Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d9230a86-4f1c-3d88-85fb-f49238421dfa.roa
File:                     d9230a86-4f1c-3d88-85fb-f49238421dfa.roa (raw, json)
Hash identifier:          Ez+wW6LrNi0sTHhjYfw4kEAV3o8gqVrQHLFnxzPtGUk=
Subject key identifier:   1A:6C:4C:CC:91:C2:E9:DA:9A:46:F6:5A:BF:2D:1C:4A:96:40:29:A5
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285848803E351AD5B680E482755080
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d9230a86-4f1c-3d88-85fb-f49238421dfa.roa
Signing time:             Fri 10 Jan 2025 18:35:42 +0000
ROA not before:           Fri 10 Jan 2025 18:35:42 +0000
ROA not after:            Thu 10 Apr 2025 17:35:42 +0000
asID:                     7029
IP address blocks:        69.176.192.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:80:3e:35:1a:d5:b6:80:e4:82:75:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jan 10 18:35:42 2025 GMT
            Not After : Apr 10 17:35:42 2025 GMT
        Subject: CN=a9a3ef41-71c8-432f-87eb-f54c5919da14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:91:27:04:03:59:10:95:68:a0:c8:f0:48:f5:
                    46:4f:ea:c3:6b:31:4b:d4:15:48:c1:b8:ce:84:6e:
                    5d:dd:48:7c:2d:e4:7b:27:63:6e:b5:fe:bf:44:01:
                    d6:d5:32:31:c6:e9:01:bd:51:5d:0f:67:4d:da:e0:
                    e2:23:07:1f:3c:a9:d6:76:f6:b6:b1:6a:43:6c:02:
                    15:a7:c7:0f:72:e2:26:0f:dd:56:d0:b1:87:3a:28:
                    02:25:b0:47:94:d5:73:70:26:0c:3f:9e:32:f7:98:
                    90:04:30:26:8f:82:fc:c4:1c:f2:3f:57:a9:17:fb:
                    0b:b6:ac:14:ff:3c:e9:1b:d2:c1:4a:73:4a:20:97:
                    2b:bf:da:ab:94:aa:1d:48:68:94:b7:74:64:69:2b:
                    f1:f4:b7:8f:da:f1:3d:ac:59:b2:65:1f:5b:e3:ec:
                    ed:b9:18:46:8b:1e:e2:ac:7a:72:30:63:0c:0c:2c:
                    fb:fe:a7:01:fb:73:96:ca:94:75:11:57:8a:40:f2:
                    e4:7c:3b:61:c9:ac:5c:d5:a5:0c:0f:48:f4:35:9c:
                    29:46:b7:3f:19:a4:4a:e7:f9:5e:33:88:af:28:98:
                    93:20:ea:fe:dd:b2:37:0b:c8:fa:8d:a1:54:d3:99:
                    14:62:5d:92:01:c5:1d:a8:d9:88:5b:77:dc:16:42:
                    ac:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:6C:4C:CC:91:C2:E9:DA:9A:46:F6:5A:BF:2D:1C:4A:96:40:29:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d9230a86-4f1c-3d88-85fb-f49238421dfa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.176.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:c4:89:20:c1:dc:ba:5d:b2:f2:64:a6:2c:f6:f2:3f:6f:04:
         4b:79:59:ae:2c:e5:da:2f:5d:ff:bc:d1:ee:1f:f1:cd:9a:ba:
         8e:15:a6:6a:89:a7:88:12:a0:a8:07:8b:04:0c:4f:4c:7d:57:
         2d:d9:6b:05:2b:8f:92:a7:f1:5e:63:08:2d:41:d2:32:d1:8c:
         ee:18:d6:56:e2:ea:f9:2c:c7:e8:42:4b:3c:fb:79:f8:72:d3:
         1b:2e:1b:cc:0e:f0:e4:a7:ca:af:b6:53:d7:e5:45:64:fd:2e:
         39:4d:e1:1c:60:7f:35:b2:c7:1f:c4:85:2b:02:da:a9:97:44:
         5b:a5:a1:5a:60:e1:7f:b5:25:15:14:24:0a:c2:f1:99:19:79:
         88:1c:46:3b:ad:97:48:d6:52:73:d5:e5:87:3c:6d:7b:2b:f5:
         77:be:94:a0:9b:30:45:b0:4b:82:73:d9:0e:c1:77:d5:b3:80:
         9f:51:cd:b4:30:25:dc:4f:2f:54:c1:e6:89:59:a3:8f:d9:1f:
         0c:ee:27:fc:df:12:8e:a6:ca:0d:e9:09:de:52:b6:46:10:d5:
         b5:ba:a2:5f:ea:cd:50:1c:f8:f1:68:90:15:12:97:d3:d9:63:
         c3:0a:32:ad:5b:78:4a:e0:18:1d:4b:61:a9:42:d4:76:8c:bc:
         3c:2a:f0:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----