Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0d54f947-d05f-3fe0-a48b-fd2be32887ea.roa
File:                     0d54f947-d05f-3fe0-a48b-fd2be32887ea.roa (raw, json)
Hash identifier:          vzeSZH8DhCIV7ATn0B2W0ytp8+sVZZfI0TMAtF0C+nU=
Subject key identifier:   A5:68:F5:81:E0:03:5F:AC:DB:0D:93:AB:E6:03:42:B0:0C:12:CF:3A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA56354A349345B6F479F40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0d54f947-d05f-3fe0-a48b-fd2be32887ea.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     33287
IP address blocks:        2001:559:80b9::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a5:63:54:a3:49:34:5b:6f:47:9f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=a190d430-c0f5-4602-8d95-e1806ec901fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:24:7f:0f:56:db:9a:4f:c9:08:b2:9f:2c:c8:
                    6a:9c:59:8c:ba:fd:1b:61:d5:64:e1:d3:e1:0b:66:
                    86:aa:16:1d:39:16:51:89:12:ea:96:c1:7b:8d:81:
                    d6:b3:f8:68:8e:5a:b1:b6:03:04:09:49:8a:c9:33:
                    7a:64:fc:e2:36:87:f2:73:26:61:26:cf:6c:d7:c0:
                    94:19:1f:8b:95:06:8d:20:64:9b:08:55:c4:b4:fb:
                    ad:79:a5:47:95:9b:83:9b:77:f2:45:fa:31:b1:d5:
                    d1:e6:23:ab:66:f3:9a:78:8e:1e:5b:92:46:69:26:
                    a2:e5:46:6b:f5:1f:f2:65:eb:32:7e:dd:eb:2c:7b:
                    df:e9:fb:ba:25:99:19:6c:b9:ef:bc:96:ef:c4:d3:
                    87:de:0d:c3:41:af:15:14:a0:ac:01:f7:10:27:17:
                    7e:a7:d5:5e:a4:40:50:11:e6:55:04:30:17:bc:5a:
                    f3:9b:32:ab:e2:c0:48:d3:fd:df:f6:a3:07:37:d8:
                    20:aa:58:54:a4:10:83:cd:90:2a:3d:4d:e5:ae:79:
                    e6:66:3f:91:2b:f5:3a:df:2b:4f:2e:ab:50:b1:c9:
                    c7:cb:0b:dc:e4:11:af:01:cf:2d:c4:9e:0e:f4:f6:
                    c2:6c:58:38:0f:20:f4:b4:85:12:40:0e:bc:ff:04:
                    ed:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:68:F5:81:E0:03:5F:AC:DB:0D:93:AB:E6:03:42:B0:0C:12:CF:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0d54f947-d05f-3fe0-a48b-fd2be32887ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:80b9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:ab:4e:e8:67:2b:6d:c7:ce:9a:db:e7:12:03:ff:0c:7e:44:
         5b:24:44:87:b3:8f:01:b0:62:e0:4f:11:12:a0:ec:21:9b:bc:
         ed:b4:14:7b:3d:00:eb:1b:83:b6:1e:2b:53:c9:55:3a:ae:8a:
         60:22:b5:78:6b:c7:48:44:52:67:67:ef:9d:fc:cc:e3:e9:08:
         bb:04:e7:76:b5:a4:9c:df:99:9e:16:d5:c2:81:70:53:aa:33:
         3d:d0:41:03:76:27:17:bb:55:cb:b7:20:d8:1f:0c:d6:8e:50:
         51:86:b8:25:86:db:d3:2d:46:17:b0:d2:bc:b8:ea:ef:63:33:
         e2:e9:d2:c0:ad:3d:f0:75:90:4c:8e:67:af:ec:38:37:1a:86:
         cc:c1:d4:1c:b1:c0:d8:64:b5:17:1b:ad:48:ce:6b:7f:dd:b0:
         d6:37:93:ee:fb:e9:7f:72:aa:f1:5d:11:33:da:d8:eb:88:33:
         64:87:8a:ff:a2:77:b6:a8:d2:bd:bd:f3:84:59:e0:a6:28:2d:
         96:42:16:86:54:bd:c0:86:e1:a1:bf:e4:e6:fb:57:54:1e:d0:
         18:79:9c:95:40:06:69:e4:99:74:92:b6:16:78:d3:7a:c8:94:
         af:69:4c:fc:54:9f:35:a3:4b:b9:e3:66:65:df:08:f0:dc:5f:
         db:3a:f5:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----