Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f9848b8-74a2-31d1-b50a-4d364e8263f7.roa
File:                     0f9848b8-74a2-31d1-b50a-4d364e8263f7.roa (raw, json)
Hash identifier:          oJCH2mTTsQKN6I1+aSZwVizn+y2TFBbp7+fj0TuKacc=
Subject key identifier:   35:50:CD:54:C3:BC:FF:87:51:2A:42:F5:55:36:A3:56:12:34:7F:AD
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848B269567C6A8F2EC62265AC40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f9848b8-74a2-31d1-b50a-4d364e8263f7.roa
Signing time:             Tue 28 Jan 2025 17:53:01 +0000
ROA not before:           Tue 28 Jan 2025 17:53:01 +0000
ROA not after:            Mon 28 Apr 2025 16:53:01 +0000
asID:                     33651
IP address blocks:        98.35.248.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b2:69:56:7c:6a:8f:2e:c6:22:65:ac:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 28 17:53:01 2025 GMT
            Not After : Apr 28 16:53:01 2025 GMT
        Subject: CN=ab998e82-fe1e-4874-9cc5-de73a9aae477
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:90:1b:d1:ad:cd:23:f3:ee:5f:1f:13:f4:0e:
                    00:04:87:cb:f2:c4:04:b3:94:63:b5:01:47:3b:40:
                    de:77:30:76:39:f9:65:d1:cc:80:89:e3:52:c0:ff:
                    23:50:fa:10:9b:75:2c:90:3d:42:a7:fa:b8:80:33:
                    0e:01:bb:b5:14:30:7c:e7:17:f6:c1:20:2d:d5:33:
                    ad:04:e1:af:86:52:94:85:6b:fc:f9:10:ff:fe:31:
                    ea:de:29:45:99:51:1e:1b:1a:7e:11:bf:16:69:30:
                    82:34:9b:63:19:c4:68:92:1a:6a:63:92:1a:51:0e:
                    93:bb:69:24:7f:4a:93:76:f3:f4:64:35:bb:00:8d:
                    f5:36:a7:dd:4f:2d:63:e5:5b:df:f3:4c:26:5f:71:
                    9d:c3:3e:d2:b1:9f:bc:a3:95:a7:6a:e9:41:c4:e5:
                    ae:a3:ff:08:90:8d:eb:d9:d5:0e:ec:1c:c1:2d:a0:
                    ac:27:63:61:d2:ee:5a:64:ce:01:de:d3:24:8d:67:
                    d2:1c:1c:85:f7:e0:b9:62:99:c5:d2:e9:e9:db:df:
                    48:54:bd:d1:f2:73:2d:b3:58:c2:87:a1:8e:65:6d:
                    73:4c:75:3d:d5:73:04:a1:ca:13:8c:79:af:f1:8a:
                    3f:65:0e:d8:a4:f5:d9:ce:1e:90:66:3c:ef:12:12:
                    44:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:50:CD:54:C3:BC:FF:87:51:2A:42:F5:55:36:A3:56:12:34:7F:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f9848b8-74a2-31d1-b50a-4d364e8263f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.35.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:fa:3a:8d:9c:74:6c:22:a8:c2:95:e4:ad:75:df:93:78:5a:
         37:70:bd:36:4b:b7:3b:9d:f6:29:1f:48:0d:31:19:95:32:16:
         70:d8:37:d2:a3:66:88:b1:aa:df:64:1c:fc:7f:44:cb:46:47:
         ab:01:18:75:18:8c:25:1c:01:21:d0:d2:d7:0f:ae:62:f9:38:
         26:51:18:2a:87:0d:c3:f4:da:b6:b6:68:d7:dd:58:81:8f:1d:
         54:0b:04:ee:ac:de:38:e3:02:a1:32:43:a2:e8:06:12:3c:b6:
         04:2d:9d:09:c9:95:aa:16:3a:62:a2:bc:c7:27:a0:67:af:fc:
         aa:63:4b:0e:55:16:7b:fd:28:24:9a:29:9e:88:8b:e0:9d:f5:
         06:1c:59:a7:35:74:76:57:a5:a7:1c:46:2e:39:a5:ae:40:0f:
         59:8f:bc:5f:71:90:11:66:11:aa:dd:bd:ff:c0:38:c2:a3:e3:
         c0:57:7a:89:d4:d5:a1:d7:03:58:56:c4:11:05:6b:b3:97:ff:
         43:56:96:25:5f:02:72:a3:22:5b:e2:43:cd:e7:c8:33:8f:09:
         33:7e:46:85:bf:61:04:02:a4:a2:97:0f:19:7c:35:66:ff:8e:
         f7:70:39:6c:48:4c:24:3c:25:ff:e9:c3:1b:6a:6e:06:59:29:
         0d:47:9d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----