Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/736f8072-d133-33fc-b7b1-5bf7af41b994.roa
File:                     736f8072-d133-33fc-b7b1-5bf7af41b994.roa (raw, json)
Hash identifier:          Rj8e4c9vbplsAFg/EWVeW0xWQyPNlpu3+WSRHRTPwjo=
Subject key identifier:   E5:3C:02:01:95:F8:94:C1:6F:C0:E1:54:82:30:A7:8B:94:17:56:7F
Certificate issuer:       /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial:       010D0C9F43285848B35B6E0D00FA74255D938DE0
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/736f8072-d133-33fc-b7b1-5bf7af41b994.roa
Signing time:             Wed 29 Jan 2025 02:00:39 +0000
ROA not before:           Wed 29 Jan 2025 02:00:39 +0000
ROA not after:            Tue 29 Apr 2025 01:00:39 +0000
asID:                     19886
IP address blocks:        171.162.124.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b3:5b:6e:0d:00:fa:74:25:5d:93:8d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
        Validity
            Not Before: Jan 29 02:00:39 2025 GMT
            Not After : Apr 29 01:00:39 2025 GMT
        Subject: CN=08145a3d-52a5-4417-9c9a-90e7a94ed0a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:4f:e3:f9:c3:63:4c:9b:17:3f:18:96:4a:06:
                    3f:e7:98:99:bb:7b:5e:26:c9:a0:9d:16:fb:9e:0e:
                    77:1d:ec:76:e9:e8:4d:57:23:5a:aa:ac:51:20:d0:
                    18:b1:53:2b:41:d0:7e:8c:33:69:81:34:d6:e2:43:
                    41:9d:3c:8e:1a:c0:51:f1:08:d1:25:44:0e:8c:c9:
                    60:1f:0e:a4:77:b1:87:55:be:95:03:e6:e7:aa:64:
                    84:a9:1d:25:ae:14:70:c4:5e:c5:c2:c5:25:da:2f:
                    63:b5:b8:8f:22:90:8b:a4:76:05:0b:cf:af:7d:74:
                    87:74:ff:4b:9c:35:00:bf:f7:4f:23:f0:1e:01:5d:
                    32:e1:16:3c:e6:c0:bc:8f:fb:99:a6:46:0c:f2:30:
                    ae:02:ce:b4:b5:2a:41:ab:5d:8e:63:d5:6f:a9:b1:
                    b7:59:14:de:7d:c6:ec:dd:8b:af:9a:78:d0:aa:67:
                    86:33:89:99:89:cc:22:93:a7:ea:c2:b9:e3:2c:53:
                    0d:80:44:31:71:db:24:55:7d:91:11:6b:c6:b5:2e:
                    59:cd:35:72:fe:dd:fb:f5:61:42:c7:7f:3a:ca:a4:
                    3f:ee:a0:cd:cb:33:67:5f:7d:44:b9:60:e8:50:d9:
                    30:b3:d3:5f:86:f9:52:c6:ab:c1:5f:0c:bd:61:7b:
                    05:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:3C:02:01:95:F8:94:C1:6F:C0:E1:54:82:30:A7:8B:94:17:56:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/736f8072-d133-33fc-b7b1-5bf7af41b994.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl

            X509v3 Authority Key Identifier:
                keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.162.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:d1:24:da:9c:7a:e4:a4:dd:7f:9c:7a:c5:2f:15:5f:6a:10:
         3b:69:8b:9c:2e:44:30:01:fc:c3:55:a9:ff:2b:e6:e9:fe:36:
         3f:f3:28:01:68:46:09:e1:fa:5f:5e:6d:15:d7:57:f1:6e:e4:
         b7:c6:fd:a0:f7:dc:57:02:82:7f:1f:b8:58:84:85:c9:32:a4:
         3a:a3:a8:5c:0e:b7:72:b5:a0:51:9a:a4:b7:f2:63:30:5b:27:
         96:3c:2d:9a:35:e3:c4:dc:71:20:ac:b9:4c:72:3b:ec:13:ae:
         20:07:b7:18:1a:7a:6e:f3:2a:cc:93:da:e3:06:93:41:63:79:
         6f:bd:d0:4a:41:a4:3a:b1:95:c0:bd:66:ee:99:cc:8c:3a:c2:
         12:46:3e:ce:c1:69:d3:40:67:cf:e2:1d:0c:3b:4b:24:80:02:
         d4:21:f3:d3:61:90:96:d3:32:33:a4:02:90:b4:3f:3b:84:87:
         90:3b:61:09:b8:2f:05:2b:ae:d1:8b:bb:cf:3d:6d:df:a5:4f:
         c5:74:32:c5:58:5a:cc:14:fe:af:7d:b1:ee:0c:53:a6:cc:b1:
         11:35:1c:70:c7:ac:f0:38:42:fe:66:2a:fc:0b:c5:0f:5f:42:
         00:ee:00:0f:88:34:ab:fe:5b:bb:37:dc:66:18:92:1f:95:9e:
         d3:18:a7:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----