Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/be02e7ab-883b-3563-9872-b421c4cde5ee.roa
File:                     be02e7ab-883b-3563-9872-b421c4cde5ee.roa (raw, json)
Hash identifier:          gzk+fcVnLwSOnLHYYWf4kqXyANjmACNibFoJs15q0Wo=
Subject key identifier:   52:EB:C7:22:08:75:9C:5A:92:0B:2B:32:F1:04:C9:49:89:71:97:F9
Certificate issuer:       /CN=3df29669-3733-4127-bbde-a71cc4b5a661
Certificate serial:       010D0C9F43285848E16BE10C1B4E3B77D00BE200
Authority key identifier: 95:AD:24:54:D0:1F:09:B5:B4:E4:A5:D2:66:AE:73:F2:D4:9B:55:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/be02e7ab-883b-3563-9872-b421c4cde5ee.roa
Signing time:             Fri 14 Feb 2025 14:00:52 +0000
ROA not before:           Fri 14 Feb 2025 14:00:52 +0000
ROA not after:            Thu 15 May 2025 13:00:52 +0000
asID:                     55247
IP address blocks:        162.211.141.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e1:6b:e1:0c:1b:4e:3b:77:d0:0b:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3df29669-3733-4127-bbde-a71cc4b5a661
        Validity
            Not Before: Feb 14 14:00:52 2025 GMT
            Not After : May 15 13:00:52 2025 GMT
        Subject: CN=330bc199-fd7a-4ac6-b636-3cae0e57b453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:fc:a1:34:1b:34:d4:b0:81:41:db:ab:3c:4f:
                    fe:a9:73:cc:e5:32:7b:fb:dc:49:5e:f9:c5:0d:94:
                    4d:35:27:18:de:ed:ab:d3:01:84:cd:1a:dc:91:30:
                    9f:44:c7:51:8a:7f:fa:d8:f5:b9:fe:46:f9:5a:83:
                    c0:c6:dd:fa:a3:b7:2e:b8:b9:1c:5e:cf:d7:c9:4a:
                    0f:ca:71:91:64:bc:ea:81:e5:bb:1a:b3:e7:2d:bf:
                    34:05:ea:d8:a3:c9:4e:16:f9:59:04:f2:3e:60:8d:
                    a9:0f:07:8e:a7:b7:5d:67:20:9a:59:38:9c:19:8a:
                    25:87:56:9e:0f:c8:af:ce:b4:53:88:08:2f:f0:a4:
                    e6:ac:44:cc:48:fa:f0:a5:c0:a4:35:2d:52:fe:8c:
                    80:32:93:16:3e:f4:39:ae:4d:4f:61:21:b6:4b:eb:
                    aa:8b:eb:8c:1d:f4:9c:10:ce:75:35:7a:c8:2a:b4:
                    47:6b:48:9e:7a:28:d5:b8:30:73:df:28:b7:d7:82:
                    b0:6c:6c:45:ce:61:b1:1f:81:28:20:11:d9:ed:78:
                    88:e9:96:e8:5c:e7:dc:52:40:4c:ec:91:43:4b:f7:
                    d5:49:4b:74:1d:3d:32:4f:a3:77:bc:8a:b6:0a:2e:
                    2d:99:a7:66:8d:8a:d6:bd:70:02:a3:80:11:dd:07:
                    b6:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:EB:C7:22:08:75:9C:5A:92:0B:2B:32:F1:04:C9:49:89:71:97:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/be02e7ab-883b-3563-9872-b421c4cde5ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/3df29669-3733-4127-bbde-a71cc4b5a661.crl

            X509v3 Authority Key Identifier:
                keyid:95:AD:24:54:D0:1F:09:B5:B4:E4:A5:D2:66:AE:73:F2:D4:9B:55:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.211.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:89:6a:62:b5:1a:52:7b:e7:ba:3e:7a:03:02:91:bd:f9:59:
         2f:c8:63:0f:b4:26:f4:ca:99:d0:97:0d:07:98:e5:5f:4c:8b:
         d0:b5:ab:ca:5d:fc:4e:0f:aa:7b:14:f1:6f:68:58:76:ed:79:
         03:2e:7a:ad:d1:c9:92:35:47:ee:d4:0e:58:bd:df:1b:f2:a1:
         b5:e1:e2:b7:e0:8a:3d:87:65:80:3e:33:cc:85:ac:9d:a5:2b:
         53:88:e3:cf:0b:6f:b9:8e:7e:a9:fa:3f:63:c8:3f:b5:fa:cc:
         bf:b3:03:bf:5d:6f:8c:4d:4d:3e:d7:3a:4b:95:9a:6b:76:21:
         3c:32:0f:92:15:ca:89:c0:75:4b:9e:31:f8:d8:55:2a:3e:d0:
         04:28:f2:8a:17:ab:30:63:29:5c:95:02:31:c5:26:97:af:6e:
         02:11:14:7a:c4:d1:5c:ee:6d:bd:bf:95:aa:1e:56:2d:cf:0c:
         9d:82:0b:13:f2:8b:da:7f:92:71:c8:2a:a9:ef:f6:5f:86:2a:
         a1:5f:b1:36:21:ff:c5:b2:d1:6a:fc:a2:f3:25:a1:91:ca:70:
         f2:99:42:ae:ce:57:3c:ef:85:2b:37:cb:65:91:af:96:68:53:
         e3:b1:68:77:35:c0:e3:3f:2e:39:7c:dd:95:40:e2:f7:20:41:
         54:2a:cc:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----