Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/12be4534-7031-3ea7-80e0-63c9c4a589b3.roa
File:                     12be4534-7031-3ea7-80e0-63c9c4a589b3.roa (raw, json)
Hash identifier:          roYiUMBMJl0smRxh/Eyx8Rw+rUrCRD4tTaIxBnB74uo=
Subject key identifier:   2F:F2:3A:D1:8D:7C:37:4E:4F:CE:F3:B4:EE:D0:55:43:A6:7F:6E:13
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA5AEA72B900F530251A700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/12be4534-7031-3ea7-80e0-63c9c4a589b3.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     22773
IP address blocks:        50.158.0.0/15 maxlen: 15

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a5:ae:a7:2b:90:0f:53:02:51:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=9be9b237-8e7f-4b4b-9300-f4216336e889
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:33:83:95:12:3e:08:0e:03:e4:76:7c:56:48:
                    a1:f5:a2:2e:78:f2:b7:77:e1:a9:bd:b0:b2:1f:ae:
                    6b:04:7c:09:9b:ba:ee:2e:8a:db:85:6a:a5:51:1d:
                    f1:17:fa:4d:14:6e:b9:f7:a9:99:05:a4:6a:99:48:
                    ee:b3:a9:09:e7:88:f2:d2:35:3b:61:b3:9e:f8:e1:
                    9f:eb:ae:54:00:4c:fe:48:3d:7a:7e:21:fb:16:6e:
                    5b:68:f1:fb:fe:7a:f2:b0:ab:59:f0:94:51:eb:b0:
                    34:9b:4d:75:39:d9:24:52:7a:98:38:cf:bd:8a:9c:
                    47:02:84:1b:f4:61:a5:c5:63:ba:04:97:c1:31:36:
                    35:df:56:d7:a5:b1:ff:3e:54:66:51:16:98:13:02:
                    bf:fe:54:a8:82:fb:a6:17:2c:28:27:52:1d:68:48:
                    33:ef:61:9f:d0:ff:40:fe:32:ae:70:03:ef:8a:83:
                    08:6d:d3:f9:97:47:2b:3a:ca:23:ec:d7:02:0c:19:
                    9b:f2:9b:a6:85:7b:29:25:6e:22:32:eb:ff:2b:20:
                    d4:01:fa:bd:45:4c:17:ce:e0:10:c6:f2:75:1c:56:
                    43:4a:89:34:82:73:03:5f:40:ea:27:d6:63:05:3e:
                    0b:aa:7a:98:85:25:a4:52:26:9a:01:2a:c5:ea:df:
                    20:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:F2:3A:D1:8D:7C:37:4E:4F:CE:F3:B4:EE:D0:55:43:A6:7F:6E:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/12be4534-7031-3ea7-80e0-63c9c4a589b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.158.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:ae:77:e1:30:da:aa:38:00:c0:8f:12:10:11:5d:8f:8b:a4:
         fa:db:9c:bb:0a:f7:e6:7e:92:2a:9c:b8:fd:05:7f:61:83:f3:
         fb:05:4d:22:29:14:31:40:c7:80:2d:f6:13:a3:83:f1:d3:b7:
         a2:ec:9e:69:90:b9:d8:a8:19:f6:27:e3:ce:aa:a6:19:ab:c5:
         5f:9d:b6:28:6d:9e:66:98:e0:53:39:aa:ff:44:66:58:e4:90:
         79:87:6a:ea:b6:cd:e7:af:4d:37:c8:78:58:05:ac:50:99:e2:
         04:65:f1:2d:fa:78:e4:77:64:1a:cb:09:69:1d:42:4d:19:07:
         cd:58:66:04:ad:ce:4d:3c:47:dd:7c:f5:d2:a5:83:ec:6a:2a:
         91:df:56:0c:57:18:28:59:5c:ca:82:24:8f:12:d3:8e:ac:ed:
         6d:52:cb:66:4e:7b:27:46:a4:87:cf:7b:f7:f4:e9:b5:4a:31:
         91:5a:7f:b0:8e:d5:7a:b7:d6:0b:62:b1:6e:5f:57:64:05:1c:
         3e:c9:ec:11:a9:8a:2f:18:ca:18:20:19:cb:95:a9:29:e4:ad:
         21:df:70:71:ae:b6:b9:1f:93:70:74:0d:32:68:5a:00:48:f7:
         a7:56:8b:70:ca:8b:ad:cf:e2:78:5b:d4:de:74:31:56:9f:fb:
         94:54:1f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----