Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/51410778-9c6a-44d2-8b01-4cb49da70a6a/908e609f-13b8-3a33-b660-2a3baa90b4d0.roa
File:                     908e609f-13b8-3a33-b660-2a3baa90b4d0.roa (raw, json)
Hash identifier:          PbU3+m605xntQvhhkB3PQzT5JnATJX6rE7xFdgXjFvE=
Subject key identifier:   9D:07:E6:CA:92:EB:D6:CC:26:D4:30:5C:75:8A:2D:0D:29:A7:E9:E4
Certificate issuer:       /CN=51410778-9c6a-44d2-8b01-4cb49da70a6a
Certificate serial:       010D0C9F432858474585ED6D821111D52D47B200
Authority key identifier: E2:E7:A9:85:6B:7D:73:E9:89:22:06:0C:1D:75:D5:30:44:1D:0F:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/51410778-9c6a-44d2-8b01-4cb49da70a6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/51410778-9c6a-44d2-8b01-4cb49da70a6a/908e609f-13b8-3a33-b660-2a3baa90b4d0.roa
Signing time:             Fri 20 Sep 2024 01:00:31 +0000
ROA not before:           Fri 20 Sep 2024 01:00:31 +0000
ROA not after:            Thu 19 Dec 2024 02:00:31 +0000
asID:                     32746
IP address blocks:        199.201.96.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:45:85:ed:6d:82:11:11:d5:2d:47:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51410778-9c6a-44d2-8b01-4cb49da70a6a
        Validity
            Not Before: Sep 20 01:00:31 2024 GMT
            Not After : Dec 19 02:00:31 2024 GMT
        Subject: CN=60083352-788b-432b-8b71-2fe61de4f3a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6a:32:13:a0:1d:62:53:bf:55:c9:84:68:bf:
                    ce:88:f4:6e:58:59:30:46:c5:20:e6:2c:a2:69:bb:
                    f0:39:07:1b:a7:e1:c4:60:13:1f:63:61:3a:ab:c8:
                    ee:6e:68:d4:a1:f4:6a:f4:21:b4:9f:ed:01:1e:10:
                    ad:96:b3:64:c0:f0:2a:f4:76:10:22:41:35:5b:3d:
                    c4:19:1e:9f:59:bf:3f:5d:2e:1b:9b:e3:b8:02:73:
                    f7:a9:ee:37:df:b4:71:49:a9:94:09:49:25:a2:e0:
                    6d:a5:df:2b:a5:82:a1:f8:1f:85:ab:12:4d:1c:2d:
                    34:64:f1:fc:14:bb:9b:cf:29:48:ad:ca:95:3e:37:
                    b2:a9:43:03:b2:c7:f8:d7:55:c0:97:bf:4c:48:03:
                    40:40:1c:ac:f2:b3:6a:e3:d5:06:5d:3c:fb:4b:8d:
                    e7:38:73:36:ea:cf:57:0b:31:e6:df:0f:44:7c:e3:
                    84:9a:7e:12:4f:a0:fb:98:c4:0d:0f:76:e4:4f:1d:
                    0c:0a:34:2a:44:30:19:45:5d:31:e4:61:f9:c7:6a:
                    81:38:b8:3f:b2:9f:95:5a:e3:b8:8c:49:6e:1a:ba:
                    82:77:1f:ae:a0:17:4b:b9:89:ad:fb:d5:a9:aa:10:
                    47:f8:43:98:2a:52:cd:22:c4:37:00:40:84:06:f0:
                    1c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:07:E6:CA:92:EB:D6:CC:26:D4:30:5C:75:8A:2D:0D:29:A7:E9:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/51410778-9c6a-44d2-8b01-4cb49da70a6a/908e609f-13b8-3a33-b660-2a3baa90b4d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/51410778-9c6a-44d2-8b01-4cb49da70a6a/51410778-9c6a-44d2-8b01-4cb49da70a6a.crl

            X509v3 Authority Key Identifier:
                keyid:E2:E7:A9:85:6B:7D:73:E9:89:22:06:0C:1D:75:D5:30:44:1D:0F:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/51410778-9c6a-44d2-8b01-4cb49da70a6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.201.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:a7:8b:0c:82:70:68:ac:0f:f5:86:8f:34:be:72:1b:ec:8b:
         49:d8:a1:d1:2d:2f:fb:4b:34:4f:6e:42:cc:40:33:46:80:79:
         0c:67:0d:0e:5f:d8:cf:ea:3a:73:6a:60:6a:ce:ee:57:76:b9:
         a8:29:bd:86:75:8e:fa:d8:01:a3:b9:e7:f8:6a:c9:8f:81:a7:
         51:0b:fe:c8:4f:cb:ac:c1:ec:9c:00:7c:d8:11:1b:f0:76:23:
         45:af:83:0b:12:15:45:be:6f:23:21:75:29:84:90:d0:97:39:
         01:e0:c9:d1:d9:dc:7d:91:b5:77:fe:99:83:0f:5b:6a:6d:19:
         ce:fb:5c:83:30:4c:25:b3:9a:f8:f6:c8:55:6b:d9:65:10:df:
         92:9c:e8:75:d2:aa:a5:20:f9:a7:6e:9e:66:0d:4d:17:40:1d:
         ca:d1:1b:4e:f5:3a:6b:dd:ad:87:ad:49:c9:05:c5:08:e4:63:
         f2:2a:0c:e0:5c:a3:bd:8a:e3:db:28:b2:f8:15:cc:ab:aa:26:
         36:f9:6b:49:58:7a:35:6b:5c:25:cc:fd:92:b2:ec:a1:ab:94:
         dd:42:b6:a8:03:29:65:88:34:4a:74:a8:91:81:0b:e0:85:33:
         5a:78:e6:7c:bd:ab:a2:50:c4:2b:9f:ce:50:4c:9c:00:bd:3f:
         a7:b9:74:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----