Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/053e8ea4-f637-3981-b7b7-059b9ba75948.roa
File:                     053e8ea4-f637-3981-b7b7-059b9ba75948.roa (raw, json)
Hash identifier:          e7xF8MSAyOUsc8G0CxxPal0uCxZEqgCqFzG+8Ou00Mo=
Subject key identifier:   CE:73:A6:C1:EA:8D:39:B0:95:2D:66:44:15:2C:A8:18:04:35:5B:9F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA558FA5531C980FC022E80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/053e8ea4-f637-3981-b7b7-059b9ba75948.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     33287
IP address blocks:        2001:559:109::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a5:58:fa:55:31:c9:80:fc:02:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=0ae1b05f-bdcd-4640-a640-0c500398b19e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:18:32:32:e0:0a:c2:cd:5a:5a:cb:c6:e8:58:
                    56:eb:2c:d4:78:ea:05:30:ab:f1:01:78:a4:e2:5c:
                    7e:c5:98:59:dc:cd:54:f6:10:e7:3b:39:20:cc:dc:
                    5d:a2:19:ac:be:84:53:e8:e9:2f:ab:2a:d8:d0:9a:
                    2f:95:8b:b3:2c:b3:23:d5:98:47:90:21:08:7a:ef:
                    c9:b9:6b:34:8a:f3:29:6c:3e:1e:98:8a:98:e4:14:
                    26:59:c0:3d:bd:38:b8:09:ce:e0:32:59:9b:91:9e:
                    42:f8:b1:02:05:87:36:2d:1f:a8:64:4b:aa:26:e4:
                    09:17:b0:a1:aa:92:08:26:a8:16:2c:5a:79:f2:8b:
                    a5:79:23:aa:48:c1:d4:d3:e5:1d:32:9c:ac:54:1b:
                    02:e0:aa:29:6f:9e:5c:27:32:21:0f:06:07:d4:c4:
                    48:1a:da:ec:54:b0:f9:fb:48:81:dc:f3:72:97:10:
                    42:13:bf:b5:70:5a:c5:a8:bd:01:d6:07:4d:0f:a5:
                    99:2c:19:cd:1d:95:2f:e0:38:ee:27:a8:08:9a:29:
                    db:bd:bf:07:6e:0b:40:e3:b6:b2:b6:b8:fb:6d:a4:
                    91:a1:bc:5b:ae:6e:1c:f4:18:25:09:55:e5:37:0e:
                    b4:cd:dc:39:18:9d:f6:a9:57:16:fa:6a:7e:3d:51:
                    58:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:73:A6:C1:EA:8D:39:B0:95:2D:66:44:15:2C:A8:18:04:35:5B:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/053e8ea4-f637-3981-b7b7-059b9ba75948.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:109::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:93:9b:99:a7:34:25:1a:41:f0:05:91:26:42:9b:18:e7:65:
         64:5e:68:29:94:02:15:1c:0d:ea:38:8f:fe:c4:3c:12:07:3d:
         a3:57:9c:ee:26:76:7e:75:9b:78:4d:f1:67:bc:a7:73:5f:9c:
         32:ea:6e:5d:88:06:12:9a:7e:99:91:f3:f8:6b:ef:6c:25:46:
         dc:1c:ef:89:d4:4a:51:58:53:67:82:0e:fd:12:2c:36:42:da:
         ea:93:fd:b3:f1:c8:a6:a1:b2:bf:d2:e7:4d:54:32:64:f0:f9:
         a3:d7:f0:78:ce:4c:15:3f:7a:ac:02:18:96:7e:06:5e:7d:02:
         4a:5d:f5:d9:04:7b:db:a8:49:9e:1e:d4:db:af:9e:8b:a2:69:
         b0:cd:24:1d:1c:9f:ac:09:f6:13:09:08:81:1e:3c:1f:30:32:
         54:1a:3b:0a:90:d4:69:71:b6:4c:7e:23:b5:62:f4:8b:bd:5b:
         15:ad:99:18:6b:4f:2e:03:d3:a4:cb:5c:f9:a0:3e:9c:8e:77:
         6e:d4:e4:fd:98:14:b3:6f:e7:5e:65:c3:51:a5:92:fb:01:1c:
         7b:44:59:47:64:d9:1e:aa:a5:42:81:09:be:37:bd:82:7b:a2:
         0c:33:ae:b2:7f:d4:38:97:5b:f3:ab:1c:8c:ef:33:41:e2:93:
         4d:b1:40:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----