Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1d50d041-3771-3d45-9327-5664252bfbb6.roa
File:                     1d50d041-3771-3d45-9327-5664252bfbb6.roa (raw, json)
Hash identifier:          rELccMkjImcUGY3d27+JS/AUCyUVeBoYy5e2ieyoAis=
Subject key identifier:   8F:1A:E0:2D:8C:41:86:95:0A:CE:C5:C0:E6:2B:65:DC:A8:22:C9:10
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F6DE7E8D5AD932B1C98F00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1d50d041-3771-3d45-9327-5664252bfbb6.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     33490
IP address blocks:        76.115.24.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f6:de:7e:8d:5a:d9:32:b1:c9:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=d828d669-a0cb-4376-b414-b080d9a67127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:c4:b0:40:b0:88:68:48:66:9f:5b:70:6d:de:
                    33:0e:7c:a3:cf:8d:89:1a:41:e3:e4:e6:93:6c:68:
                    b9:18:40:f8:a8:cc:4a:d2:63:d8:89:cf:61:98:e6:
                    4f:2f:4e:e6:b4:7c:4b:4c:a5:28:4f:f0:9f:c7:87:
                    4b:ba:3d:f5:7f:e3:9a:9a:1e:7a:64:56:02:6e:82:
                    cc:69:f2:9c:3c:1c:03:32:f4:35:f3:ac:fd:02:c8:
                    d2:9a:2a:47:05:55:fe:f1:3d:9a:22:21:e3:a4:5e:
                    bc:06:01:20:c0:2f:40:bf:fb:89:5f:bb:13:ef:b9:
                    02:43:93:37:6a:e5:4e:d7:ec:94:63:e9:ea:55:d7:
                    42:50:5a:e0:86:95:98:cc:2d:7f:e3:e6:32:d6:90:
                    06:51:4c:e1:00:52:fe:b2:50:59:be:42:6f:1b:0e:
                    af:67:a8:d4:8e:a0:0c:76:18:23:fc:6b:0d:ab:d0:
                    84:37:36:07:f8:7b:26:1d:07:4f:b7:fe:39:2f:8f:
                    f4:32:9a:1f:28:e1:4c:59:8b:22:51:54:6f:2b:4b:
                    95:86:4a:83:e9:20:2f:9f:6c:47:da:c6:11:5e:2a:
                    52:28:25:91:c1:fd:b8:4b:1e:bb:23:50:3e:f7:4d:
                    0d:7e:e8:c3:f7:1d:9c:d9:24:fd:b5:36:e1:8f:99:
                    05:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:1A:E0:2D:8C:41:86:95:0A:CE:C5:C0:E6:2B:65:DC:A8:22:C9:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1d50d041-3771-3d45-9327-5664252bfbb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.115.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:3a:77:19:c5:50:fb:a9:38:a3:53:7d:dc:fe:c2:8d:a6:56:
         a9:0e:4b:df:13:71:c6:9c:38:35:c6:bc:e7:8a:d1:14:e3:08:
         32:25:8f:6f:37:1b:b4:2c:23:e5:a6:41:d9:8a:ea:6e:bf:50:
         0f:d9:3a:d3:1a:a9:6a:28:fb:e8:c6:d8:fa:38:d4:8f:a3:bc:
         ed:6a:91:03:d6:b0:ca:ea:8c:7a:c5:1f:ff:94:2c:6c:10:ba:
         04:79:d1:6c:89:ee:1b:f7:83:cc:c8:48:b0:5c:25:7c:a9:47:
         c7:fb:c4:69:2e:e8:53:e4:fd:1c:f5:fd:08:42:ff:46:5e:18:
         9f:07:27:59:76:a6:87:8a:21:e7:39:c8:69:82:d1:8c:48:e6:
         35:78:5b:0b:d3:c7:0c:a3:30:9b:81:65:61:ae:77:a8:4c:94:
         03:03:73:ff:54:5e:ff:94:6c:16:f5:c0:7f:2a:9b:2a:87:7e:
         92:36:76:b0:63:99:dd:98:52:8f:1b:86:5f:2b:eb:01:97:a7:
         e7:31:24:4c:d0:cc:a1:cc:a0:89:aa:e7:0f:02:6d:b7:b4:33:
         c2:51:16:5e:b1:86:bc:16:b8:54:45:cf:d9:29:52:5e:fe:6b:
         d7:60:85:1e:ff:e0:df:af:f4:e3:26:fa:63:aa:17:3e:c4:16:
         98:76:c7:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----