Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/18f25075-d4fa-33dd-be3a-54c9b5808c0d.roa
File:                     18f25075-d4fa-33dd-be3a-54c9b5808c0d.roa (raw, json)
Hash identifier:          nozyVHL0SJy+RJL9eP33GdmWPqk46CUldmKwtJMPRpI=
Subject key identifier:   FB:39:14:C7:A2:D7:CA:92:36:22:2E:6C:1E:0D:19:7F:9D:01:DB:12
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA63A6613634105539D0F00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/18f25075-d4fa-33dd-be3a-54c9b5808c0d.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     33651
IP address blocks:        2001:559:c008::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a6:3a:66:13:63:41:05:53:9d:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=da3fe342-30fa-49ef-ae7d-9e8280be0900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:48:7b:08:80:50:39:38:4f:11:e2:21:33:b4:
                    5e:24:e1:36:b3:72:5c:95:48:6a:dd:5b:5b:76:e3:
                    7a:6e:d2:39:6a:7e:fe:d2:49:9a:1a:ca:30:9a:6f:
                    c6:2e:fe:74:4e:73:81:99:ef:ae:54:dd:23:9b:81:
                    f6:9c:9b:09:dc:46:52:9c:b4:c0:af:71:9f:28:a2:
                    6b:70:14:df:bb:31:83:92:35:27:66:18:ee:f6:e1:
                    66:9d:d2:e2:61:4b:a8:d6:1f:38:58:13:b1:84:31:
                    38:f3:98:dc:79:ca:f0:fb:07:4b:6d:9f:bb:20:f7:
                    6c:25:eb:11:f7:75:a9:eb:02:7f:71:37:57:88:4c:
                    83:5c:23:9d:b5:4a:96:40:b7:6d:b0:ab:a6:ef:4f:
                    91:25:d4:3d:cc:92:fe:11:8a:71:b1:f9:df:78:60:
                    91:ae:e5:6c:ad:4e:a9:7d:31:7c:7c:9e:dd:5c:9f:
                    79:1b:5b:7c:35:4e:4b:be:d1:f4:25:f4:ba:c4:82:
                    4c:a6:ef:a5:d2:05:45:02:b1:72:33:88:23:a9:d6:
                    c7:a7:92:ce:db:61:2e:ac:7e:ed:e3:b5:ca:9d:8d:
                    82:6e:a9:aa:ac:aa:65:c1:37:81:36:09:8c:17:1a:
                    5a:07:c7:c9:47:b3:66:be:5d:c0:37:45:8d:6e:d4:
                    31:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:39:14:C7:A2:D7:CA:92:36:22:2E:6C:1E:0D:19:7F:9D:01:DB:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/18f25075-d4fa-33dd-be3a-54c9b5808c0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c008::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:57:d1:73:dc:1c:69:75:7e:cc:39:28:68:2b:8f:40:77:c8:
         05:6e:c8:f7:0f:b1:b9:29:c5:d8:b4:ca:f3:cf:08:61:b1:90:
         b8:88:f6:d5:a8:0c:d5:5a:5f:04:5f:71:e4:b6:62:45:b4:a6:
         e6:12:36:54:2c:a6:8f:e6:66:e0:81:f9:88:0e:b1:d0:a4:df:
         7a:28:3e:85:be:fb:31:7b:cb:02:8b:fa:4b:5d:d9:8a:60:cb:
         ff:1d:38:0a:34:e5:40:f0:be:74:5e:d4:22:ed:c1:3c:72:4c:
         cf:69:0c:53:27:aa:95:a6:f4:94:5d:eb:58:36:b9:2f:c0:c5:
         28:da:6e:49:c4:58:61:e1:d0:b9:2e:3b:8f:20:80:79:ac:b3:
         8a:67:cf:72:00:60:a8:d1:d5:36:78:ef:56:23:d2:e8:d8:2c:
         8c:96:2c:3b:eb:2c:ab:dd:f3:11:8b:66:02:ef:5a:6b:f6:0e:
         36:b5:a7:4f:ef:73:17:af:bc:52:60:5b:6e:de:5f:58:79:ee:
         31:dc:e6:f9:89:d6:14:4f:05:2d:6d:f7:7c:0b:77:a4:2d:04:
         a0:9b:a1:9a:f0:c3:15:c3:c1:1b:bf:b0:0b:01:8e:d7:84:16:
         43:a1:56:f4:35:63:9d:b9:55:5b:9d:7e:4b:ee:e0:27:de:31:
         04:a1:60:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----