Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903/66ad8129-478a-3a57-a4a9-3f420b58ffdc.roa
File:                     66ad8129-478a-3a57-a4a9-3f420b58ffdc.roa (raw, json)
Hash identifier:          MghOJtDWH5Vbsc7A/ZEZZEyJvJZlcI8pF6lzCXnzC1U=
Subject key identifier:   2A:94:5A:C9:B4:60:D6:E8:9F:36:F0:72:02:3F:1A:6B:78:F1:01:61
Certificate issuer:       /CN=20345bca-b793-4f14-a066-8653ac933903
Certificate serial:       010D0C9F432858489075FC4B2C2471CE54193B80
Authority key identifier: 10:6B:23:17:A7:88:A7:9F:AB:B4:F4:E5:33:83:B9:8B:9F:BB:CE:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903/66ad8129-478a-3a57-a4a9-3f420b58ffdc.roa
Signing time:             Thu 16 Jan 2025 14:00:50 +0000
ROA not before:           Thu 16 Jan 2025 14:00:50 +0000
ROA not after:            Wed 16 Apr 2025 13:00:50 +0000
asID:                     16509
IP address blocks:        206.41.57.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:90:75:fc:4b:2c:24:71:ce:54:19:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20345bca-b793-4f14-a066-8653ac933903
        Validity
            Not Before: Jan 16 14:00:50 2025 GMT
            Not After : Apr 16 13:00:50 2025 GMT
        Subject: CN=cc79f651-44b0-4788-82a0-ef01ea7c095c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:9a:12:2c:b9:49:da:e5:76:6c:d7:25:92:da:
                    63:75:1d:4c:11:09:a1:ff:01:3c:e7:da:22:da:8d:
                    dc:3b:6b:39:46:60:42:81:76:9b:3c:3b:3a:7e:f9:
                    93:11:b1:a2:ac:7b:d2:9c:65:84:fe:cc:5b:02:33:
                    50:db:6e:aa:29:7d:16:b3:82:c0:e5:67:48:8e:61:
                    c3:b2:24:1a:b2:fe:4a:fe:20:7d:21:d8:42:e6:0b:
                    26:41:39:2d:c5:b0:a6:93:2c:d5:1e:47:5b:02:1a:
                    73:57:71:a6:ac:75:4e:7a:3b:4f:3e:d6:77:82:45:
                    f4:b2:31:08:72:58:80:3c:f8:7d:e4:3e:b1:fe:59:
                    4d:5c:3e:09:9d:9e:f4:a9:f1:e0:ca:e3:5f:43:e6:
                    3d:ad:a7:6c:bf:78:22:38:30:73:0a:47:5d:4c:7e:
                    e6:e6:e8:a0:d3:e1:96:45:e6:4c:85:88:f1:b0:89:
                    4c:93:10:ee:6b:76:17:3a:2e:ca:35:4c:22:67:a5:
                    4b:8e:cc:69:0a:82:3d:23:6c:17:24:a6:53:8c:4d:
                    f6:5c:ba:ea:08:6c:9a:81:d5:30:04:f1:02:33:2c:
                    c0:20:8f:75:e3:fb:bf:97:57:d2:b8:2a:1e:c2:de:
                    27:f0:08:31:93:2e:50:ca:b0:81:34:1e:e3:ff:6d:
                    03:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:94:5A:C9:B4:60:D6:E8:9F:36:F0:72:02:3F:1A:6B:78:F1:01:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903/66ad8129-478a-3a57-a4a9-3f420b58ffdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903/20345bca-b793-4f14-a066-8653ac933903.crl

            X509v3 Authority Key Identifier:
                keyid:10:6B:23:17:A7:88:A7:9F:AB:B4:F4:E5:33:83:B9:8B:9F:BB:CE:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.41.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:6e:fc:fb:a3:26:7e:64:37:a4:5a:1c:9d:53:5b:2c:f9:42:
         1b:1a:96:28:c9:87:a4:c7:a8:ab:36:fc:73:ed:10:36:56:ba:
         b5:56:ea:95:67:95:e7:ce:ba:b3:af:d9:79:d3:6b:23:9b:b8:
         81:79:bd:4d:f4:b0:5b:56:a9:25:a5:0e:4d:08:e4:d8:43:a0:
         68:e5:31:64:9b:d7:62:77:ff:a7:40:9e:a4:97:0d:fb:17:22:
         c5:17:ee:03:97:dc:83:c7:44:c8:9f:2a:ec:60:f9:a3:06:c4:
         85:79:03:2d:e1:ca:52:97:d2:4d:f9:08:83:95:4b:b0:02:ff:
         87:18:3f:8a:29:7e:cd:e3:f3:37:fc:99:4c:a6:bb:f3:00:92:
         96:c8:8f:c9:c7:c0:5a:60:71:74:03:13:b2:91:39:b2:0a:01:
         c1:b9:87:e6:1f:56:7b:6f:a7:03:64:14:4f:c3:1e:22:37:6c:
         ef:95:4a:dc:a0:d5:fe:d0:7c:52:e8:3a:6d:0d:22:62:8b:e6:
         31:fe:4d:12:5a:02:87:d9:08:bc:65:9c:9a:d7:65:00:be:a3:
         8c:73:ee:5c:56:97:15:b7:a4:d9:b0:47:67:82:96:5a:2a:87:
         a3:b7:c8:5f:0e:41:0e:f5:25:01:e8:08:e4:f8:1e:ca:e0:c4:
         bd:bc:6a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----