Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1be59794-21a4-3a4c-8c8e-53101ce1b56b.roa
File:                     1be59794-21a4-3a4c-8c8e-53101ce1b56b.roa (raw, json)
Hash identifier:          A62C5FT7RCnMTnld4Hb3j6cEtC9wRyYptkGwcYGhXsg=
Subject key identifier:   B4:33:EA:44:88:3C:A3:4A:04:0C:4E:C6:CA:6F:E4:5B:D2:D6:31:E7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA4DAB8151BC4961C477600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1be59794-21a4-3a4c-8c8e-53101ce1b56b.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     33489
IP address blocks:        96.94.32.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a4:da:b8:15:1b:c4:96:1c:47:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=ec16d2fb-3f1d-4c4b-a5ca-72956eab0d0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:d8:c8:36:d0:88:ff:87:f4:dd:28:5e:48:1c:
                    50:ef:89:89:cb:50:82:1e:46:4c:81:d7:b0:74:d8:
                    01:2e:63:38:6a:96:33:22:c5:8c:b1:26:f5:e9:ca:
                    65:b3:6e:26:70:6e:07:77:4f:3c:4e:88:72:71:07:
                    51:aa:e4:15:fc:43:33:70:c6:f6:ae:ae:e0:3a:98:
                    57:5d:d2:77:e5:79:01:5b:c4:42:b2:00:23:76:61:
                    c3:3d:7d:06:6f:f8:23:ea:3b:28:d5:48:d8:8b:b4:
                    c1:18:26:12:83:e3:09:db:c3:71:42:38:8f:34:be:
                    24:5f:a7:a1:2a:9a:51:4f:b9:16:50:1c:45:85:f0:
                    46:51:11:a0:c7:8e:e2:9e:07:f5:83:e6:50:d7:84:
                    86:8f:6d:d2:8a:c8:bd:f8:73:ef:59:67:71:51:41:
                    36:01:c2:94:0b:79:b5:9f:31:7d:31:06:05:64:fd:
                    82:44:e6:0d:81:46:74:dc:88:7e:c2:d2:4c:30:3a:
                    88:41:73:c3:87:af:63:e8:e8:90:87:83:bb:de:bb:
                    8a:1e:60:16:aa:22:17:42:33:77:43:ed:cc:03:4b:
                    10:91:d8:ce:23:d1:bc:2a:8d:01:e7:ec:10:8a:ad:
                    e7:c0:a5:57:39:34:99:7a:a4:06:4c:1d:2c:74:f0:
                    d0:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:33:EA:44:88:3C:A3:4A:04:0C:4E:C6:CA:6F:E4:5B:D2:D6:31:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1be59794-21a4-3a4c-8c8e-53101ce1b56b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.94.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:42:8d:61:21:f1:d9:14:e8:b3:a1:db:76:70:eb:04:89:84:
         dc:98:48:0e:8a:af:09:21:53:e3:e0:91:f9:b2:32:53:28:e4:
         f6:32:ca:56:92:c8:43:4b:57:12:98:48:ce:84:20:d3:a6:16:
         dc:ce:fe:df:0d:76:ab:bf:71:97:6b:be:8d:aa:08:87:bc:f3:
         6b:87:0d:d0:c6:58:f4:bf:fa:c2:5f:a8:89:eb:85:b1:7f:3b:
         49:c2:5d:c3:33:26:6b:28:f7:0c:be:3d:96:f1:9f:a6:b9:99:
         d3:86:3e:1e:9b:ad:a6:4e:65:8f:a7:a3:2a:10:a7:bc:1a:dd:
         9a:91:b6:be:4b:c2:0a:c0:71:f9:30:c8:18:55:a6:13:d9:11:
         55:8d:a0:76:f3:a2:1f:52:3b:00:5d:f2:7d:2e:1f:86:64:86:
         16:22:02:ef:7c:e9:a2:07:0c:91:bc:e0:76:a1:2e:60:95:a3:
         fb:35:9e:37:64:ad:ce:44:7a:34:93:34:f6:51:19:a9:4b:aa:
         df:98:e8:25:29:81:5b:54:04:97:a9:8e:a4:f8:b9:ca:85:98:
         78:f2:ab:40:88:0f:2b:d8:71:21:d8:33:2c:c6:73:6b:ff:2b:
         f6:e5:7e:0b:81:a9:c0:fa:29:55:a9:1f:d7:a3:72:79:e5:6e:
         82:7f:c6:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----