Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b0d900de-c1ae-3c0a-b49d-aeb3d2251ee6.roa
File:                     b0d900de-c1ae-3c0a-b49d-aeb3d2251ee6.roa (raw, json)
Hash identifier:          h1BxM4Ri5/O9dWfB7nYNTwBaKvCr63ONKJoISY1ejCI=
Subject key identifier:   CF:30:77:BF:CB:4C:ED:F9:16:07:30:9C:48:42:E5:9B:3B:8D:D3:D6
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584556B57F199C31B3632A513400
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b0d900de-c1ae-3c0a-b49d-aeb3d2251ee6.roa
Signing time:             Mon 25 Mar 2024 12:00:00 +0000
ROA not before:           Mon 25 Mar 2024 12:00:00 +0000
ROA not after:            Tue 25 Jun 2024 04:00:00 +0000
asID:                     11831
IP address blocks:        209.17.170.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:b5:7f:19:9c:31:b3:63:2a:51:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar 25 12:00:00 2024 GMT
            Not After : Jun 25 04:00:00 2024 GMT
        Subject: CN=2b612c7c-00e1-4f63-8abb-afa5646dbc1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b8:ea:36:6a:a0:70:38:d3:77:1c:ee:50:39:
                    e9:ca:ad:c9:b4:fc:bf:78:69:15:64:e2:18:90:c4:
                    21:90:d9:63:d0:98:5d:9a:9f:65:01:d4:46:fa:50:
                    d9:a3:d9:d4:33:a8:c9:e9:3a:f0:a7:9a:6e:6a:33:
                    e6:a2:11:5b:e8:d6:7f:2c:1a:96:a4:10:4a:af:89:
                    03:aa:27:32:8c:8c:55:9f:ad:53:ff:57:7f:09:8d:
                    1c:98:0d:be:6b:ac:3d:73:57:66:f3:42:cd:7f:e4:
                    c1:4c:11:83:28:d7:36:c7:1e:92:39:3e:aa:56:67:
                    12:69:bb:f7:d6:58:5b:9b:97:20:cb:a8:d4:f2:68:
                    60:84:4a:59:79:97:3a:54:7b:4d:ce:cb:df:bb:da:
                    30:5a:61:17:e8:67:85:8c:5f:66:ff:80:a8:cf:34:
                    e5:bb:c4:4f:75:27:ce:19:4c:e5:e1:1c:d3:ae:7f:
                    f0:0b:8f:43:d1:43:12:8c:9c:14:0f:6c:4b:b3:28:
                    93:a5:03:e6:6d:17:89:38:6f:da:3a:73:48:01:41:
                    98:b1:e9:6d:e4:ff:28:0a:f8:af:5b:e7:f5:a5:13:
                    48:d9:98:13:cb:9a:22:39:f3:7c:e5:bc:c2:2c:28:
                    f8:21:df:9c:7f:93:5a:51:c5:21:05:ba:2e:fb:e9:
                    88:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:30:77:BF:CB:4C:ED:F9:16:07:30:9C:48:42:E5:9B:3B:8D:D3:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b0d900de-c1ae-3c0a-b49d-aeb3d2251ee6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.17.170.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:f5:7b:ed:89:47:1a:52:08:7c:e0:f1:42:b1:c1:8c:96:fd:
         c3:49:43:15:0c:6f:be:9c:f4:1f:58:8a:b6:0e:8b:e1:14:99:
         74:29:3a:ca:ff:3d:f0:e0:38:70:f0:a7:10:c8:66:48:19:8c:
         60:6e:da:eb:c5:81:0f:77:e4:28:a8:8c:c2:11:87:8d:0c:da:
         8f:21:22:1c:2d:c2:7e:69:b6:29:a5:d7:ac:ce:be:96:bf:95:
         ed:ca:40:31:d0:09:b5:e0:fd:3f:79:79:64:85:44:c4:ca:20:
         34:2f:4f:b8:fb:04:76:dd:49:56:e0:9a:7e:f3:dc:f4:ee:db:
         f3:61:00:1a:a7:a4:4a:84:b2:04:cd:0f:8f:66:5a:6e:03:c5:
         b8:49:ed:1c:a0:49:b8:97:b6:62:fa:c6:2e:3d:3e:31:6d:c1:
         12:fd:2f:d2:b2:9a:ef:ef:ab:e3:96:7a:4b:c4:86:a0:f2:3d:
         65:de:74:fc:1c:88:e7:7a:d8:6e:2c:f9:6f:d9:e5:53:ab:d1:
         72:0e:ce:07:cc:13:25:1e:d9:cf:6d:50:79:11:15:38:c3:a1:
         34:f4:68:f6:97:0e:af:bb:f2:e3:2e:c9:49:47:00:f1:ba:17:
         a1:9d:e7:f8:70:50:9e:06:fa:60:0d:2a:ae:af:b3:11:cd:cf:
         82:5d:7b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----