Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/371ab6b7-8872-4856-a33d-61dbefb13d34/b32db1be-19ed-368f-8fb8-e4c5d0e1581e.roa
File:                     b32db1be-19ed-368f-8fb8-e4c5d0e1581e.roa (raw, json)
Hash identifier:          yf+NRaeKANf2yWYHUdxw5/SlprKLYGbIK3tzl/4TlKA=
Subject key identifier:   C0:CD:66:B1:A2:C3:D7:F6:E0:E8:37:3B:B3:4F:54:F5:5D:DC:8A:60
Certificate issuer:       /CN=371ab6b7-8872-4856-a33d-61dbefb13d34
Certificate serial:       010D0C9F4328584892AC0A3F622F08AFC0A24100
Authority key identifier: 79:E7:BB:97:2F:AA:40:17:3F:82:72:65:10:C6:A0:E0:59:A0:8C:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/371ab6b7-8872-4856-a33d-61dbefb13d34.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/371ab6b7-8872-4856-a33d-61dbefb13d34/b32db1be-19ed-368f-8fb8-e4c5d0e1581e.roa
Signing time:             Fri 17 Jan 2025 09:01:33 +0000
ROA not before:           Fri 17 Jan 2025 09:01:33 +0000
ROA not after:            Thu 17 Apr 2025 08:01:33 +0000
asID:                     15731
IP address blocks:        23.189.56.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:92:ac:0a:3f:62:2f:08:af:c0:a2:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=371ab6b7-8872-4856-a33d-61dbefb13d34
        Validity
            Not Before: Jan 17 09:01:33 2025 GMT
            Not After : Apr 17 08:01:33 2025 GMT
        Subject: CN=148eddfc-1761-40c8-b790-d2386a16bdd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:53:e6:2e:19:91:d4:24:c9:32:fc:e4:11:5f:
                    62:88:44:f4:d8:1b:74:18:81:71:c0:9e:14:b2:a5:
                    d9:d0:f4:f7:bd:bd:45:1b:cb:aa:70:6b:cd:6f:9d:
                    df:a4:84:df:d4:bc:27:ce:b3:82:dc:61:25:1f:51:
                    9e:bc:f8:c3:94:3c:f7:c2:2f:9e:5e:99:b3:aa:4f:
                    54:d0:62:e5:55:d1:95:50:0f:c1:f9:e1:31:d2:6a:
                    b2:5d:da:bb:5b:5e:84:ec:ba:31:36:92:9f:06:2f:
                    2c:ce:c4:ab:4b:84:90:bd:9f:ec:0c:ae:84:16:5b:
                    e6:23:66:91:23:5f:25:d2:0e:29:c6:3e:7c:93:36:
                    e1:44:3d:00:9f:8a:85:80:07:a5:2c:af:4b:f4:78:
                    2f:72:aa:f9:52:1a:64:e3:80:8a:09:cf:69:48:80:
                    27:17:d6:19:e1:b5:d7:fd:db:69:66:61:b8:4e:91:
                    17:1d:d0:d5:33:ac:2c:13:bf:47:23:d7:c5:0a:ee:
                    e4:0d:8d:91:cb:ca:5e:12:a9:b6:fc:e9:66:df:1e:
                    55:50:73:03:83:e7:d4:bd:bf:37:31:21:66:55:1b:
                    ef:b5:7a:e7:0d:e0:55:78:42:bf:74:c4:11:67:bf:
                    8e:08:66:22:f7:85:ba:7f:69:2e:f7:ac:92:38:7f:
                    a1:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:CD:66:B1:A2:C3:D7:F6:E0:E8:37:3B:B3:4F:54:F5:5D:DC:8A:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/371ab6b7-8872-4856-a33d-61dbefb13d34/b32db1be-19ed-368f-8fb8-e4c5d0e1581e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/371ab6b7-8872-4856-a33d-61dbefb13d34/371ab6b7-8872-4856-a33d-61dbefb13d34.crl

            X509v3 Authority Key Identifier:
                keyid:79:E7:BB:97:2F:AA:40:17:3F:82:72:65:10:C6:A0:E0:59:A0:8C:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/371ab6b7-8872-4856-a33d-61dbefb13d34.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.189.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:40:e8:de:d9:a5:f2:67:4f:01:34:33:4e:51:b0:11:40:db:
         9c:9e:f5:a0:55:d0:5f:e4:06:f1:76:48:e1:8b:68:59:a5:c8:
         6b:2b:6b:57:55:db:64:33:bd:71:c2:ca:3f:55:70:e4:a9:2b:
         5e:08:c5:dc:1c:70:41:ab:d6:1c:07:67:5c:7f:c0:30:d1:e3:
         59:f2:0b:7c:fc:bf:dd:d5:0d:33:ab:b5:a8:8c:16:6e:84:d6:
         bd:0f:90:02:e5:3e:ca:cb:4e:24:b0:9c:11:7f:3f:09:ed:dc:
         f8:d2:8d:af:65:97:ae:3f:d0:dc:29:05:b6:b2:d1:e5:26:85:
         7a:9d:fc:29:bd:3d:35:26:76:8c:8f:9c:ec:ee:07:06:1f:62:
         ee:95:9d:0b:5a:60:2c:69:2a:f0:93:79:e0:01:ff:0f:46:03:
         06:86:da:76:8b:00:4b:7c:a1:ef:52:c8:96:e9:6d:5b:3f:83:
         f0:a8:d4:4d:28:9c:76:c9:95:9b:39:8a:3e:79:3e:cf:31:25:
         12:ce:2d:fd:86:97:a5:d2:30:b9:f4:31:5e:7c:1c:16:e6:b9:
         bf:2d:d7:d6:9c:8e:c2:b4:2e:9f:e9:b8:6a:29:79:de:c0:56:
         88:65:5f:5f:1b:05:6c:5f:25:9e:91:30:2f:9e:a1:6f:17:c9:
         eb:02:9a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----