Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/61e9979b-9caf-3322-a78b-335e07f4e309.roa
File:                     61e9979b-9caf-3322-a78b-335e07f4e309.roa (raw, json)
Hash identifier:          JrPpXdTp5MutdsVUVZkIYckPgFvaPdyVhiZuekXwv4w=
Subject key identifier:   21:9A:2B:71:1A:C8:A3:07:81:D8:C7:B7:4C:31:23:C7:77:76:CA:34
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285848ADC618610189F99E60B96CB0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/61e9979b-9caf-3322-a78b-335e07f4e309.roa
Signing time:             Mon 27 Jan 2025 02:00:39 +0000
ROA not before:           Mon 27 Jan 2025 02:00:39 +0000
ROA not after:            Sun 27 Apr 2025 01:00:39 +0000
asID:                     202
IP address blocks:        204.104.133.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ad:c6:18:61:01:89:f9:9e:60:b9:6c:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jan 27 02:00:39 2025 GMT
            Not After : Apr 27 01:00:39 2025 GMT
        Subject: CN=49eb5ff3-d77a-4b4b-a3c8-de1f943ca347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8f:dd:c5:0a:94:32:d7:48:0a:ec:ed:ff:d7:
                    02:08:7d:d9:2f:fc:09:47:01:9a:17:03:93:83:d7:
                    14:94:46:da:0a:46:86:ff:9e:9a:06:35:96:0e:b0:
                    82:ba:2b:f4:cc:5a:d6:85:34:99:d9:aa:6d:5a:09:
                    62:6e:6d:a1:c9:81:22:5a:e2:a4:e6:ef:15:86:dc:
                    12:66:fc:0b:b3:df:05:f1:d3:93:07:db:30:a4:43:
                    40:5d:c5:2b:99:b6:fc:eb:34:d7:1a:96:f3:d1:24:
                    f0:ac:16:6f:e9:f4:00:58:f1:6f:30:3a:84:6a:7b:
                    ef:84:44:35:f9:34:5c:0e:96:81:ba:21:f9:9f:ed:
                    49:a6:10:9c:a4:4e:94:db:bb:6b:b5:81:93:bb:50:
                    30:2b:2e:af:f3:40:76:a7:44:82:05:b6:b0:ca:d3:
                    ba:03:a0:71:f5:fb:7f:27:6f:79:e3:c6:8e:93:b8:
                    8d:a2:2c:5f:e9:c5:76:48:38:c5:0d:19:54:06:37:
                    72:5b:6c:6f:56:0d:71:37:eb:4c:8c:88:61:d7:e0:
                    09:77:2c:31:48:12:49:ca:6f:2a:55:e6:5b:f2:73:
                    2d:76:8c:f1:5f:48:de:d3:aa:6d:f8:fb:31:bb:c1:
                    ad:1d:3b:34:3b:ca:45:43:3a:26:95:a0:ca:52:37:
                    65:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:9A:2B:71:1A:C8:A3:07:81:D8:C7:B7:4C:31:23:C7:77:76:CA:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/61e9979b-9caf-3322-a78b-335e07f4e309.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.104.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:2b:93:36:4d:f8:f7:3a:ca:7b:96:8a:b7:2c:24:9e:39:bd:
         ad:86:f4:c1:e9:d7:f5:fd:6d:9a:6e:72:13:bb:d1:5f:bd:a7:
         55:c0:47:96:c9:0f:af:aa:46:86:f4:c7:bb:5a:19:8f:a4:65:
         bf:75:f4:4b:0a:92:16:50:b9:b8:ce:5f:08:4b:c3:b1:34:14:
         f2:d0:ce:75:bf:f3:69:be:ee:4f:23:02:eb:36:eb:30:a3:45:
         5c:c1:3b:eb:7d:f4:1f:b2:11:dc:29:d6:94:90:ad:75:09:b6:
         8f:17:3e:dd:e7:9f:5a:ba:c9:1d:ed:de:4b:c0:81:3e:d5:1c:
         40:bd:9a:3f:c7:f2:00:4c:96:73:10:65:a7:dd:a0:2e:e5:a6:
         c2:9a:2d:89:ca:78:48:08:03:6c:6b:c8:1b:da:f7:d5:9c:48:
         f6:d8:31:6f:1d:64:27:1b:04:fa:0d:c6:94:c7:5c:cc:4d:46:
         42:5e:f2:71:73:5c:eb:9c:ee:aa:9f:92:cd:de:d6:3b:d0:ea:
         a8:53:08:b7:44:d5:aa:fb:82:ac:08:d6:49:b1:26:38:bf:83:
         9f:62:26:70:e4:cd:0a:55:c6:86:06:c6:5e:08:0f:53:37:d3:
         db:b0:f4:45:dd:29:b2:a2:48:d3:81:70:bb:6c:02:77:66:d4:
         61:21:b4:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----