Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5f458baa-9da2-3084-a8ff-69b74d41f8d0.roa
File:                     5f458baa-9da2-3084-a8ff-69b74d41f8d0.roa (raw, json)
Hash identifier:          4O4izTJravcBVNlAhhH5MhcuaWiOBOGKHy8bEyUiB5Q=
Subject key identifier:   AD:F7:4C:46:37:29:5A:E4:42:3C:B8:90:45:30:37:67:6A:67:AA:7B
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584898D6167AE92E748A827A2A08
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5f458baa-9da2-3084-a8ff-69b74d41f8d0.roa
Signing time:             Sun 19 Jan 2025 14:00:52 +0000
ROA not before:           Sun 19 Jan 2025 14:00:52 +0000
ROA not after:            Sat 19 Apr 2025 13:00:52 +0000
asID:                     7029
IP address blocks:        71.31.208.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:98:d6:16:7a:e9:2e:74:8a:82:7a:2a:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jan 19 14:00:52 2025 GMT
            Not After : Apr 19 13:00:52 2025 GMT
        Subject: CN=5947a440-4473-41ff-9b2a-087f0f5aa775
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0f:75:65:37:dc:5b:07:0b:bd:11:ac:ee:9c:
                    53:67:b2:8a:58:b7:43:bb:80:40:e7:3d:4b:5f:bf:
                    b7:a1:f4:e0:e7:82:9d:ac:5a:4e:78:83:96:23:af:
                    9c:98:cb:a1:57:1b:07:6b:9f:b1:36:80:22:d6:7a:
                    d5:67:a7:ca:c3:2e:62:1e:aa:d9:e3:8f:39:92:57:
                    00:0f:4a:67:3c:26:9f:97:46:c2:9f:4e:57:e4:7b:
                    7b:b4:11:d3:09:95:f7:9f:26:35:ac:28:1b:cb:4e:
                    11:ab:f2:18:11:03:48:ec:73:14:d4:df:4f:6e:6e:
                    50:38:fb:b7:41:bf:16:7a:fd:20:39:2b:a2:ea:ad:
                    ec:f8:9d:18:90:81:3b:84:b8:47:b8:52:e0:98:04:
                    6c:98:93:5a:47:e1:a8:bc:4c:12:91:34:a5:1b:a2:
                    4b:30:df:c2:b8:2b:45:ff:95:63:a7:93:09:7c:38:
                    9a:1f:22:1d:3b:f6:05:09:b9:59:c9:f8:3c:30:bf:
                    09:42:71:22:f0:3b:6c:08:9f:99:ee:0d:4a:aa:9d:
                    2c:b5:17:ab:f1:d6:d9:80:69:18:f3:ea:c2:22:57:
                    ee:4c:a0:5a:0f:f7:19:32:a7:7a:75:45:38:91:58:
                    5b:39:42:18:8b:36:2b:32:0b:98:9c:a5:07:2a:13:
                    e9:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:F7:4C:46:37:29:5A:E4:42:3C:B8:90:45:30:37:67:6A:67:AA:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5f458baa-9da2-3084-a8ff-69b74d41f8d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.31.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:71:5b:e7:3f:b1:79:ae:4f:73:77:11:53:58:0d:9e:84:e4:
         e8:7c:b8:5b:7a:bb:3e:cb:72:d2:1c:23:4c:8a:8e:cd:05:8b:
         de:5d:f8:fc:54:b1:cb:a7:cd:ee:2f:31:d1:44:c7:25:e1:20:
         ff:b7:1b:d9:89:16:c7:89:4a:cd:3d:d0:65:3a:40:8c:5d:b3:
         22:dc:53:2d:6a:eb:dd:b3:46:8f:c2:1f:bf:92:ca:ec:46:57:
         63:c1:a7:16:fa:d9:00:68:3f:3f:a4:22:53:0b:59:57:b4:45:
         74:b7:f0:5a:90:26:7b:3d:81:db:b1:84:76:9d:cb:b6:30:0f:
         93:87:82:17:c6:46:5b:03:18:67:47:1b:f7:69:6e:25:97:71:
         17:c6:e2:53:02:73:fd:cc:e6:62:28:ae:0b:2e:5b:90:52:73:
         e4:8f:8d:71:32:f9:64:3c:e0:5d:0b:ca:c3:9c:24:8f:39:be:
         9c:eb:f8:f0:50:c0:73:12:c4:dc:b2:f8:1c:a2:fc:fc:57:42:
         06:dc:18:a9:98:a5:c2:6e:94:34:c6:3c:3e:38:b4:32:88:36:
         da:d1:56:cb:3b:3d:fa:d2:78:01:b5:c0:38:c2:21:73:33:4a:
         7d:c8:a3:d0:ca:f7:e0:68:2a:66:0f:36:8d:c0:f1:4a:02:78:
         30:c2:d5:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----