Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b7dfb704-d746-3efc-b39a-5a2b6c6c14ed.roa
File:                     b7dfb704-d746-3efc-b39a-5a2b6c6c14ed.roa (raw, json)
Hash identifier:          uK0uYQIAmM//ymnZ6/YWZIOCcMW5ZIpSpYjldfCRdrE=
Subject key identifier:   7B:24:E6:28:B5:33:F0:D1:88:6C:25:00:D7:84:93:4A:EB:2B:55:A4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CAF31B604B142FD52BB4200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b7dfb704-d746-3efc-b39a-5a2b6c6c14ed.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33491
IP address blocks:        24.14.74.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:af:31:b6:04:b1:42:fd:52:bb:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=9a36c219-c4d7-4425-8dd9-01b62d737602
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8e:65:93:56:a1:76:df:52:9f:15:50:79:d6:
                    95:5a:ed:3c:40:5e:bf:1d:ab:b1:c0:07:8e:e1:83:
                    db:89:f0:58:8f:ed:fa:5e:33:d6:b2:68:ad:56:b6:
                    49:b6:65:f4:e7:a0:50:66:0b:d3:3f:c3:f7:e1:35:
                    bd:ed:6f:08:a2:59:73:9c:0d:ed:24:34:5b:b9:1b:
                    95:0e:7c:f5:2b:51:99:48:ce:33:59:a4:f0:fd:7e:
                    18:f2:c8:b7:24:aa:31:01:ed:7d:70:53:df:6b:ef:
                    1e:52:f6:e7:0e:b0:73:7a:a3:ac:99:1a:00:6a:6f:
                    e8:b5:00:51:08:c7:0c:6c:eb:9a:58:5f:c5:75:9d:
                    e8:2f:f2:29:89:ab:8f:95:8e:11:83:13:44:b5:e8:
                    f3:e6:7d:60:ee:f2:a3:b6:38:e8:86:28:c9:f6:40:
                    a9:b9:88:9f:e9:de:08:cd:e8:4a:0a:3d:23:f2:6a:
                    3b:99:88:f9:dc:a0:d0:00:00:52:0c:d1:97:ba:9b:
                    c4:0a:7b:5e:60:ea:8c:6a:fb:aa:c1:50:6b:94:b0:
                    87:ca:55:64:d6:5f:09:30:39:42:dd:ce:00:71:6a:
                    73:2c:61:f6:ed:b3:38:ee:b6:bc:f3:b3:a5:9e:91:
                    1d:6f:0b:e3:eb:9d:88:a3:22:31:5f:4a:cb:2d:9c:
                    45:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:24:E6:28:B5:33:F0:D1:88:6C:25:00:D7:84:93:4A:EB:2B:55:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b7dfb704-d746-3efc-b39a-5a2b6c6c14ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.14.74.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:0f:d4:93:ca:9a:a9:e2:c9:a0:2f:ec:11:23:51:26:95:7f:
         4d:42:fd:26:fd:19:90:f9:19:bb:ab:5d:08:dd:24:63:37:7c:
         14:47:b7:c7:48:1f:05:51:cf:2e:d0:c5:8f:6c:6d:39:bd:99:
         48:0c:d9:1b:bc:7b:c2:f0:05:42:41:72:e7:4e:d0:89:db:59:
         93:33:87:26:fb:a3:16:19:92:c9:36:50:ce:71:17:45:ab:32:
         b8:d9:e2:c3:2d:68:f3:78:10:1b:24:a8:c8:62:bc:1c:16:17:
         39:c6:ad:cc:68:2b:ee:66:84:25:5a:a8:54:5c:79:4c:f4:a7:
         7a:6b:61:9c:11:1a:8d:c3:08:37:72:34:9a:94:15:d7:00:9b:
         a0:cd:92:51:ee:64:5e:f9:ff:cf:43:61:0a:5a:6f:34:3e:95:
         00:ce:33:a1:d8:ed:4a:7e:6b:94:fb:fe:77:5f:ee:92:2a:c4:
         44:06:08:40:66:e4:a4:c5:f5:ee:eb:b9:9e:2e:94:b6:48:92:
         2e:f9:bb:ee:4f:1f:2f:e2:98:04:36:7e:e6:44:56:6e:9e:f3:
         f7:54:1c:f2:77:af:b1:d7:11:1f:71:71:61:1e:47:47:2e:bc:
         e4:7a:22:2d:e1:05:c4:34:47:d2:20:97:4e:7d:93:7c:95:74:
         07:9d:8d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----