Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0df77c4-4a94-461b-9582-441eb75796a4/e7dd884a-aed6-3cdb-959f-5446e5849ee7.roa
File:                     e7dd884a-aed6-3cdb-959f-5446e5849ee7.roa (raw, json)
Hash identifier:          ojMdo+ikqufDsxMdQgzodcxUuCATWNRLhuCTCLtMvOg=
Subject key identifier:   A7:DA:C0:D7:78:3F:96:CA:3F:5A:9E:A6:3D:58:F0:3D:00:4F:8E:E2
Certificate issuer:       /CN=d0df77c4-4a94-461b-9582-441eb75796a4
Certificate serial:       010D0C9F432858489340B0B701864B7D39232000
Authority key identifier: DA:61:E4:DF:36:71:36:8A:15:61:50:4B:93:78:46:05:F0:7B:C9:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0df77c4-4a94-461b-9582-441eb75796a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0df77c4-4a94-461b-9582-441eb75796a4/e7dd884a-aed6-3cdb-959f-5446e5849ee7.roa
Signing time:             Fri 17 Jan 2025 14:00:53 +0000
ROA not before:           Fri 17 Jan 2025 14:00:53 +0000
ROA not after:            Thu 17 Apr 2025 13:00:53 +0000
asID:                     394023
IP address blocks:        206.108.10.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:93:40:b0:b7:01:86:4b:7d:39:23:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0df77c4-4a94-461b-9582-441eb75796a4
        Validity
            Not Before: Jan 17 14:00:53 2025 GMT
            Not After : Apr 17 13:00:53 2025 GMT
        Subject: CN=eadbb3df-8045-4141-80fa-f0f3b7eff70e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d9:ea:c0:a1:0c:29:48:0c:53:db:17:7a:52:
                    0e:51:e2:08:4f:2b:c1:d0:03:a5:5d:98:e2:31:7f:
                    11:cc:f9:36:94:1a:6b:5f:3f:d3:91:96:3c:ef:84:
                    5d:f4:af:a1:01:93:6d:53:d0:ef:6e:82:e2:33:cb:
                    4a:a2:b0:3c:7e:df:86:69:8c:83:86:a0:1c:b9:76:
                    4a:ce:7c:fc:a8:b6:54:aa:6b:f5:88:7f:b2:ab:34:
                    ee:da:fe:3d:e6:86:c1:d9:d2:8f:16:08:a5:76:30:
                    ee:4c:66:3e:8e:5a:86:71:d4:54:a4:7a:71:cc:40:
                    cb:4c:36:c5:d5:ec:cf:02:94:a1:ed:b6:78:d2:a8:
                    a3:d1:d2:00:9f:a9:f8:d2:fb:f1:18:fc:b6:fd:09:
                    f5:d2:ff:0c:8f:00:71:1b:95:6a:9e:b0:fc:7e:49:
                    f8:45:2a:16:b4:86:67:f4:4f:c1:8d:ee:db:20:cf:
                    27:a8:48:22:bb:4d:3a:88:09:be:6c:8f:ce:54:08:
                    9b:35:1d:72:4a:29:57:92:ea:53:3c:50:bd:d8:b1:
                    6e:a1:ee:1e:75:a9:d6:bc:99:34:fb:0d:85:c2:cf:
                    3d:17:c2:cd:9b:89:52:5d:9c:af:42:3e:13:ba:68:
                    c5:da:ca:6c:2c:d9:2d:08:73:e0:90:60:9b:81:57:
                    a8:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:DA:C0:D7:78:3F:96:CA:3F:5A:9E:A6:3D:58:F0:3D:00:4F:8E:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0df77c4-4a94-461b-9582-441eb75796a4/e7dd884a-aed6-3cdb-959f-5446e5849ee7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0df77c4-4a94-461b-9582-441eb75796a4/d0df77c4-4a94-461b-9582-441eb75796a4.crl

            X509v3 Authority Key Identifier:
                keyid:DA:61:E4:DF:36:71:36:8A:15:61:50:4B:93:78:46:05:F0:7B:C9:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0df77c4-4a94-461b-9582-441eb75796a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.108.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:2f:78:4e:2d:63:4b:7d:c8:65:32:e4:6f:4e:b6:91:b5:0e:
         46:98:73:ce:db:f6:b9:e9:cf:9b:44:0c:cf:00:c6:d3:f0:71:
         c7:01:ea:0b:a2:33:3f:9e:64:c3:b3:73:a7:f2:4f:16:0e:05:
         9e:82:a2:a4:bf:66:82:f5:10:69:35:85:d8:2d:07:cb:64:7e:
         16:3e:5e:16:0f:d4:b5:14:61:3c:3b:8f:a2:43:0d:cf:9d:39:
         2c:f4:7e:7b:31:1c:ab:60:35:04:55:e4:1b:ec:9f:8f:74:a2:
         fc:10:16:b8:82:28:70:3b:14:1e:4a:47:f4:61:5f:02:f3:53:
         a5:60:6e:ff:b2:43:84:4f:96:83:14:e4:b2:7d:db:c8:f5:ba:
         9d:48:6b:21:94:3b:9c:1f:97:49:97:e3:d7:36:f4:6f:62:c6:
         fd:b4:5a:1c:52:08:ca:6d:1b:10:0a:6e:89:64:20:98:df:ad:
         fc:29:bc:3e:7a:00:32:38:74:a3:07:6c:ee:c8:04:68:05:f5:
         57:f7:c1:b6:2f:b1:11:f6:1d:e9:ca:e6:81:55:8e:8b:3a:e5:
         90:45:07:01:39:60:e5:9b:66:8f:42:6a:0f:b7:c3:b2:32:60:
         cd:b4:d6:c1:c7:5d:a3:ae:55:ae:3f:f1:d6:35:a3:c3:79:ef:
         b3:99:db:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----