Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/e3baa160-3819-3b7b-8e67-c5cab2e8bf70.roa
File:                     e3baa160-3819-3b7b-8e67-c5cab2e8bf70.roa (raw, json)
Hash identifier:          yU7H7oyxRbvkOvsSn5NxU9Z2WmDZY+w/Y4mAjRGHcIY=
Subject key identifier:   C2:E3:88:7E:1C:A2:9B:3D:30:63:10:AF:BF:DF:34:67:8D:70:5F:A1
Certificate issuer:       /CN=8e52f155-d56d-401a-89c5-76d2d44d8b68
Certificate serial:       010D0C9F43285848F9268FC23C5A81FC25761A40
Authority key identifier: D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/e3baa160-3819-3b7b-8e67-c5cab2e8bf70.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     16789
IP address blocks:        104.156.160.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:8f:c2:3c:5a:81:fc:25:76:1a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e52f155-d56d-401a-89c5-76d2d44d8b68
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=5bb33a87-9302-4609-8093-5bf06db34a92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:af:4b:8b:ba:69:2d:09:7b:7e:bf:32:f0:88:
                    18:45:9a:79:e1:6d:b9:45:da:5e:b1:02:91:07:9e:
                    df:e7:b7:aa:b1:06:be:36:a9:cb:ca:0a:ca:7c:60:
                    76:53:d8:6c:d1:87:8c:75:d4:64:66:9f:2b:65:50:
                    0f:a9:63:da:d3:f8:7f:c8:4c:d2:b2:19:d4:f2:95:
                    55:c4:1d:6b:13:a2:b7:45:8d:05:e1:27:4d:94:17:
                    0b:22:1c:a8:62:85:c9:1d:6a:06:1c:13:30:ab:17:
                    a8:0d:de:52:94:41:62:99:d7:e5:8b:91:bb:47:44:
                    6b:c8:7f:3b:28:aa:0a:a5:5e:ca:c9:10:7d:e8:34:
                    d9:ea:d0:d3:29:97:fc:d5:c2:94:04:2b:32:6d:94:
                    9c:7b:5e:72:db:09:8b:f6:8a:8a:5a:1c:96:38:a7:
                    8b:14:25:89:7b:28:80:23:df:7b:85:f3:1b:c0:b7:
                    66:c5:2d:25:52:46:08:aa:89:15:8c:a6:70:fd:bd:
                    e8:54:56:a6:77:ff:a9:71:0e:1a:2a:19:e4:95:d4:
                    e1:80:cf:3e:3e:6d:8e:52:a2:9c:d9:6e:9f:2d:7f:
                    e6:77:ec:d4:ce:52:e3:79:79:3c:3a:b4:c5:74:6e:
                    12:ba:5c:bd:1b:d5:01:01:bb:af:bd:02:05:fd:eb:
                    db:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:E3:88:7E:1C:A2:9B:3D:30:63:10:AF:BF:DF:34:67:8D:70:5F:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/e3baa160-3819-3b7b-8e67-c5cab2e8bf70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl

            X509v3 Authority Key Identifier:
                keyid:D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.156.160.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:2b:ba:4e:7a:c8:38:8d:48:c0:89:6a:b4:81:ab:f8:98:11:
         c9:2c:e5:22:6f:35:b8:22:95:2f:e6:2f:49:aa:52:b2:78:c8:
         97:35:48:20:70:ee:92:d9:a2:d4:6d:f0:31:f0:50:d3:ce:45:
         99:ea:f3:35:44:a8:69:33:56:71:4d:62:26:cf:ca:b8:9a:d0:
         13:50:0d:1c:a1:b3:ca:7e:75:0b:8b:54:52:16:2c:ed:36:40:
         4c:78:01:b3:aa:34:e3:26:bf:98:b5:b2:ea:fe:75:e4:a2:84:
         ed:a0:8a:50:b6:a5:1d:2b:ae:b5:d6:1e:7d:67:74:37:e7:d2:
         a0:16:62:56:6d:9a:ef:38:1c:6d:38:57:78:36:3e:c9:37:39:
         84:78:07:3a:20:9e:2f:6e:ae:7f:f4:2b:04:2f:0a:0c:f7:0e:
         29:d1:4d:cb:b0:ca:44:ad:ea:a6:88:5c:f8:48:15:0c:d8:ba:
         41:79:eb:34:3c:12:04:ab:f5:72:69:fa:12:f8:ad:cc:e8:81:
         10:77:9a:c7:f5:c7:95:ab:d5:91:9a:89:5b:a7:75:57:bf:a1:
         06:82:a6:34:0e:8f:6a:43:89:a5:11:eb:88:67:a9:56:88:0f:
         bb:ba:f7:d5:0a:bc:14:80:1e:f9:3c:32:33:f9:5a:ac:53:f8:
         be:92:61:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----