Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c5ec0276-01a5-3233-a77c-f326704a9b71.roa
File:                     c5ec0276-01a5-3233-a77c-f326704a9b71.roa (raw, json)
Hash identifier:          tRXtYRrBeY6JA6ZLbxWXJkRUKt3xLrh97ZY4w8b0x1w=
Subject key identifier:   B5:52:E7:D5:54:82:50:40:BB:10:74:F9:40:0F:8B:6F:CF:F2:9C:F4
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858488DAB69689F01E78AF3A5E180
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c5ec0276-01a5-3233-a77c-f326704a9b71.roa
Signing time:             Wed 15 Jan 2025 14:00:51 +0000
ROA not before:           Wed 15 Jan 2025 14:00:51 +0000
ROA not after:            Tue 15 Apr 2025 13:00:51 +0000
asID:                     35994
IP address blocks:        23.55.234.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8d:ab:69:68:9f:01:e7:8a:f3:a5:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jan 15 14:00:51 2025 GMT
            Not After : Apr 15 13:00:51 2025 GMT
        Subject: CN=6444800c-dbc3-4b4d-a085-2ef109eb3fbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9b:d4:cf:4f:20:25:f8:f8:8f:dc:b3:44:e3:
                    51:de:67:83:f4:e1:f3:c9:cd:87:c3:bd:cf:7f:ed:
                    b9:02:18:22:4f:a8:2d:16:80:32:ae:c4:5e:c9:92:
                    98:e5:89:2a:b0:d2:09:4b:5c:0e:27:7b:f8:84:44:
                    ba:fb:d0:ee:11:c8:f0:40:c2:c7:ac:c9:a1:fb:f2:
                    03:36:b5:4c:d5:61:8b:1b:fc:84:4e:fe:1d:1a:4f:
                    bd:af:31:96:f6:7f:2a:52:aa:59:f6:f9:03:00:ce:
                    1d:35:11:9f:c2:91:7f:ff:d9:6f:e1:c1:ee:19:9e:
                    13:ea:22:75:18:25:3f:3f:79:63:9d:77:4e:63:ab:
                    9c:67:af:ca:69:e6:f4:01:95:3b:12:74:b3:fe:57:
                    b5:da:bf:1c:a3:ad:cd:45:e6:1d:eb:c3:e1:a3:71:
                    45:d3:0f:52:12:08:15:27:48:69:52:3d:23:10:4c:
                    37:ec:19:fa:5a:2c:6f:b0:dc:67:cd:c0:a7:da:68:
                    f8:38:64:93:6d:ba:55:61:aa:32:b2:5d:63:27:71:
                    89:65:99:f2:9f:d5:a1:9e:4a:35:57:6f:2b:13:bf:
                    d2:a9:eb:9c:30:63:43:90:41:e4:92:ce:da:47:ea:
                    fb:56:e0:0b:d5:74:d8:5f:e2:51:ea:8e:af:52:29:
                    ba:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:52:E7:D5:54:82:50:40:BB:10:74:F9:40:0F:8B:6F:CF:F2:9C:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c5ec0276-01a5-3233-a77c-f326704a9b71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.55.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:53:ef:70:a4:25:72:4a:09:3e:ef:7a:22:fd:61:6f:6b:63:
         84:05:18:2a:ec:b5:d2:b3:82:7c:84:40:c9:2c:5d:6b:21:16:
         5b:2f:74:38:c5:17:dc:82:c9:10:fc:ca:5c:2d:ab:9e:79:07:
         e6:3d:02:eb:6c:7b:7e:9f:1d:69:f3:61:3f:24:f8:73:67:5d:
         4f:02:7e:9d:f3:c4:17:bc:d9:e2:83:28:93:f2:e0:6d:8b:e5:
         75:0d:da:d6:18:93:96:41:d0:40:ed:68:d9:2b:2c:41:3b:74:
         08:dc:0f:66:cf:aa:36:93:0a:f5:09:36:6b:f4:72:4b:42:fd:
         7a:b7:84:99:72:2f:af:7c:66:ad:5f:6d:9b:35:04:1a:86:7e:
         2f:c1:30:d7:f9:16:4c:04:ab:82:f3:79:0c:6a:1e:03:19:1a:
         db:43:fd:bf:cc:61:33:16:d5:83:66:5f:ab:c5:50:65:e7:51:
         83:d3:1c:32:ac:c1:3a:98:b4:4f:6e:cc:b4:cb:67:58:e2:dc:
         02:12:ed:2a:3c:a7:5d:ba:b7:a1:2e:56:a2:58:69:02:db:e7:
         39:3c:0c:14:90:cd:03:77:88:b8:c5:a3:c9:33:aa:3c:1e:36:
         45:69:da:24:73:4c:f4:48:4d:50:42:1e:8d:6a:5b:69:2d:a7:
         5d:fc:03:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----