Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2eb45f89-3486-3dea-8054-40519fe51453.roa
File:                     2eb45f89-3486-3dea-8054-40519fe51453.roa (raw, json)
Hash identifier:          tbQ/C5tFkoh+V/jiBHP53vKtDYRWQbFzA+hQ11KMKiY=
Subject key identifier:   2A:E5:C2:E6:C8:15:20:40:87:9B:07:5D:08:7B:FE:D9:AB:D4:C0:B1
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848A1361FBDAB8066E1824EE0F0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2eb45f89-3486-3dea-8054-40519fe51453.roa
Signing time:             Wed 22 Jan 2025 14:00:52 +0000
ROA not before:           Wed 22 Jan 2025 14:00:52 +0000
ROA not after:            Tue 22 Apr 2025 13:00:52 +0000
asID:                     26375
IP address blocks:        142.252.112.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a1:36:1f:bd:ab:80:66:e1:82:4e:e0:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jan 22 14:00:52 2025 GMT
            Not After : Apr 22 13:00:52 2025 GMT
        Subject: CN=2eaadb72-f554-43f1-9506-add88e755d3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:0a:84:d4:c1:37:b9:3e:79:f0:c7:95:60:fb:
                    e6:21:ea:b6:ee:1d:61:51:af:c3:05:70:b0:06:54:
                    6f:0e:ff:e4:47:72:48:3c:19:0a:c5:71:45:bb:c9:
                    58:da:03:43:7a:9c:05:01:6b:3d:be:7b:97:8d:79:
                    d5:5e:e4:ba:05:c5:90:ab:80:55:97:05:39:e8:57:
                    df:94:19:f8:1d:d8:7e:bb:96:f9:86:dc:2f:e2:19:
                    b7:37:9b:9e:ab:31:48:e7:45:9b:a8:2a:69:81:14:
                    76:e1:e9:6a:d4:5d:5c:06:5e:ca:d8:7f:b3:13:82:
                    10:dd:c8:9f:7c:39:1b:17:1f:4c:0f:c8:04:1a:43:
                    39:39:0c:10:63:ad:d1:0b:09:28:cb:b0:22:cc:7c:
                    9a:e0:ec:b6:11:55:54:4e:7a:2d:b9:1d:c3:d5:42:
                    de:86:66:5c:8c:8c:9f:24:2d:79:34:67:94:19:1f:
                    fe:7f:6e:71:08:68:0e:ae:d6:72:a3:5d:15:95:ea:
                    73:f2:1a:e3:c6:1e:86:36:3b:d0:7a:45:ca:e0:96:
                    96:c4:34:ea:54:44:c3:94:70:ca:c2:d4:72:d9:70:
                    32:bc:15:f1:29:a8:84:37:6c:c9:26:57:7a:86:f0:
                    d8:b7:29:8d:ac:c7:d3:c4:5b:b8:97:30:84:9b:a1:
                    bd:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:E5:C2:E6:C8:15:20:40:87:9B:07:5D:08:7B:FE:D9:AB:D4:C0:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2eb45f89-3486-3dea-8054-40519fe51453.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.112.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:2f:9c:4d:41:8a:a9:fb:07:b3:a3:25:4d:60:78:8d:6d:6f:
         64:2c:10:bd:d2:85:a4:21:02:cf:29:0a:6f:48:94:98:2f:a9:
         72:ec:58:dd:d1:19:80:2c:e5:9d:10:50:d1:ab:7d:6a:d3:ab:
         c3:ea:4c:c0:7f:66:aa:7f:e8:37:66:6b:17:c8:d8:a2:45:72:
         05:c0:6a:99:09:ce:8a:45:43:76:59:2e:90:dc:aa:40:e0:ad:
         ac:50:d7:ce:29:8a:3f:84:93:f5:89:be:df:28:12:10:af:be:
         41:0d:eb:95:dc:6a:d7:16:75:aa:c1:d3:0e:be:1c:c3:fa:f4:
         a2:aa:cd:52:b3:67:25:95:c0:bb:9e:eb:40:32:93:aa:47:4a:
         32:49:df:01:5a:04:e4:11:9d:1c:9c:6a:ef:b1:12:8c:93:23:
         ac:e8:30:8c:ef:ed:34:1a:61:d9:cb:04:4c:5e:57:c3:da:3e:
         d5:c1:4e:58:83:76:2e:44:f2:b3:90:00:e3:af:05:67:5c:eb:
         b2:46:04:f2:d1:10:9b:f2:4a:57:d7:10:7b:19:10:2c:4c:e8:
         3f:45:25:d8:21:bc:4c:b1:98:66:ca:a0:15:1a:1d:11:c8:e5:
         15:e9:c2:c5:cd:37:96:97:f5:55:3e:36:d9:cb:14:8c:0e:da:
         ef:b4:6f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----