-27f6-468b-9705-501dc2a6f80e/747ea174-725b-38d9-9857-35e635f1eb69.roa
File:                     747ea174-725b-38d9-9857-35e635f1eb69.roa (raw, json)
Hash identifier:          ipxeC+hk19aPPLq7h+abe7RRwItlQM5sTf6wZlusoS0=
Subject key identifier:   1E:18:5A:99:1B:DF:E8:3F:58:40:9D:28:39:8E:FD:1A:F4:F3:CA:24
Certificate issuer:       /CN=7f319efb-27f6-468b-9705-501dc2a6f80e
Certificate serial:       010D0C9F43285846E5357EDB992103B2928CAB00
Authority key identifier: 20:D8:EA:2F:A2:40:4B:02:11:28:F6:E3:7E:2C:56:E6:CB:91:DA:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7f319efb-27f6-468b-9705-501dc2a6f80e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7f319efb-27f6-468b-9705-501dc2a6f80e/747ea174-725b-38d9-9857-35e635f1eb69.roa
Signing time:             Fri 16 Aug 2024 13:00:40 +0000
ROA not before:           Fri 16 Aug 2024 13:00:40 +0000
ROA not after:            Thu 14 Nov 2024 14:00:40 +0000
asID:                     17048
IP address blocks:        186.190.208.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:e5:35:7e:db:99:21:03:b2:92:8c:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f319efb-27f6-468b-9705-501dc2a6f80e
        Validity
            Not Before: Aug 16 13:00:40 2024 GMT
            Not After : Nov 14 14:00:40 2024 GMT
        Subject: CN=3556cd94-187b-4692-b29c-c1769e4b8a1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:23:23:0b:c6:66:00:b2:65:3a:4e:81:b2:e5:
                    e1:be:47:48:49:57:b3:df:a3:ef:0f:23:13:53:56:
                    3b:47:aa:5f:d7:93:13:be:01:ef:5d:99:ba:5c:f3:
                    cd:01:43:e2:50:9d:0d:9b:11:2f:ff:bb:20:92:45:
                    3e:00:92:35:48:c9:82:fb:19:24:16:c3:72:64:58:
                    cd:b7:81:d9:c5:bc:3d:09:1a:5f:62:df:68:e5:da:
                    bc:10:75:bd:59:a2:fe:3b:99:e4:24:85:41:cf:76:
                    18:d5:2a:e3:a7:7f:c3:31:c8:00:17:8b:bd:9f:08:
                    8c:c3:e7:77:2a:2f:e0:4b:79:0d:3b:64:9f:8a:f4:
                    96:74:d5:f6:84:c9:68:2c:3a:a4:df:d8:05:46:23:
                    8c:45:c4:3e:06:e8:91:0c:af:05:b2:4c:08:3d:45:
                    25:e8:74:c3:d7:64:a8:db:ee:41:c4:d3:76:de:aa:
                    31:d7:ca:8e:f2:d0:67:ef:b7:cf:33:72:8b:bd:fa:
                    a6:10:71:9b:fa:5e:15:6c:8b:61:98:64:19:21:77:
                    07:6c:5d:77:09:9b:b3:f7:2c:c9:8f:d5:94:4c:2a:
                    62:1c:5f:31:35:dc:41:5b:4e:b4:9f:4f:d3:56:3b:
                    b4:8d:d7:bb:64:f3:08:93:45:20:a1:1d:65:7b:db:
                    84:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:18:5A:99:1B:DF:E8:3F:58:40:9D:28:39:8E:FD:1A:F4:F3:CA:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7f319efb-27f6-468b-9705-501dc2a6f80e/747ea174-725b-38d9-9857-35e635f1eb69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7f319efb-27f6-468b-9705-501dc2a6f80e/7f319efb-27f6-468b-9705-501dc2a6f80e.crl

            X509v3 Authority Key Identifier:
                keyid:20:D8:EA:2F:A2:40:4B:02:11:28:F6:E3:7E:2C:56:E6:CB:91:DA:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7f319efb-27f6-468b-9705-501dc2a6f80e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.190.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:26:5c:66:1a:ba:1c:da:62:34:91:54:b6:a2:d9:77:7b:10:
         89:94:7a:f7:33:84:5d:b2:32:b7:5a:20:7a:ea:25:d4:6b:41:
         70:34:ca:d7:34:a6:6d:75:44:1d:12:77:c4:79:fd:80:65:bf:
         76:54:bc:87:7a:a4:80:35:1d:2f:ae:44:ae:1c:be:7e:81:8c:
         18:e6:c1:03:92:8e:c6:a9:3c:91:22:42:91:8f:d3:e9:c9:51:
         41:91:06:7d:e2:33:fa:c4:e0:9a:10:9e:2e:e2:29:d8:49:09:
         a4:87:48:07:ac:40:57:88:28:99:2c:24:6b:b4:51:c1:c0:e9:
         04:64:06:6e:0d:be:7f:17:12:5d:98:60:b4:29:cc:e8:af:cb:
         03:ac:50:79:e9:02:70:91:04:f4:e2:e9:1b:d0:43:9d:d8:25:
         85:29:cd:af:62:5f:f0:0d:19:ae:b0:4a:ce:08:b5:e9:89:71:
         73:b6:97:ae:79:c9:b4:0d:9b:92:3e:04:af:70:f4:81:96:a3:
         05:94:1a:c3:73:2d:e4:4c:ab:f9:41:29:bf:ef:a5:b7:bf:a2:
         43:c6:42:cd:99:7c:83:92:48:8d:f2:c1:56:53:f3:8f:7a:da:
         23:e1:91:d2:57:c4:1e:3f:ea:35:98:38:83:83:f6:40:b2:a9:
         12:f1:2b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----