Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1aab4c47-0add-303c-aff1-c24bdcb6c53f.roa
File:                     1aab4c47-0add-303c-aff1-c24bdcb6c53f.roa (raw, json)
Hash identifier:          pA53JFjqTmJkxiMVvQ8PvFPfEC3exvbm519wgOJufvQ=
Subject key identifier:   DD:E3:3C:C3:DF:0F:D8:73:0B:B1:8E:85:17:34:3F:93:2B:77:9F:7A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA59E541BE19256427B5464
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1aab4c47-0add-303c-aff1-c24bdcb6c53f.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     33659
IP address blocks:        2001:559:cd::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a5:9e:54:1b:e1:92:56:42:7b:54:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=f8c42ba4-fc39-4752-9f2c-ed65497bda99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:16:e9:d4:08:36:82:78:5f:cf:6a:cb:1b:bf:
                    90:26:c2:83:c5:5b:1c:b0:b6:b1:a2:08:27:5c:35:
                    e4:0e:44:ae:e3:a1:b0:a6:36:a0:b2:eb:29:3f:96:
                    2e:a0:e5:72:5f:2d:05:e2:c6:7e:1f:b9:ac:49:df:
                    36:f3:46:2d:26:93:b3:eb:b3:df:ba:96:df:c0:48:
                    70:4f:d4:0f:0d:41:63:dd:c8:72:3c:70:7f:21:5a:
                    dd:42:66:9d:45:6e:c9:06:7b:79:45:38:02:77:7e:
                    6f:bd:66:2a:1e:c0:ac:a7:92:99:30:71:57:3b:fa:
                    a3:68:6e:0e:e7:d5:e5:57:9c:15:e0:20:49:11:c9:
                    84:c1:ba:2f:ee:32:b9:44:6a:64:bf:4a:46:12:46:
                    67:e8:37:d8:5c:29:ea:19:be:e6:f7:c4:99:74:93:
                    f9:ad:39:a3:20:65:1b:15:bf:27:e6:2d:39:62:dc:
                    31:88:ab:35:28:52:ea:ad:64:5c:9a:e4:76:40:96:
                    1a:a4:cd:6c:05:58:8b:db:bb:a8:8c:91:d7:f9:1c:
                    d3:5a:10:8d:83:c2:76:ca:4b:d9:b7:61:aa:4f:c0:
                    fa:34:16:b4:29:69:fd:af:48:c9:62:90:cd:85:af:
                    c1:dd:7e:f6:7c:67:39:3b:ed:12:fc:74:5d:a6:35:
                    55:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:E3:3C:C3:DF:0F:D8:73:0B:B1:8E:85:17:34:3F:93:2B:77:9F:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1aab4c47-0add-303c-aff1-c24bdcb6c53f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:cd::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:56:00:a9:ff:85:93:ca:c5:73:a0:1e:28:10:9e:ad:8d:49:
         54:b6:91:bb:76:aa:4d:45:88:c8:96:53:d1:19:bb:7b:9b:3e:
         43:ab:64:84:97:38:12:69:6b:3b:02:c0:fd:9a:61:4b:a5:4e:
         56:fe:eb:41:1e:dd:d5:ae:fd:61:73:d4:99:c2:33:60:21:f6:
         ae:03:45:0e:cc:37:5d:36:f5:61:bf:df:db:3c:79:bd:e3:67:
         a4:13:7d:34:a9:37:44:88:1b:e5:ca:cd:a7:94:cc:33:a3:67:
         7c:8a:77:bf:9c:6b:e8:46:e9:9c:f8:73:07:eb:b3:29:cb:20:
         9c:6c:71:8a:80:57:cc:f9:09:55:c3:00:e7:74:9f:f3:4f:d4:
         df:50:92:2b:c6:d1:c0:9a:7b:21:e6:bc:b2:21:7e:e9:d7:b1:
         f7:93:13:5a:f3:2f:df:15:03:de:9a:cb:a2:dd:10:2e:eb:f6:
         1f:ab:06:93:51:69:35:32:6f:ce:a0:93:1c:da:10:b2:52:8b:
         e5:55:aa:1c:4d:1d:d0:3d:cf:85:8e:d3:95:97:f5:33:ff:3a:
         38:e7:03:67:98:19:02:27:58:c8:91:02:43:b8:2a:1c:92:fc:
         21:93:b8:b8:d8:38:37:2e:4f:1d:09:75:16:0f:6a:c0:fa:99:
         46:02:5b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----