Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d4757486-bc8b-328c-82f8-78c6abb10a01.roa
File:                     d4757486-bc8b-328c-82f8-78c6abb10a01.roa (raw, json)
Hash identifier:          H8Om8Rg3eXp6Q5FFjnt+CdvCR4IuTcAyCMWSzLhNNHE=
Subject key identifier:   7E:E0:8B:EA:56:DC:37:54:18:31:1C:A2:CB:0B:8E:53:75:10:AF:82
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858439AE49F2ECCE0F2E8B83CE3A8
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d4757486-bc8b-328c-82f8-78c6abb10a01.roa
Signing time:             Wed 18 Oct 2023 12:00:00 +0000
ROA not before:           Wed 18 Oct 2023 12:00:00 +0000
ROA not after:            Thu 18 Jan 2024 05:00:00 +0000
asID:                     855
IP address blocks:        142.134.210.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:9a:e4:9f:2e:cc:e0:f2:e8:b8:3c:e3:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Oct 18 12:00:00 2023 GMT
            Not After : Jan 18 05:00:00 2024 GMT
        Subject: CN=8d258621-3f27-41be-999d-f316d3e01d74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:9a:21:bb:df:85:fb:8a:99:9a:66:1a:ba:11:
                    74:c9:e5:9a:6d:1b:c2:f5:cc:e3:a6:97:5e:87:8d:
                    6d:e8:49:45:6e:9b:c6:c8:db:62:45:34:7b:34:f1:
                    c6:e0:d0:96:24:50:75:e2:36:32:f7:bd:16:45:80:
                    b1:ed:ff:0b:1f:c4:c6:ae:56:20:4f:39:9f:e7:03:
                    ea:bc:67:5a:c6:2b:a0:43:9b:fe:47:55:71:6d:45:
                    b1:f1:a7:ea:c8:76:e1:68:cd:44:7d:97:28:21:83:
                    2e:de:28:2a:e9:61:df:23:b3:ec:cf:16:b0:72:61:
                    97:3f:a4:2a:0c:de:97:95:e1:19:fc:d5:c9:0f:de:
                    85:9d:78:cf:7b:11:4f:5b:29:fd:66:d1:0a:c7:b2:
                    9f:e4:61:13:d7:b1:c2:dd:1f:ce:2c:cd:6f:73:19:
                    a3:96:89:ad:15:29:54:c5:cc:5f:8e:b8:55:26:86:
                    47:f5:e2:53:37:1b:79:a1:18:6b:a3:b8:25:6f:a5:
                    dc:78:e7:81:d8:93:37:1e:d0:97:94:0b:7b:b7:80:
                    0c:ba:06:fb:9b:22:b4:15:7e:c6:97:16:8d:11:22:
                    65:8b:fc:91:4f:66:89:25:b3:46:a8:f1:f6:65:a8:
                    73:bb:2d:3a:44:84:ce:81:dd:e0:cc:73:be:aa:66:
                    09:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:E0:8B:EA:56:DC:37:54:18:31:1C:A2:CB:0B:8E:53:75:10:AF:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d4757486-bc8b-328c-82f8-78c6abb10a01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.134.210.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:28:1b:6d:76:9f:24:dd:d0:af:d6:76:81:6b:d2:c0:c5:3b:
         5d:60:5d:2b:fb:7d:6a:a7:49:c8:8f:52:32:b0:df:51:8b:a9:
         3a:e9:d4:5c:bf:5d:e9:cf:0b:c1:1d:6d:7c:8a:94:8b:f1:bd:
         2d:94:a9:f0:25:88:d8:a0:04:21:76:f4:97:6f:7d:12:93:59:
         29:37:33:0a:61:02:77:2d:1d:bd:0e:30:30:99:6c:52:99:64:
         b3:5c:15:f2:65:a1:49:46:26:34:99:7b:17:ec:7c:4b:2d:f2:
         1a:87:de:18:23:71:6d:df:8b:e1:90:d3:97:ed:dc:25:9c:9c:
         7b:aa:1f:95:4e:fe:fe:7d:22:aa:04:3d:3b:c8:50:00:16:9e:
         ce:79:78:51:ea:c8:f5:15:2b:65:e7:43:d6:03:1f:d6:a2:6e:
         7b:3a:17:23:68:98:cc:5b:ef:a1:e2:7d:fd:99:c0:cd:1b:f0:
         57:13:93:49:33:b0:3e:1d:83:74:cd:f1:50:8d:80:bb:17:38:
         1b:a3:ea:b3:a8:50:45:9b:73:db:10:32:9a:3b:f0:22:2e:fa:
         36:36:15:ed:cb:23:9e:42:84:dc:bf:87:15:88:62:48:82:d3:
         2b:75:d1:15:b1:46:45:4a:14:92:34:67:d2:3c:a9:c6:32:4b:
         20:a0:b5:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----