Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/72195a47-6164-3326-86f5-56e1695a65bd.roa
File:                     72195a47-6164-3326-86f5-56e1695a65bd.roa (raw, json)
Hash identifier:          c2b5hHBPJ2XSFKR8yrnM8LKdU3nKmU1sQmUgEzpZ78E=
Subject key identifier:   70:2E:C6:51:68:14:5A:55:C5:75:E7:DC:47:C1:E1:71:12:9F:D1:CD
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848E2D1F44629F73BE73BF2D4F8
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/72195a47-6164-3326-86f5-56e1695a65bd.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     20115
IP address blocks:        24.159.205.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:f4:46:29:f7:3b:e7:3b:f2:d4:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=2aa03386-e87e-4753-a461-8d02f19a38ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:51:4d:60:b6:c3:c5:0f:7f:99:6a:7b:ff:7a:
                    30:ef:d3:63:c0:c1:1f:c7:3d:1e:8b:4f:7d:1c:01:
                    70:25:50:53:7b:85:c8:76:94:eb:a9:f4:bf:70:71:
                    d2:d9:0e:1c:ae:1d:fb:8d:e7:ae:10:15:7f:6e:11:
                    1a:6e:d7:45:fe:e5:f5:d6:de:bd:1b:a2:53:1d:95:
                    43:56:3a:23:73:f8:57:6a:57:ed:21:24:2f:11:6f:
                    75:5d:8c:7a:7b:73:e2:93:23:4f:f0:d0:e0:c2:67:
                    4c:90:74:92:6b:43:c0:33:93:ec:7c:76:51:8f:3b:
                    69:bb:fd:16:14:df:2e:f6:b0:fb:1a:c6:b3:4a:14:
                    61:62:74:ca:f4:cd:2b:b5:a5:3e:2e:f6:75:aa:60:
                    fa:52:e0:db:92:dd:08:68:bf:f3:1a:0d:e4:08:5f:
                    34:68:ee:26:3c:13:ae:b5:ff:0b:39:dc:5e:3d:15:
                    0e:13:3a:36:a8:73:b6:28:e8:2c:69:92:92:0b:02:
                    4f:85:7a:c4:46:07:aa:27:b0:69:5e:27:bd:77:4f:
                    ed:f6:4f:d5:27:52:0a:a4:db:be:e5:08:fd:6b:b0:
                    2f:31:0a:53:50:25:01:b9:aa:4c:7e:9c:50:82:bf:
                    f5:95:2d:f5:1e:8e:4d:66:fe:9d:f8:37:ba:ab:63:
                    aa:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:2E:C6:51:68:14:5A:55:C5:75:E7:DC:47:C1:E1:71:12:9F:D1:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/72195a47-6164-3326-86f5-56e1695a65bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.159.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:40:3e:4b:a6:1e:b2:c9:84:46:88:9c:35:2b:39:91:90:f3:
         ef:f9:69:66:77:21:5d:7b:b5:f2:5e:4f:19:f2:63:85:d7:69:
         5b:e4:e6:f4:03:46:86:69:0f:bc:93:ba:7d:82:3e:5e:e2:0a:
         43:eb:eb:94:f9:bd:70:39:17:d1:d9:2a:3c:4f:05:44:13:4a:
         93:eb:0a:da:d4:91:82:40:f2:f2:dd:af:9e:76:20:09:41:0c:
         08:6a:2f:27:84:8d:ee:23:c0:80:47:0e:6e:b3:55:c8:79:b5:
         c7:4f:fd:14:35:1b:c8:d2:b8:1c:48:1e:5d:56:5c:e8:3a:23:
         05:92:1e:47:87:7e:98:0b:6e:a7:8f:a8:33:09:56:a5:0a:ae:
         be:1e:a6:6b:32:b9:41:aa:66:b7:ed:5e:de:dd:2c:0a:18:6b:
         c0:cb:48:17:fd:76:06:b4:90:47:f3:c7:61:9d:e7:82:02:ab:
         6b:89:b5:af:2c:d5:4b:0d:7f:28:32:ec:5d:5a:de:22:02:82:
         3a:20:7b:ff:5a:79:a0:dc:36:2a:56:85:69:19:f0:62:b9:c1:
         4d:44:30:b2:f5:c9:11:47:cd:38:99:c4:f4:ce:e1:f3:8d:54:
         ef:62:92:b5:25:8f:82:1c:8e:17:e2:84:43:ae:33:90:31:b3:
         c3:ee:b7:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----