Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2b29dd5e-c879-4389-a274-f07b1d4bd842/c10fedaa-89c7-3d6e-90b6-aaedb8a83617.roa
File:                     c10fedaa-89c7-3d6e-90b6-aaedb8a83617.roa (raw, json)
Hash identifier:          wod5NbNel4EiOes/jdNl28C7p5BTvZmFgs2+TxTX8EY=
Subject key identifier:   37:8C:5E:5A:DC:7D:A3:82:A5:5A:28:C9:43:93:08:6E:64:18:58:A6
Certificate issuer:       /CN=2b29dd5e-c879-4389-a274-f07b1d4bd842
Certificate serial:       010D0C9F432858495529553ED4BD0F751D9758A0
Authority key identifier: EF:81:61:B0:51:60:0F:60:D2:A2:E6:90:7F:20:66:1D:2E:4F:A4:11
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2b29dd5e-c879-4389-a274-f07b1d4bd842.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2b29dd5e-c879-4389-a274-f07b1d4bd842/c10fedaa-89c7-3d6e-90b6-aaedb8a83617.roa
Signing time:             Fri 28 Mar 2025 01:00:41 +0000
ROA not before:           Fri 28 Mar 2025 01:00:41 +0000
ROA not after:            Thu 26 Jun 2025 01:00:41 +0000
asID:                     54932
IP address blocks:        198.244.80.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:55:29:55:3e:d4:bd:0f:75:1d:97:58:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b29dd5e-c879-4389-a274-f07b1d4bd842
        Validity
            Not Before: Mar 28 01:00:41 2025 GMT
            Not After : Jun 26 01:00:41 2025 GMT
        Subject: CN=705b56a8-1558-4732-973f-08306f5c6a4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:2b:78:97:7b:eb:1c:ba:e6:8c:78:81:74:91:
                    67:de:ff:5c:7b:80:d8:8c:4b:ed:6a:44:9a:2b:7f:
                    f0:5e:6d:4d:fb:ba:19:18:44:fe:c0:2d:1b:24:e8:
                    45:09:79:28:bd:1f:f7:7c:4d:22:74:8e:32:3a:42:
                    aa:30:34:9c:73:fa:20:b6:61:8d:de:f5:3e:c2:06:
                    f5:c8:74:73:5f:6f:a8:cf:56:17:bf:e2:02:84:64:
                    28:cb:1f:f5:70:84:3c:92:46:34:b0:6a:b3:d2:97:
                    e4:8a:20:f2:89:e3:28:43:39:a3:2d:51:cc:2b:85:
                    b9:3a:1c:94:c4:ce:bc:45:ca:30:39:62:fe:17:b3:
                    37:7b:da:0c:4f:d6:b6:c4:6f:8f:9f:fd:59:62:cc:
                    51:e3:ff:21:f7:a0:e9:1b:86:e0:20:05:13:bd:fd:
                    f7:08:97:a2:58:34:9a:a5:bc:d9:0e:ff:c9:e2:82:
                    36:e1:04:b8:e3:51:a7:df:02:21:9e:1d:02:28:80:
                    99:68:13:b2:46:8c:61:bc:6d:a5:0e:b1:29:50:e0:
                    9a:45:e9:ae:ef:9a:da:00:92:1a:37:1f:20:f9:b8:
                    68:b7:0b:ac:64:7c:8a:b2:45:5e:e5:d1:8f:a9:ae:
                    be:a5:0a:b5:63:96:76:9e:7b:56:30:b3:c7:4d:74:
                    2a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:8C:5E:5A:DC:7D:A3:82:A5:5A:28:C9:43:93:08:6E:64:18:58:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2b29dd5e-c879-4389-a274-f07b1d4bd842/c10fedaa-89c7-3d6e-90b6-aaedb8a83617.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2b29dd5e-c879-4389-a274-f07b1d4bd842/2b29dd5e-c879-4389-a274-f07b1d4bd842.crl

            X509v3 Authority Key Identifier:
                keyid:EF:81:61:B0:51:60:0F:60:D2:A2:E6:90:7F:20:66:1D:2E:4F:A4:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2b29dd5e-c879-4389-a274-f07b1d4bd842.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.244.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:f6:db:bd:2f:55:5d:70:65:73:ee:95:0a:c9:06:b4:d9:18:
         0f:ba:1a:0b:a2:4c:d3:5c:a1:c0:08:29:c4:00:a1:30:0c:72:
         be:ae:8b:ef:59:35:48:2e:c2:26:5a:a4:dc:07:af:fd:32:3b:
         1b:06:57:49:0d:e7:f2:34:a8:0e:c8:3a:55:c9:1b:0e:65:18:
         ef:97:36:de:93:98:b2:f6:08:dc:c7:a3:03:c5:ed:3a:e7:66:
         36:5d:2d:7f:da:4c:c0:25:fe:40:b9:2c:9f:5f:e2:93:6a:16:
         af:0d:b5:94:88:1f:ac:fb:fa:f7:3b:d1:7c:50:64:af:b9:84:
         35:da:ef:00:fa:55:82:88:52:b3:2e:71:e2:97:a7:03:df:63:
         28:f5:9f:f8:14:52:4c:f2:64:31:82:1b:b4:b6:b2:b8:45:f3:
         c0:7f:7d:9f:ff:63:3a:c3:6b:00:56:30:e8:c5:78:22:bf:d0:
         2a:95:0b:79:b4:fb:88:a9:78:44:0f:3e:a3:ce:95:80:8b:21:
         d8:4d:bf:dd:be:db:83:88:b3:16:e6:be:4d:ed:03:15:81:f9:
         8e:06:9e:f3:3c:2b:f0:7b:2a:01:30:b0:ce:84:3a:f5:84:7d:
         0f:99:c7:3a:f4:ce:38:5b:14:34:9c:9f:b6:a1:33:d8:ea:1c:
         bc:dd:4c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----