Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/fef7f89c-5424-30b1-8308-96892e1bf91b.roa
File:                     fef7f89c-5424-30b1-8308-96892e1bf91b.roa (raw, json)
Hash identifier:          noEor4z13hGOKh1pcmmx/6Ciir0r74xm0JYMQRIiZZM=
Subject key identifier:   39:95:7F:31:FE:22:22:2A:A2:B2:DD:DA:9A:C2:E1:5B:4F:E3:BA:D5
Certificate issuer:       /CN=15459be1-f2c7-44a2-ac69-01d238f1b0de
Certificate serial:       010D0C9F43285848E2D11AFCA7B41C24971EA2C0
Authority key identifier: 05:7A:6E:22:70:B2:BA:EC:B1:5B:3C:D3:76:40:05:21:50:33:C5:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/fef7f89c-5424-30b1-8308-96892e1bf91b.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     396042
IP address blocks:        148.76.157.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:1a:fc:a7:b4:1c:24:97:1e:a2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15459be1-f2c7-44a2-ac69-01d238f1b0de
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=17db079e-e08c-4dd5-8530-9e8c8f03aeef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:17:5e:23:d2:6d:37:3f:f1:54:4e:ee:4c:6d:
                    83:ea:97:89:d8:2b:67:7d:35:2d:b2:67:33:30:cf:
                    cb:a4:1d:48:94:7f:c5:44:50:9e:95:41:1e:9a:22:
                    26:4c:a1:ef:a1:ab:f5:da:86:87:b8:8e:a1:1c:63:
                    03:8c:52:96:8e:be:d9:89:37:80:40:12:9e:56:a4:
                    c2:2a:4a:ec:f6:36:db:6b:eb:94:0b:c2:9b:d2:66:
                    00:9c:23:97:8d:33:d5:0e:d9:73:26:c6:9a:05:07:
                    d0:6b:70:0a:b7:f7:d8:1d:a1:74:36:04:57:fd:3a:
                    96:f5:e8:85:2c:91:d5:3e:5b:45:b3:40:cc:57:db:
                    60:cc:8c:ba:0b:98:78:b2:9b:5b:cc:a6:82:98:4d:
                    d3:31:6e:4d:6d:17:7c:c6:a7:c4:39:7d:ee:28:39:
                    7d:2b:e8:47:95:33:26:17:87:3c:63:91:bc:fb:41:
                    da:09:a5:73:f7:55:28:23:6d:19:f0:68:ac:91:6e:
                    6e:8d:8b:7f:a5:bf:5b:28:18:7e:99:1d:67:5c:c0:
                    08:80:99:f5:b3:7e:a1:93:79:17:e1:03:fd:12:3e:
                    cf:c8:1e:75:17:de:36:6b:b4:4c:1c:dc:d3:6c:8f:
                    37:63:37:16:e8:5d:a9:01:16:be:e7:9b:d3:51:a7:
                    2f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:95:7F:31:FE:22:22:2A:A2:B2:DD:DA:9A:C2:E1:5B:4F:E3:BA:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/fef7f89c-5424-30b1-8308-96892e1bf91b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.crl

            X509v3 Authority Key Identifier:
                keyid:05:7A:6E:22:70:B2:BA:EC:B1:5B:3C:D3:76:40:05:21:50:33:C5:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.76.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:b9:d4:7e:03:23:ea:be:bb:e1:3d:75:b4:fc:9b:1f:1e:8a:
         15:b0:2b:32:5b:e9:d9:ad:1d:2c:7d:e3:4e:38:1e:4e:d0:bd:
         9b:cf:a3:67:22:04:60:2b:82:14:90:ec:fe:24:4a:2c:58:82:
         af:05:28:a3:6c:29:a6:a2:34:07:9f:67:bd:2e:ac:12:90:21:
         fb:ba:38:5e:74:2f:67:66:b0:d9:39:2f:f6:1d:8a:a9:b7:b1:
         90:23:28:83:f8:a6:52:2b:53:97:82:a4:7d:04:6d:ee:57:df:
         f7:3f:1e:4e:d7:c4:35:9f:01:ae:52:2e:ce:45:78:ce:c3:d9:
         ff:dc:61:74:77:77:f5:a6:da:ee:ac:48:ee:a3:b9:36:48:b0:
         e4:5c:98:eb:a2:fb:80:32:f1:c1:fe:84:5a:90:6c:06:b4:c9:
         f8:75:15:06:82:5b:b4:3d:23:df:cb:6d:ac:d4:91:ec:e1:88:
         da:a3:e5:6c:66:91:24:91:2c:7f:e7:c5:e7:d1:66:0e:07:c1:
         74:e4:04:91:e9:29:58:4e:4f:c4:e4:fd:cd:e2:0d:ad:65:5c:
         04:98:87:e3:19:7e:1a:a4:92:8a:fa:8c:ba:e6:a2:37:e4:38:
         77:b1:a5:e2:2c:de:42:43:aa:c1:55:d2:39:f4:bb:51:e3:b3:
         c5:0a:83:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----