Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a240320b-048b-30ff-b2dd-5b09f5eb27f8.roa
File:                     a240320b-048b-30ff-b2dd-5b09f5eb27f8.roa (raw, json)
Hash identifier:          7W0bsxLIQWBFNCHvvovyJXVxmBjWEkfYZYkWyWjZHx0=
Subject key identifier:   02:51:54:9D:22:DF:77:EC:34:78:D2:BC:E0:B4:D6:07:FF:15:7F:EE
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858489340BD8DBBD6CB0E42DDE980
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a240320b-048b-30ff-b2dd-5b09f5eb27f8.roa
Signing time:             Fri 17 Jan 2025 14:00:53 +0000
ROA not before:           Fri 17 Jan 2025 14:00:53 +0000
ROA not after:            Thu 17 Apr 2025 13:00:53 +0000
asID:                     16625
IP address blocks:        23.212.108.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:93:40:bd:8d:bb:d6:cb:0e:42:dd:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jan 17 14:00:53 2025 GMT
            Not After : Apr 17 13:00:53 2025 GMT
        Subject: CN=8d87f77e-3d53-48c2-adaf-561d9a60db80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:78:94:25:54:5b:ed:90:1e:9b:97:27:7f:35:
                    5a:9f:62:d4:9c:d0:b3:33:00:ec:3b:b4:8e:dd:80:
                    29:5d:07:76:42:d1:cf:83:7b:97:75:78:6e:13:1d:
                    47:89:06:60:c2:14:fb:80:69:c3:6d:2a:ae:8e:32:
                    b6:84:1d:12:ab:9f:7c:a1:d7:1a:fa:14:75:e3:65:
                    a3:f5:17:a1:55:f4:4b:97:26:c7:f8:5d:b4:36:18:
                    a0:bc:94:cc:49:c3:db:a4:ba:bc:47:98:3a:41:e0:
                    46:ff:e1:a0:5e:99:d5:9c:8a:3a:d5:59:94:85:d1:
                    e5:d4:09:ce:17:86:47:bc:fd:8e:a5:6d:4b:b5:50:
                    80:2d:ff:e2:e4:4f:71:9f:21:54:14:05:5b:08:81:
                    72:a7:1c:0c:74:8f:ff:1d:9f:1a:d3:2a:e6:62:e4:
                    48:3d:78:64:12:6a:a7:53:c1:f0:6d:e6:0f:11:e9:
                    3a:72:e8:2f:a0:ac:8d:68:e5:9c:9b:79:c5:f0:9b:
                    c3:92:94:24:ac:76:b3:c7:2a:ef:ce:f3:d1:a7:8f:
                    fb:b5:1e:e3:ed:a8:7d:72:6c:c2:47:8a:79:42:5f:
                    d3:43:a7:9c:77:8c:aa:2f:38:1f:3d:3b:bc:f9:17:
                    49:42:af:41:7c:d9:07:24:a2:ab:25:28:8d:98:b0:
                    15:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:51:54:9D:22:DF:77:EC:34:78:D2:BC:E0:B4:D6:07:FF:15:7F:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a240320b-048b-30ff-b2dd-5b09f5eb27f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.212.108.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:cd:c3:6d:2f:a5:e3:8f:df:a2:2c:9a:3d:64:f6:34:d1:e5:
         81:67:8e:39:49:49:aa:8d:19:45:fd:e1:85:4b:d2:8d:04:df:
         ce:94:eb:68:a7:bf:88:b6:06:f5:96:c8:9c:3d:72:4d:53:96:
         77:45:dc:7f:9f:9c:71:75:30:da:b2:7f:c5:ba:68:72:d5:a4:
         7d:34:9e:be:0e:01:45:0d:97:ea:c8:02:f8:19:74:12:2a:2a:
         53:19:7d:b4:aa:1f:5c:52:c4:e0:13:56:8d:37:f2:ed:0e:48:
         1c:c7:1c:b0:52:93:54:47:68:d5:af:9e:e1:23:af:e4:42:d6:
         21:fd:25:d9:6c:2e:41:4e:74:7f:69:6b:79:89:67:69:53:02:
         6f:e2:3d:2b:7a:49:a0:d7:1c:fe:e4:34:59:a4:d0:42:c2:57:
         1c:fb:b4:a3:cb:0e:b4:aa:a1:29:1a:c9:37:e1:33:42:5a:aa:
         78:83:e5:82:16:dc:d1:95:4f:ed:99:53:a8:63:a9:cf:89:bd:
         61:14:15:db:1e:46:db:13:a1:c6:7f:4c:9c:3e:25:29:a8:f6:
         3f:1b:36:b3:c0:6b:20:50:98:8a:6d:10:8b:95:d8:eb:f8:b4:
         fe:da:3e:a2:37:84:ac:a9:c0:0f:d6:8d:85:0f:bc:98:6a:97:
         97:d9:e7:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----