Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46107a8c-29da-4914-8858-2b42aa4d8b4a/02552926-b08c-303e-b167-63e47ac848a9.roa
File:                     02552926-b08c-303e-b167-63e47ac848a9.roa (raw, json)
Hash identifier:          3qUVMSaxh76VFyOVRwSvGg6d1LPUieIbjkXw4XeJr2E=
Subject key identifier:   59:A6:BE:DC:3A:91:9C:92:67:D2:FA:98:8F:AA:5B:D9:2B:9D:DF:67
Certificate issuer:       /CN=46107a8c-29da-4914-8858-2b42aa4d8b4a
Certificate serial:       010D0C9F4328583AFE2BF801F2A7FA6C80F24E40
Authority key identifier: AA:4F:4F:E9:E2:28:28:6A:EC:B1:88:AA:98:ED:11:87:E9:E2:2F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46107a8c-29da-4914-8858-2b42aa4d8b4a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46107a8c-29da-4914-8858-2b42aa4d8b4a/02552926-b08c-303e-b167-63e47ac848a9.roa
Signing time:             Wed 31 Mar 2021 04:00:00 +0000
ROA not before:           Wed 31 Mar 2021 04:00:00 +0000
ROA not after:            Sun 23 Nov 2025 05:00:00 +0000
asID:                     3356
IP address blocks:        174.46.104.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:fe:2b:f8:01:f2:a7:fa:6c:80:f2:4e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46107a8c-29da-4914-8858-2b42aa4d8b4a
        Validity
            Not Before: Mar 31 04:00:00 2021 GMT
            Not After : Nov 23 05:00:00 2025 GMT
        Subject: CN=ae39ceb8-2c9e-4aec-86cb-4b99506fa4e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c6:93:e6:5b:20:18:1f:ac:43:53:83:2f:5d:
                    5d:e2:16:80:f1:bb:f3:f7:a5:33:86:99:c9:52:6b:
                    27:26:bb:ba:35:a7:2c:66:cd:1b:eb:52:80:e5:0f:
                    10:c5:3f:74:da:cd:03:a0:f7:08:63:49:73:6a:e6:
                    5d:14:c2:1e:15:93:66:0a:48:7a:97:9f:94:93:cc:
                    cf:69:e2:e8:a8:29:7d:9f:62:f8:36:c6:2c:be:b1:
                    32:d8:f3:1d:b8:ef:49:89:ec:3f:1a:aa:67:e7:4a:
                    c9:5d:03:e1:d3:2a:38:7d:7b:71:35:4e:08:ae:b9:
                    89:be:46:f3:a4:16:5c:88:3f:64:fb:7a:b1:a3:be:
                    0d:d0:d6:50:c0:d3:9c:a1:74:b0:e1:64:a9:2d:12:
                    5a:db:77:18:1b:2a:b3:44:bb:37:f1:e4:3f:c0:5a:
                    f4:47:8c:bd:1b:7a:62:f7:d0:8a:3e:ee:9f:ab:3e:
                    45:45:91:70:39:95:1d:ec:bc:47:e0:02:e6:4a:59:
                    ee:bf:2c:eb:90:f5:21:ee:01:c5:40:df:de:a5:9c:
                    6f:c4:b5:9e:02:fc:24:51:dd:dc:63:9e:06:d3:68:
                    0a:c2:4b:e5:31:71:0e:0d:6c:ed:b0:cb:39:e0:5c:
                    27:5d:22:69:2d:06:32:ae:a3:3f:ff:fb:e8:f3:f4:
                    f9:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:A6:BE:DC:3A:91:9C:92:67:D2:FA:98:8F:AA:5B:D9:2B:9D:DF:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46107a8c-29da-4914-8858-2b42aa4d8b4a/02552926-b08c-303e-b167-63e47ac848a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46107a8c-29da-4914-8858-2b42aa4d8b4a/46107a8c-29da-4914-8858-2b42aa4d8b4a.crl

            X509v3 Authority Key Identifier:
                keyid:AA:4F:4F:E9:E2:28:28:6A:EC:B1:88:AA:98:ED:11:87:E9:E2:2F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46107a8c-29da-4914-8858-2b42aa4d8b4a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.46.104.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:08:3e:8b:3d:73:0a:78:92:a5:2c:c9:1c:16:70:08:b4:a1:
         fd:c1:17:49:2f:f5:49:26:c6:55:0b:e4:b5:3c:d0:22:3f:14:
         73:0b:bb:f6:cf:23:c7:1f:1b:3c:f4:e1:dd:e9:af:ec:fa:25:
         a7:32:f7:5b:d2:9b:56:b4:38:d1:ed:2b:e2:56:9a:c5:34:c8:
         f8:e4:1c:3b:60:bc:71:67:05:9b:28:f3:a6:b4:cf:6a:ac:ec:
         47:2f:7d:11:fa:94:f8:6a:f2:f7:de:a1:ac:63:30:5d:d3:06:
         95:c4:7e:b4:a7:91:c9:bb:12:51:10:60:22:86:19:9d:88:0b:
         75:b1:7d:81:01:eb:63:81:15:5c:d9:50:f0:b6:1c:f8:2c:92:
         5a:3f:3c:75:a7:bb:7b:82:c4:a6:bf:23:68:75:13:a6:52:0f:
         3e:8a:cf:3c:f2:98:37:ac:66:27:a6:ad:ad:6c:c2:c4:76:8d:
         f1:cb:aa:44:be:04:2b:aa:0e:b0:11:e2:3c:c5:87:aa:d2:a8:
         5b:25:3c:8d:d9:58:2d:9e:94:84:71:e0:af:c9:c3:bf:60:81:
         8a:b5:62:f3:20:8e:7d:3e:b9:a6:96:b5:7a:d1:86:f8:75:52:
         6d:03:eb:09:8f:1b:a2:31:75:be:2d:8a:38:1e:46:c2:43:06:
         fe:77:f9:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----