Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f21255ad-bea6-35da-93f1-0f55f1e42d03.roa
File:                     f21255ad-bea6-35da-93f1-0f55f1e42d03.roa (raw, json)
Hash identifier:          4hZu7IJIu5B3rj4TQXeW6tmmSrwMC5DX0KuPqOjfRNU=
Subject key identifier:   CB:A2:74:44:C0:41:4B:C5:F2:13:EB:99:C6:76:7B:25:6C:61:EE:2D
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848E2D21DDE24364AB6956A7580
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f21255ad-bea6-35da-93f1-0f55f1e42d03.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     394361
IP address blocks:        47.45.1.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d2:1d:de:24:36:4a:b6:95:6a:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=e9150a9e-0c8b-4c19-bf42-6a68e028e700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:65:2a:80:c2:16:0c:4b:69:9e:e8:26:b5:33:
                    99:99:9e:3c:ba:ce:50:8b:d7:ca:65:94:ce:c7:03:
                    d7:3e:26:5f:2d:09:d3:84:d9:4a:7e:23:81:a9:fa:
                    09:bd:00:64:6b:4a:28:3e:37:1c:4d:4c:bb:6e:2f:
                    02:cf:e8:8d:99:4c:83:b2:2b:ef:2f:79:f7:6d:1d:
                    24:75:f1:c5:12:d5:e9:1b:5e:3a:e0:33:b8:27:ae:
                    cf:e9:1e:c6:c5:6c:86:0f:60:eb:db:3e:fb:4c:90:
                    5c:69:af:f5:17:2c:4e:b2:fc:35:66:f5:af:ea:4e:
                    d0:23:b2:81:0b:64:5e:41:68:31:17:97:b9:29:ec:
                    94:1a:16:ec:53:55:d0:79:aa:6c:48:6a:7d:a6:72:
                    0e:9e:87:e8:d8:61:00:90:8a:33:aa:19:18:c8:ea:
                    88:07:53:05:70:19:88:a2:ac:ee:05:96:c6:5c:9d:
                    65:dc:a2:48:53:36:ba:5d:1e:1e:db:32:b2:2e:1d:
                    20:fd:77:c2:25:ff:ac:3b:a0:cd:ad:9b:22:74:2f:
                    6b:31:56:ae:4d:29:37:f8:bd:46:fc:06:ee:a5:e4:
                    c9:72:e7:bc:22:c8:32:3c:b0:07:76:03:b3:41:ef:
                    f6:d8:0f:58:b7:45:46:32:cb:09:08:37:7d:0b:43:
                    a6:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:A2:74:44:C0:41:4B:C5:F2:13:EB:99:C6:76:7B:25:6C:61:EE:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f21255ad-bea6-35da-93f1-0f55f1e42d03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.45.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:28:ba:f5:f8:16:e4:c0:21:6f:09:31:1d:02:33:f7:59:03:
         94:86:b8:b7:61:32:80:fa:44:d7:ac:38:47:bc:66:ba:a8:43:
         64:75:49:55:c4:3b:af:86:77:ce:d4:85:44:12:80:da:a5:cc:
         cc:c1:30:d6:bd:86:e8:c8:32:37:2c:0c:78:e1:3d:f1:0c:df:
         44:ca:2b:b6:ee:35:bd:92:57:63:62:bb:e5:e7:4b:4a:ca:45:
         ba:d1:38:c0:01:cf:88:a3:c6:1c:51:63:95:26:80:3e:70:82:
         bc:43:ea:3e:3e:fb:b0:78:2d:93:50:00:ee:77:24:b2:01:d7:
         f8:ee:8b:1a:56:b4:ed:51:ea:e3:36:22:8f:2a:1c:bd:c8:1b:
         2d:e5:4c:cf:91:b8:c9:5d:97:5b:3b:87:d2:fe:c6:19:65:ef:
         73:fe:1e:7e:ec:df:ab:60:37:2b:e1:05:8b:6f:fd:74:74:63:
         fd:15:6a:d3:c9:94:67:6a:28:ab:92:4d:12:6c:97:00:ad:f2:
         bf:c3:78:ca:47:f7:c9:73:67:53:47:77:a1:d0:fe:91:91:2d:
         2e:c6:0f:e7:b3:f0:aa:e2:8d:41:64:52:92:cf:57:0e:ae:5f:
         82:48:75:5e:b8:23:92:51:13:d8:4f:fc:eb:19:eb:75:99:84:
         eb:ef:03:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----