Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/24a643ae-62c4-310e-a4c4-fb3f551f7417.roa
File:                     24a643ae-62c4-310e-a4c4-fb3f551f7417.roa (raw, json)
Hash identifier:          Z1TfJ+jzLy0RdujqygptT5KWSXGttj9nKHmv9yt65N8=
Subject key identifier:   2A:21:10:2E:80:33:DB:6C:C9:C1:BF:A2:C2:03:AE:ED:65:2B:4A:4F
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848E2D171FCDE41818DB9526C80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/24a643ae-62c4-310e-a4c4-fb3f551f7417.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     20115
IP address blocks:        24.177.130.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:71:fc:de:41:81:8d:b9:52:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=e89db6bf-13cc-4590-bcb1-bf4b95307e5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:0e:e6:22:64:c5:89:0d:3a:ac:a2:71:86:8b:
                    e0:a0:ff:76:c7:f3:a0:26:56:b4:9a:73:37:13:0d:
                    89:02:ee:3b:5c:d8:0c:2d:45:d7:82:f1:f6:6a:0f:
                    2d:05:0e:dd:14:06:7f:4c:8e:42:d5:e6:56:c2:95:
                    7e:c2:9d:f8:48:3d:5c:9b:71:64:75:44:77:a3:45:
                    cb:2d:68:82:30:37:89:8f:57:3e:17:05:5b:b0:2c:
                    f1:b4:8d:21:44:e3:f3:6e:30:ea:20:f3:fe:f5:a1:
                    13:c7:3a:5a:0f:56:a6:ad:56:59:34:f5:2d:6e:dd:
                    02:5f:bf:7a:16:23:60:23:db:43:f7:f6:21:58:63:
                    8c:93:bb:ef:46:39:8a:8d:a9:8c:aa:fe:c2:2d:6d:
                    a6:80:3a:13:c6:e9:98:75:4c:07:b8:00:f6:6d:f0:
                    a6:f6:9f:8b:f8:7e:e8:d4:f9:8c:01:5e:2e:c6:2e:
                    1c:12:94:09:43:60:f4:0b:23:98:75:10:9c:e7:59:
                    a7:7d:84:ff:2d:20:ee:6f:f5:0e:a9:c8:86:41:bc:
                    9e:e9:4a:f4:c0:67:d2:49:89:ee:f2:aa:9f:9b:57:
                    e8:ec:81:f3:e3:95:ab:ca:60:b8:09:17:f1:da:bf:
                    8d:b7:13:0e:dc:db:f6:00:fb:2a:b4:5d:9c:7a:f9:
                    23:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:21:10:2E:80:33:DB:6C:C9:C1:BF:A2:C2:03:AE:ED:65:2B:4A:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/24a643ae-62c4-310e-a4c4-fb3f551f7417.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.177.130.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ce:5a:f7:4f:7b:64:8b:b3:ac:f0:31:d0:44:c7:9d:11:11:a0:
         c4:bc:d5:a9:d1:26:10:b8:98:b4:11:12:f6:86:14:30:25:39:
         ce:6d:7f:d7:f0:0c:93:ac:90:a7:51:10:57:dd:39:e9:95:d4:
         4c:93:23:0b:fa:0c:cc:46:19:c8:82:75:09:69:ec:fe:b7:54:
         cd:dd:7f:71:d3:03:aa:66:19:12:d5:b8:db:a0:59:2d:9b:17:
         db:18:71:5f:8a:45:d5:53:68:0c:0a:62:20:ca:9e:31:10:93:
         74:8f:77:89:ea:c7:46:f7:02:9b:cd:7d:49:89:c5:2c:34:e9:
         7a:c7:ca:13:28:8c:7d:79:66:de:74:da:97:a8:25:af:46:ea:
         51:15:26:1b:59:77:c2:2a:19:6c:59:bc:f9:64:50:5f:62:6e:
         e6:01:59:3c:c8:b0:0b:dc:b8:3b:6d:e0:ab:d8:da:b0:42:2d:
         62:2b:ba:35:fe:ac:24:6e:f9:fc:9c:bd:ca:e7:81:e5:58:41:
         cd:7a:53:73:b8:77:6c:21:e6:3e:78:5f:06:14:18:82:e0:09:
         3e:b8:80:c2:72:13:a4:65:07:dd:56:82:15:25:9b:06:59:ec:
         ac:b3:be:9b:d4:d3:be:2e:6e:37:d9:8a:f6:0e:c3:55:f1:d0:
         c3:1c:d8:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----