Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/08c0a285-dd7d-36ce-938b-8e2f7c4d158d.roa
File:                     08c0a285-dd7d-36ce-938b-8e2f7c4d158d.roa (raw, json)
Hash identifier:          DyUtuOu5s3znO+P8lI/U5OYAEe5P6iYIAVRb/YWU4pA=
Subject key identifier:   3C:90:15:AB:FA:FD:65:45:92:6A:41:F5:0A:4C:BD:A9:56:22:2C:F4
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F432858489BA0B3BF693081DBEC709080
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/08c0a285-dd7d-36ce-938b-8e2f7c4d158d.roa
Signing time:             Mon 20 Jan 2025 14:00:51 +0000
ROA not before:           Mon 20 Jan 2025 14:00:51 +0000
ROA not after:            Sun 20 Apr 2025 13:00:51 +0000
asID:                     21859
IP address blocks:        98.98.34.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9b:a0:b3:bf:69:30:81:db:ec:70:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Jan 20 14:00:51 2025 GMT
            Not After : Apr 20 13:00:51 2025 GMT
        Subject: CN=a1af96d0-0ea0-4fc9-b336-296098ffe3ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:18:18:82:d1:d0:33:10:40:76:07:01:f2:e6:
                    c9:5b:e5:2b:de:2c:42:03:79:b6:35:e4:a7:b9:fc:
                    c0:e7:ed:4d:0a:52:4d:06:57:a9:97:d1:5b:d2:4e:
                    51:e1:6b:ad:b1:1e:17:eb:a6:03:08:27:a8:60:79:
                    98:72:4b:55:e9:0b:14:e0:8d:ce:a8:79:3e:95:7a:
                    f8:51:f1:55:0d:54:da:39:f5:ab:48:bc:2c:75:98:
                    79:d0:5a:6a:91:da:48:2a:96:96:00:ea:bf:e4:33:
                    8f:68:6f:8e:64:a1:97:5e:f5:7c:c3:7c:5b:c2:8e:
                    db:9c:ad:72:fb:f4:44:d5:08:32:ef:04:2c:15:99:
                    0d:b1:2e:18:16:94:07:ab:c2:d7:ef:fd:68:6b:c8:
                    01:80:3a:44:89:12:92:5f:0c:79:a8:08:da:de:9a:
                    78:0a:c1:5e:a2:0c:6d:e4:7a:37:17:96:b1:e6:2b:
                    88:e4:7c:0d:5a:15:ab:4f:f3:0b:ae:34:eb:3b:6e:
                    de:8c:cc:9a:92:cf:6c:ec:84:83:0b:5c:dc:fe:29:
                    b3:b7:ed:64:f0:81:c9:a1:c0:38:74:31:63:14:4b:
                    b9:cf:ec:a0:a6:66:0f:9b:52:08:72:27:0e:cd:d8:
                    b8:da:78:b8:b8:98:b6:76:f2:45:6f:a1:9e:1a:3a:
                    b2:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:90:15:AB:FA:FD:65:45:92:6A:41:F5:0A:4C:BD:A9:56:22:2C:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/08c0a285-dd7d-36ce-938b-8e2f7c4d158d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.98.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:62:7c:27:a4:8e:fb:55:56:fd:d7:9d:76:c9:ad:7c:cb:23:
         d7:12:50:a2:0f:4e:b6:54:42:ae:39:02:b9:31:ff:80:ae:ab:
         a9:f0:31:f0:30:eb:6a:75:a3:a4:96:65:e7:86:e7:0f:84:96:
         d2:74:47:6e:94:23:6c:68:a8:72:ed:72:3d:29:2b:aa:5d:d1:
         d7:99:aa:2f:19:d3:45:a3:41:a5:0c:9e:13:87:8c:35:76:9a:
         40:67:7a:29:44:52:2b:41:8d:e1:5e:6c:b0:3d:6f:12:00:24:
         20:31:c5:3c:ed:b2:3c:15:83:53:29:25:2d:5a:81:37:cd:19:
         da:46:9a:9b:16:08:91:f4:1d:64:f9:c1:f4:31:12:0a:b3:fb:
         ef:8f:60:e1:41:b0:f8:aa:08:e4:73:e6:a0:5c:9e:8d:21:ec:
         88:fc:56:1e:94:72:85:87:bf:69:a7:b6:27:08:63:ac:f2:a2:
         a0:6c:dc:71:ab:29:44:5f:d7:79:af:b3:f2:8e:0c:e9:0e:de:
         2b:64:06:b9:9c:55:9c:a7:63:b0:6d:36:da:30:ce:1c:36:66:
         fc:cc:d0:19:2f:68:62:3e:52:5b:7a:62:bf:16:40:e7:45:c8:
         f6:62:8e:8c:0d:6c:3a:08:fb:67:4f:17:cd:8f:51:50:c1:b1:
         b6:a3:12:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----