Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/34a00410-23f5-3387-9b65-82e329d7fd50.roa
File:                     34a00410-23f5-3387-9b65-82e329d7fd50.roa (raw, json)
Hash identifier:          GXxCs2hNu4kbPNQxrdYg85tvgSjb63Rgp8aqEvsmCIM=
Subject key identifier:   A6:18:E8:5E:30:2D:BA:67:0D:89:49:1F:94:1E:BC:2E:69:CF:74:22
Certificate issuer:       /CN=d12ff9c7-ced8-4cc2-b3d5-adf1859a808c
Certificate serial:       010D0C9F43285848E2D10981952046285B0EE660
Authority key identifier: 5A:CD:BF:B9:70:80:A4:AA:F3:8E:B8:58:29:11:41:07:9C:EE:FD:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/34a00410-23f5-3387-9b65-82e329d7fd50.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     14618
IP address blocks:        104.193.186.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:09:81:95:20:46:28:5b:0e:e6:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d12ff9c7-ced8-4cc2-b3d5-adf1859a808c
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=54a5104c-e91f-42ac-9756-418ad6c1cd79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:83:48:bd:74:ff:a6:75:1c:04:8e:5f:b5:5b:
                    57:3f:06:d5:c3:57:58:92:95:75:c9:9c:59:36:bd:
                    39:ef:3e:4a:0e:aa:54:f2:39:9e:dc:37:2c:30:cc:
                    7e:ad:d9:e9:c7:e6:f5:24:2f:ec:33:98:43:00:52:
                    a2:ca:03:32:32:1f:71:f8:95:c5:80:44:67:8b:a7:
                    41:34:4e:83:67:44:73:10:01:48:89:d6:92:41:d9:
                    9f:2e:0d:8f:8e:28:fa:94:2a:a3:76:8a:c5:6a:b6:
                    9d:3d:e3:33:cc:9f:11:6d:be:e9:70:45:92:98:3a:
                    5e:16:7e:fc:e1:d7:d0:da:4c:26:48:e0:39:bf:a7:
                    68:31:85:41:72:37:02:ea:5a:15:71:23:10:51:d6:
                    21:27:cf:3c:ac:2c:16:88:4a:a1:bd:79:a8:4b:77:
                    08:59:cf:95:fe:64:0a:74:12:06:81:97:52:9d:d9:
                    3f:95:76:a2:53:bf:33:de:bb:ab:e9:01:8a:9b:fb:
                    57:96:d8:8c:f5:61:e1:a6:07:b6:a3:85:18:82:0b:
                    3a:4f:6f:b3:8b:d6:02:e2:76:25:48:71:3d:9c:a0:
                    76:0e:a8:4e:28:48:fd:cf:74:05:1a:01:dc:0b:c6:
                    5a:90:1a:35:a5:b6:b9:43:cd:b8:4e:3c:52:32:71:
                    ed:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:18:E8:5E:30:2D:BA:67:0D:89:49:1F:94:1E:BC:2E:69:CF:74:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/34a00410-23f5-3387-9b65-82e329d7fd50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.crl

            X509v3 Authority Key Identifier:
                keyid:5A:CD:BF:B9:70:80:A4:AA:F3:8E:B8:58:29:11:41:07:9C:EE:FD:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.193.186.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:ee:c0:b9:27:12:cb:96:c5:c7:50:13:e8:44:08:43:45:65:
         b8:62:81:f8:3a:f7:80:2a:c6:9a:88:62:64:a9:38:04:ac:c1:
         bf:eb:ae:93:f2:e2:51:c1:c5:10:c1:05:95:bf:7b:df:76:68:
         79:a0:94:4b:d6:5f:20:e5:75:db:a8:6e:2a:eb:4f:55:f5:38:
         c3:5a:26:fa:0e:d0:31:fe:35:41:74:f1:5b:51:b0:dd:49:d1:
         02:1a:81:7a:90:f6:3a:5c:83:a0:e6:3c:7e:e7:83:28:b1:32:
         db:73:d8:fe:c0:24:49:75:19:b8:5b:30:63:46:d7:c0:62:87:
         73:98:1d:72:3c:af:41:c3:74:4a:88:75:69:a0:72:11:14:4a:
         ea:b3:ae:4f:e3:4d:21:45:7e:77:86:b2:c3:5e:14:ad:7b:63:
         d0:6f:1e:f2:51:53:6d:4e:c3:14:06:0b:23:f7:67:2e:39:e1:
         5a:73:2d:2c:64:ec:6a:06:57:11:a2:3a:80:5c:9b:a2:35:48:
         8b:f3:e6:69:ee:5b:96:db:4d:2c:9b:aa:d4:68:cd:76:6b:e6:
         bc:7a:55:36:21:fa:ae:7c:e6:e6:fd:1c:28:9c:4a:3d:27:a6:
         fe:3e:f0:cb:bc:6a:49:43:41:4f:ff:2c:b1:1b:25:b9:93:6a:
         86:8f:4a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----