Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/5d7e44d3-afa9-35dc-b913-118cc559cbe0.roa
File:                     5d7e44d3-afa9-35dc-b913-118cc559cbe0.roa (raw, json)
Hash identifier:          hmraAWf4AiJpQ6dk1i0PWEdZOoHf+R1wlPAvN38IX2E=
Subject key identifier:   59:95:27:EE:F2:43:F7:AC:2B:F9:BF:35:81:C8:71:39:C7:DA:30:86
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F432858487FB5D9D0F15F343879A7E300
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/5d7e44d3-afa9-35dc-b913-118cc559cbe0.roa
Signing time:             Fri 10 Jan 2025 14:00:51 +0000
ROA not before:           Fri 10 Jan 2025 14:00:51 +0000
ROA not after:            Thu 10 Apr 2025 13:00:51 +0000
asID:                     262287
IP address blocks:        198.145.76.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7f:b5:d9:d0:f1:5f:34:38:79:a7:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Jan 10 14:00:51 2025 GMT
            Not After : Apr 10 13:00:51 2025 GMT
        Subject: CN=7af16063-08a5-4aa3-809f-cc5853980d7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ed:9f:48:b7:48:2f:43:2e:a2:80:fb:41:2e:
                    95:e9:a0:d7:c3:e3:72:2e:b9:16:47:b8:b1:84:bd:
                    a4:3e:c7:8e:49:ed:22:fb:30:f3:5b:2c:23:a5:cf:
                    9c:3a:1d:d5:9c:1f:0c:3b:7b:9b:a4:d9:27:66:a3:
                    77:77:97:4d:84:30:da:ae:ca:bc:10:d4:f4:17:80:
                    1f:2e:36:ca:2f:32:ae:39:8b:c3:29:c0:8d:9d:3f:
                    41:34:66:39:3e:80:d9:f9:58:a9:71:b1:a7:a4:61:
                    3c:bd:93:dc:77:af:bc:18:15:57:b6:b2:96:9a:c8:
                    ef:5f:3c:20:29:73:64:30:49:2c:1c:3b:6b:5f:9b:
                    f0:aa:fc:34:7b:4f:0d:6b:e3:0a:e5:32:b8:42:68:
                    02:4b:8f:69:05:d7:db:6b:e2:68:f9:3b:d6:c8:c7:
                    04:60:d3:e6:2a:98:a9:4f:8b:15:20:f1:4e:7a:a6:
                    e1:ce:1c:ca:dc:f1:90:cb:ac:f1:03:7a:07:8c:ed:
                    5b:47:fd:49:15:3d:a4:e2:47:82:47:02:d9:99:3e:
                    01:b2:5e:c8:51:42:d5:75:12:14:1c:f3:65:fb:27:
                    25:9f:f0:2f:a7:ff:ee:fd:a6:d3:97:25:ee:7a:38:
                    3c:b1:75:d6:13:03:eb:00:d4:96:61:e4:89:9a:15:
                    55:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:95:27:EE:F2:43:F7:AC:2B:F9:BF:35:81:C8:71:39:C7:DA:30:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/5d7e44d3-afa9-35dc-b913-118cc559cbe0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.145.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:59:2b:2a:96:75:64:b0:c4:83:ce:98:ee:c2:1a:16:40:95:
         09:3f:01:ba:41:6b:aa:2c:ec:a6:2c:76:07:92:cd:5e:90:ad:
         c5:b7:09:d1:17:67:8f:d5:71:93:39:67:62:ff:de:99:23:59:
         0f:82:3b:87:a0:04:58:80:6c:2b:ee:54:f1:60:70:19:3c:f5:
         4f:d5:b5:75:e0:d8:01:6e:7b:09:15:75:9a:82:df:1e:14:ef:
         f0:63:da:d8:97:30:a0:46:07:c5:eb:ac:97:d6:14:3e:6c:5e:
         63:e2:0e:e9:11:39:f3:1e:28:fd:5e:bf:cf:6b:cb:e3:c0:f9:
         7b:53:91:9c:f6:ef:32:40:83:b0:b1:a3:4e:4f:5b:20:1d:94:
         11:40:b7:cb:16:57:a0:80:42:38:05:50:b1:f9:2c:96:72:fd:
         78:b7:8d:75:f4:3b:68:02:b3:43:9d:5a:a5:d0:0d:ee:bb:ab:
         9a:da:25:c1:1b:5b:58:1b:a5:cc:be:76:0b:b8:53:1a:7f:05:
         43:c0:73:35:1c:aa:4b:21:03:5b:a0:cf:c5:5f:c3:06:58:96:
         d2:bf:5b:c9:24:47:a4:41:71:c2:4e:55:a0:3b:60:52:f5:a5:
         cc:72:7f:8e:fd:ac:8c:18:10:13:aa:76:83:50:4a:19:92:0f:
         4d:6d:4e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----