Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/38872579-4e14-3eb9-a23c-45f4e7ee93d1.roa
File:                     38872579-4e14-3eb9-a23c-45f4e7ee93d1.roa (raw, json)
Hash identifier:          exe/SX30WvMorWRqpDqwk4CH45jI129jN+k8W1wJ0WQ=
Subject key identifier:   DE:3B:91:5C:83:67:ED:3E:7C:30:6D:BC:75:34:8B:DD:05:99:31:95
Certificate issuer:       /CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3
Certificate serial:       010D0C9F43285849071BE8D724341BD3D258DF20
Authority key identifier: BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/38872579-4e14-3eb9-a23c-45f4e7ee93d1.roa
Signing time:             Fri 28 Feb 2025 02:00:39 +0000
ROA not before:           Fri 28 Feb 2025 02:00:39 +0000
ROA not after:            Thu 29 May 2025 01:00:39 +0000
asID:                     399501
IP address blocks:        72.20.212.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:07:1b:e8:d7:24:34:1b:d3:d2:58:df:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3
        Validity
            Not Before: Feb 28 02:00:39 2025 GMT
            Not After : May 29 01:00:39 2025 GMT
        Subject: CN=f7807fa5-8c40-4635-b9ec-01a5be5afb10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2b:18:90:49:0b:92:7d:d3:95:93:b2:3d:7f:
                    71:d9:75:f4:d5:c5:77:3d:58:21:3d:d1:60:3d:73:
                    0d:6e:4e:2e:7b:1e:ca:5f:56:c8:0c:e0:ab:ea:1d:
                    a4:bc:05:5e:b4:4f:22:f2:95:3c:f0:91:e5:73:be:
                    e0:4c:3d:bd:01:4d:f8:4d:c6:04:ab:2e:95:31:a4:
                    10:73:27:91:8b:a4:8d:9a:4e:d0:b6:d4:20:3c:1f:
                    e0:eb:81:80:ed:e1:30:46:ac:95:c2:2b:5c:89:a2:
                    8c:de:10:89:da:d1:d1:40:c5:97:90:dd:69:a8:95:
                    0e:26:0a:56:e2:b1:01:96:17:d0:fa:08:f9:a6:2d:
                    f6:78:d3:14:28:1f:db:01:53:8c:b2:4f:41:28:3f:
                    b4:77:11:d2:c0:46:c1:5f:e1:70:ac:5a:fe:75:51:
                    11:cb:2b:97:f4:28:e6:b1:ab:c5:2a:38:a9:b5:3e:
                    6a:cf:9d:c3:ef:b9:65:29:b3:bf:25:59:d7:d4:c7:
                    ae:5f:f8:8b:cf:d4:d5:2d:b4:e7:5f:20:19:1a:6e:
                    fc:3c:6e:10:a3:b0:fe:f8:8d:e3:ac:84:2a:7a:b1:
                    dc:75:90:ea:4e:e6:6e:97:96:ae:ca:d4:d2:e7:eb:
                    16:aa:dd:e8:40:07:53:91:e0:26:ee:de:7c:e7:7a:
                    b7:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:3B:91:5C:83:67:ED:3E:7C:30:6D:BC:75:34:8B:DD:05:99:31:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/38872579-4e14-3eb9-a23c-45f4e7ee93d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl

            X509v3 Authority Key Identifier:
                keyid:BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.20.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:0b:47:b0:73:e3:c2:e9:f4:dd:05:45:32:03:1c:c6:b1:88:
         4a:10:b4:bc:65:8c:3b:00:e5:62:fc:7a:a5:e7:7f:3e:aa:86:
         11:4d:ee:77:70:b0:d7:b6:a8:4a:7a:cf:ae:f7:bd:13:89:17:
         e6:42:a1:f1:7a:67:48:d4:44:eb:2c:45:87:63:aa:a7:17:2d:
         7f:19:f1:37:32:75:aa:fd:dd:da:fd:14:09:27:57:fc:8b:f5:
         64:83:c1:d4:90:d6:5d:e0:4a:6d:45:73:72:c7:a1:1a:94:e4:
         56:bf:8f:5c:ca:cf:f7:a6:9b:2f:da:f4:b7:39:d5:0f:79:8a:
         71:7d:ea:49:52:75:bb:31:54:90:ce:7d:89:a5:da:f0:7d:8a:
         6b:21:69:fc:48:2c:29:a3:02:c7:6e:8c:96:7f:73:57:c0:bf:
         cc:76:ec:f1:a7:e8:51:48:da:0b:24:4a:40:56:80:0c:6f:98:
         bd:55:21:a4:68:d6:f5:8b:79:b2:5b:0c:b8:9d:ec:4d:f9:f4:
         0a:76:88:bc:02:17:ec:6d:fd:d7:f5:65:2f:b5:46:34:14:44:
         f9:4f:d9:fc:e9:5f:2a:e7:f0:c1:46:45:fa:02:65:66:64:1b:
         b3:9e:34:59:38:af:d9:9c:25:ff:80:8e:7e:2e:5f:5f:8e:a5:
         7e:e5:a4:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----