Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/307b08cb-8ac5-3beb-a5e0-db00437aab2a.roa
File:                     307b08cb-8ac5-3beb-a5e0-db00437aab2a.roa (raw, json)
Hash identifier:          9NflvimOpM5ZZ0Libl+lQOYXuDqki7exx0iQLDtIHvs=
Subject key identifier:   8D:1D:71:8E:00:A9:74:2B:50:A8:17:B3:4F:21:85:21:71:F2:2C:99
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6C46423F50187222BB5400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/307b08cb-8ac5-3beb-a5e0-db00437aab2a.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     13367
IP address blocks:        24.245.48.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6c:46:42:3f:50:18:72:22:bb:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=b4befd91-efb1-4ae3-92c6-8b331d7f2226
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:55:9b:99:a4:15:71:91:f3:21:b6:40:0e:fe:
                    66:80:99:7b:76:75:4a:f3:96:eb:07:2a:e3:17:d6:
                    f4:19:43:b9:88:4b:78:2f:9a:fe:63:cd:6c:e9:49:
                    6a:5e:c3:7c:c7:70:e7:b4:19:07:b2:b0:d9:68:d7:
                    60:35:4f:fa:11:9a:cc:ea:0f:ad:a8:02:a8:f8:61:
                    20:03:81:1a:42:1c:56:5e:8d:5a:8c:68:3a:af:31:
                    0a:08:32:c2:69:69:a2:15:ce:06:91:02:3e:75:10:
                    6d:10:11:3f:eb:ba:cb:b5:68:29:f1:18:4c:a8:53:
                    45:a3:d3:f5:51:c3:f5:a2:03:62:d1:1f:5f:ff:2b:
                    11:0f:86:73:bb:bd:64:18:7e:35:83:5d:fc:f8:4d:
                    3c:7a:04:45:0d:9e:e5:ed:52:69:b5:63:47:fb:db:
                    74:2a:c5:31:9d:a1:cb:cc:0a:84:7e:9b:4a:3c:20:
                    16:8e:f0:81:b2:ed:c6:be:18:dc:e5:a9:22:4f:fd:
                    bf:2a:7c:63:6e:cb:e5:44:b4:94:54:78:65:8d:20:
                    dd:97:6e:0f:60:06:95:b6:d2:d1:15:15:af:b9:d2:
                    e2:ed:ca:13:e4:0e:b8:68:33:ac:c2:42:be:cd:d5:
                    38:76:36:9a:e5:0f:a3:b3:46:7f:0a:67:1c:85:f3:
                    b6:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:1D:71:8E:00:A9:74:2B:50:A8:17:B3:4F:21:85:21:71:F2:2C:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/307b08cb-8ac5-3beb-a5e0-db00437aab2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.245.48.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:77:e7:65:d7:60:28:82:d7:e2:c7:a9:8f:a7:04:f4:41:05:
         46:3e:d3:8b:1c:3f:2a:80:de:e0:7f:e7:a1:5e:aa:6e:27:77:
         1d:f7:58:dd:60:60:7d:7d:01:a0:87:84:85:50:13:ed:80:30:
         be:71:07:ad:45:cf:57:2f:70:70:da:86:32:5a:01:35:9b:94:
         98:5a:41:68:d3:b9:4e:8e:d9:85:af:04:c6:70:17:9b:f0:7b:
         3a:94:81:7e:c1:6e:a7:ba:ee:9c:89:78:b1:07:46:1c:62:e1:
         f4:ae:85:24:ea:45:c4:a6:f6:ae:72:63:72:c7:63:24:ef:df:
         c0:e6:33:ba:f3:ca:57:57:89:f6:dc:4e:31:d1:77:fa:5e:8b:
         a4:42:12:3c:83:6a:78:9e:4b:42:ee:56:4d:a5:2d:cd:86:78:
         1b:fc:18:51:7d:3e:44:7c:00:ca:43:4d:ec:ef:68:cd:ab:98:
         fe:42:a2:6e:04:67:ef:95:3d:7e:3f:6e:ed:5e:bb:e8:aa:0d:
         71:6f:ec:0b:cd:e1:b4:9f:5f:62:7c:39:5c:6c:a3:87:41:21:
         e6:6f:75:bd:5b:67:d0:52:57:4e:c3:e1:44:ec:f6:89:83:e4:
         b0:de:a8:58:95:39:69:77:4c:63:4f:66:d5:71:f2:c2:e8:88:
         ec:74:42:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----