Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/813ece1f-acbc-3243-8172-918694d39c8b.roa
File:                     813ece1f-acbc-3243-8172-918694d39c8b.roa (raw, json)
Hash identifier:          r8SBo1aXglOJrH7Ae2KMQmPr7zPMWOqcJFztZrzTeZY=
Subject key identifier:   63:2B:D2:47:9F:91:62:11:86:76:85:2B:A6:9A:A0:62:73:48:BB:F1
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848D64125045FF63B8F61C60C80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/813ece1f-acbc-3243-8172-918694d39c8b.roa
Signing time:             Mon 10 Feb 2025 14:00:52 +0000
ROA not before:           Mon 10 Feb 2025 14:00:52 +0000
ROA not after:            Sun 11 May 2025 13:00:52 +0000
asID:                     204957
IP address blocks:        23.230.241.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d6:41:25:04:5f:f6:3b:8f:61:c6:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb 10 14:00:52 2025 GMT
            Not After : May 11 13:00:52 2025 GMT
        Subject: CN=9818f394-e73e-4280-80c8-d7c58d476dc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:0d:a7:68:bd:d6:3e:50:4f:79:54:87:6d:4b:
                    73:92:68:77:5c:03:0c:59:37:a2:43:57:ba:4f:2d:
                    37:ec:1d:0f:d7:0c:1d:99:2d:3b:81:bf:4d:92:2b:
                    0d:d4:e1:c5:99:ef:1f:43:06:16:7f:40:27:67:55:
                    f2:70:b2:bd:18:79:62:31:fd:76:ac:ad:0c:e5:72:
                    db:69:8c:87:9c:14:9a:bf:c6:ce:af:e2:77:08:fe:
                    b1:17:90:e9:b7:25:fd:03:7a:c6:ea:c8:7e:fb:45:
                    22:97:be:9a:c1:dc:dc:08:7f:8c:3b:79:93:1f:f0:
                    fc:48:ce:f1:e1:9a:fe:04:a4:9c:cb:41:6f:21:ab:
                    2d:91:c1:94:a7:51:6a:fb:61:06:99:6e:42:6d:21:
                    9a:f6:e4:fa:b0:85:81:e4:ad:fd:e4:5b:c5:19:94:
                    41:6c:f3:bf:16:48:38:95:e8:eb:7e:58:e3:aa:2d:
                    d8:dc:0a:c2:2c:7b:11:2b:a8:45:be:73:16:9d:e2:
                    1f:91:12:ff:b0:24:3e:d4:3a:0f:89:5b:33:3f:97:
                    7a:d4:fb:c6:54:a1:b7:42:f4:96:07:4e:50:98:ef:
                    e4:e1:04:9b:7d:c7:02:13:75:d0:d3:c1:18:ca:6a:
                    d3:3a:be:a8:83:14:d4:ad:74:62:3a:67:f9:3c:22:
                    46:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:2B:D2:47:9F:91:62:11:86:76:85:2B:A6:9A:A0:62:73:48:BB:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/813ece1f-acbc-3243-8172-918694d39c8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:5a:a6:36:8d:c8:ae:d2:50:5b:23:d7:e1:28:a7:b8:ab:39:
         c1:5a:9b:08:81:42:c9:ec:85:4f:a7:75:c5:4c:59:b3:d3:87:
         9c:f7:9a:84:87:3e:2d:4f:e4:0b:8d:80:3e:5a:f1:7a:fb:d5:
         f2:6b:82:ae:42:23:d4:10:30:0b:f4:57:db:6f:81:15:40:ab:
         1b:99:5c:c9:e8:c1:00:3f:7b:29:33:6b:31:0b:9b:29:32:46:
         5e:f4:2a:82:41:ff:c8:f9:1d:11:33:f1:e6:96:49:a8:c0:2e:
         92:b5:b5:b8:7f:2b:1e:87:71:c6:d8:16:8a:c7:ed:6f:d4:1a:
         5e:46:25:66:c5:6d:fd:de:b5:38:13:04:4a:98:47:d9:d3:68:
         b0:7f:51:a5:ec:ab:b5:72:64:31:40:fa:c4:a4:aa:05:32:c3:
         fa:54:f6:c3:51:fc:9a:63:f4:c8:58:5c:54:e3:ec:d8:6a:a1:
         7b:62:48:cc:aa:2e:ca:b3:1d:c0:fa:0a:b2:cc:c9:e4:39:d7:
         ca:d0:55:55:8d:fb:47:6f:d4:1c:a8:f0:8e:9e:57:fb:ce:bd:
         19:72:0b:e1:c2:ac:86:7d:23:b7:96:a2:39:12:5e:97:2e:61:
         bd:c3:04:ef:5a:bb:54:31:01:c4:8a:70:62:9f:19:3e:5b:28:
         7b:c6:4e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----