Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f867e0ab-e643-3b5a-81fa-2455c35c3dbb.roa
File:                     f867e0ab-e643-3b5a-81fa-2455c35c3dbb.roa (raw, json)
Hash identifier:          vO8WGOIM6druHCzG2W2ZiIURX3rLqFoZhvtr4AdWz2w=
Subject key identifier:   24:80:70:8F:10:43:B1:30:A7:B8:EE:E8:B6:EF:F5:5E:78:7C:28:D5
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848E2D1771EEC2B45AB8D1E6940
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f867e0ab-e643-3b5a-81fa-2455c35c3dbb.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     20115
IP address blocks:        24.183.208.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:77:1e:ec:2b:45:ab:8d:1e:69:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=0ed97c35-a2f7-4086-b939-e45cfc56114e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:fe:23:62:11:88:1f:e0:6d:c3:1a:8d:1b:6e:
                    65:59:35:09:4d:4d:44:38:11:e7:5e:11:80:77:2e:
                    6f:e7:6b:c8:26:fc:e6:3f:59:19:e2:68:f9:d1:c4:
                    9c:bd:b7:a9:ee:84:ec:02:14:51:60:b8:ec:99:34:
                    3c:11:3e:ac:94:18:d0:a7:d3:5a:1d:67:c6:fa:81:
                    e3:02:4a:05:80:5c:9d:7d:f1:cc:e8:25:69:c6:8b:
                    9d:dd:c6:bc:78:5b:b7:b6:ba:76:47:a0:f0:52:62:
                    ed:5e:6d:48:a0:85:54:0c:9b:e2:95:52:97:b0:96:
                    f3:e3:69:46:7f:27:c8:3f:94:4a:02:72:ec:f0:93:
                    3d:c8:df:59:a7:67:75:63:14:2f:a0:07:69:30:10:
                    eb:7d:f9:50:34:f0:c0:c1:ef:79:63:a1:e2:2b:0d:
                    8f:95:8e:e6:a9:21:a5:45:73:fa:60:51:e2:d1:72:
                    17:e3:f7:a3:00:8e:8c:d0:bf:30:54:8b:db:bf:d4:
                    82:0c:29:01:c4:bf:95:f9:37:bf:36:31:f5:50:97:
                    06:a7:68:86:87:46:5a:99:bd:4b:05:6a:64:13:7b:
                    02:90:be:c3:24:22:79:00:1a:66:be:4f:9e:60:8d:
                    1f:16:7f:f9:2b:1b:4b:be:00:99:8e:68:f5:86:20:
                    c6:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:80:70:8F:10:43:B1:30:A7:B8:EE:E8:B6:EF:F5:5E:78:7C:28:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f867e0ab-e643-3b5a-81fa-2455c35c3dbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.183.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:44:f6:78:f8:b9:72:fc:b1:b4:2b:e7:6c:b7:b2:d9:f7:16:
         e2:de:53:ef:54:f8:7e:33:22:b3:21:ec:ef:c6:0b:ef:3d:2a:
         15:b8:bb:3a:cb:f7:26:2b:55:d6:c4:d2:27:26:2d:1a:22:60:
         4c:10:f9:0e:53:dd:de:d5:a4:29:8c:a7:56:3c:a7:8c:48:aa:
         42:83:92:ac:d9:cc:ca:18:5a:c9:7a:53:7a:b9:2b:4f:88:4f:
         48:d2:91:2f:cf:4d:19:d0:10:d8:41:ed:7e:81:4e:7b:fd:78:
         c9:cd:6c:2a:9a:e1:9a:29:fb:94:e6:29:56:62:08:dd:87:5c:
         c5:77:49:ff:46:b5:d0:05:f2:fb:84:18:d6:34:d6:68:db:20:
         10:65:19:86:00:1c:0d:95:e9:41:80:6f:89:66:92:5f:ad:b1:
         15:bf:51:88:88:32:42:58:6e:df:d4:d8:21:ae:05:cc:c2:c3:
         96:0e:39:c0:ca:d3:11:f6:70:3e:ba:07:a7:d6:3b:db:5c:73:
         17:69:6e:7c:21:3e:a0:9e:b6:cb:40:4c:3a:a6:0c:42:8c:e7:
         57:a2:b0:df:d8:99:79:98:83:87:3b:fb:68:85:f6:2c:1b:8a:
         35:50:d5:57:ea:f0:a2:b0:c4:5b:7d:6a:26:63:25:ef:58:6a:
         98:3a:8e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----