Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/316d357d-2430-3a86-a691-65704435658c.roa
File:                     316d357d-2430-3a86-a691-65704435658c.roa (raw, json)
Hash identifier:          3BbHh+2eK1LUjnUFDNiEKejTLYExjLtlzWWHU/p98bo=
Subject key identifier:   9C:A7:BE:0F:E7:0D:F5:A5:C9:D2:91:4B:AF:9C:77:FE:0F:33:A6:B3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6C43B7C10F5D3D4FAFC380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/316d357d-2430-3a86-a691-65704435658c.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     13367
IP address blocks:        24.118.160.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6c:43:b7:c1:0f:5d:3d:4f:af:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=480f9a1e-4d5f-4835-ba5a-e166411cde13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6d:5f:f0:7c:1f:0e:e2:9f:16:fb:47:fa:5e:
                    95:be:5f:d1:03:1e:8d:f7:2f:dd:48:c8:11:07:2e:
                    75:a7:42:7e:d9:a0:42:5b:be:97:05:24:c3:0f:0c:
                    68:ac:5d:f2:b2:09:92:d1:8a:1c:a5:72:94:da:3a:
                    8e:d7:d1:5b:79:d6:3a:6e:e1:59:89:72:bc:36:e4:
                    cf:ba:43:b2:37:44:b0:08:06:37:72:24:a4:5a:36:
                    74:ed:73:14:a7:fa:e1:49:cb:ae:96:2a:63:e5:b7:
                    57:eb:6c:5b:19:30:1a:67:a9:7a:9e:b8:d3:9a:5f:
                    04:a0:74:ed:06:4b:72:c5:32:c2:ba:e0:bf:6c:e0:
                    04:3f:fb:dd:51:c3:7f:52:67:04:13:fc:db:40:2b:
                    ae:ce:b7:47:35:b5:e0:c9:8a:94:90:1a:3e:c6:bb:
                    fb:06:6b:a3:da:d3:35:5f:5f:89:35:18:9c:cb:8b:
                    85:fb:ce:38:18:84:01:af:33:3f:33:e2:a1:81:f6:
                    0b:e9:b5:cd:89:a2:74:7a:e9:8e:94:9a:1e:ac:2b:
                    65:d1:6c:93:84:c4:12:7d:33:b8:c6:74:08:1f:6d:
                    cf:5d:09:12:c2:aa:dc:25:23:5d:b5:5c:62:41:4b:
                    04:91:93:38:c5:8b:06:8a:1b:fd:29:f7:5e:31:df:
                    c6:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:A7:BE:0F:E7:0D:F5:A5:C9:D2:91:4B:AF:9C:77:FE:0F:33:A6:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/316d357d-2430-3a86-a691-65704435658c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.118.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:9c:72:f0:50:db:9a:b3:63:da:32:a3:e8:ba:b2:91:8a:66:
         09:0d:3c:6c:c6:17:73:17:cf:49:3a:9f:ee:9a:e2:4b:bf:fe:
         31:71:ea:42:b9:45:29:52:5a:c8:31:00:df:de:15:a5:0f:65:
         79:90:d9:c2:e2:9d:74:7e:9e:1f:f7:8e:0f:f5:25:4b:33:54:
         3f:f7:2e:d6:88:4d:c6:78:24:fa:66:da:0f:80:89:ee:69:b9:
         75:2a:56:54:61:c1:5a:d6:2e:24:5b:db:e6:81:9b:e9:76:5a:
         94:2c:73:7c:85:53:9c:63:a1:fe:00:7d:a3:4c:48:93:90:5b:
         e9:93:94:ce:75:a4:36:eb:7c:f9:1c:73:55:44:fd:13:5d:4f:
         79:ba:e9:f7:6f:6c:da:67:a7:28:63:d8:cd:a4:1a:d3:57:e6:
         1f:af:7c:10:d2:ca:b0:62:33:76:ce:d3:fe:f8:d8:4f:c1:c5:
         f5:b6:d8:c3:c8:66:b6:2b:21:bc:09:13:c5:8c:ce:71:3a:32:
         b8:b5:46:87:2f:c5:ce:60:66:c1:40:7b:3a:66:c1:2a:81:c6:
         71:e5:92:39:24:1c:72:ce:07:54:e9:39:77:eb:d3:c8:e8:9a:
         65:23:a2:17:5c:50:ee:29:ff:9c:18:14:28:29:fb:97:b3:1b:
         30:f8:8e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----