Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1f02314b-aa2c-39a3-8aa5-b2a3e0b78e9a.roa
File:                     1f02314b-aa2c-39a3-8aa5-b2a3e0b78e9a.roa (raw, json)
Hash identifier:          wEynP7eUlZJ7jg+T3xbeHWtk8HQv/pf75U/9W9tM+1M=
Subject key identifier:   A8:BE:87:19:E0:FE:05:42:0E:44:B3:83:7D:AC:D8:0A:67:78:97:8B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA629D31158B37FBA613800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1f02314b-aa2c-39a3-8aa5-b2a3e0b78e9a.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     33650
IP address blocks:        76.28.128.0/17 maxlen: 17

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a6:29:d3:11:58:b3:7f:ba:61:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=c73d25ee-1f0e-48b1-b18b-386ccf77138a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:56:ed:7e:16:38:32:3a:09:35:5a:fd:d2:96:
                    e4:7d:3b:82:4c:80:af:90:49:18:26:39:e2:b2:e4:
                    14:b8:c5:29:7d:17:da:85:25:23:e9:80:e5:c4:39:
                    bf:3b:24:2b:35:cf:be:a8:4c:ac:ff:4e:54:56:f1:
                    65:9d:e0:60:fa:4f:c2:84:0f:6e:1c:a2:f6:9a:35:
                    61:64:59:9f:2c:90:6a:88:c0:c0:10:7e:b6:58:ee:
                    0e:84:bb:a8:73:7b:3d:1e:ec:6a:7f:94:08:a7:0d:
                    10:4a:9c:e2:d6:53:da:8d:32:d7:ef:e1:5e:78:da:
                    0a:04:5b:5e:e4:79:2e:cb:b3:41:0f:24:06:86:da:
                    cd:b8:5b:9d:f0:c7:1e:7a:40:6d:3a:b9:af:a7:6c:
                    c3:e1:ba:eb:1a:7d:fa:fb:23:55:3e:c9:88:d1:f2:
                    c4:7d:39:ca:b7:29:c5:c8:03:16:ba:6a:82:71:48:
                    af:4c:ca:2e:b7:be:a6:1a:95:39:ba:d3:3b:34:74:
                    1a:69:f0:97:3a:57:e6:28:6a:42:3f:49:f4:9c:83:
                    aa:17:3c:8b:42:a7:47:2e:d5:b9:f3:c4:52:1c:be:
                    65:e6:ed:f3:f9:c0:4f:f6:93:e6:c2:bf:80:1d:22:
                    89:b6:ca:6a:5e:22:f9:1c:40:15:bb:fe:ac:91:e9:
                    a8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:BE:87:19:E0:FE:05:42:0E:44:B3:83:7D:AC:D8:0A:67:78:97:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1f02314b-aa2c-39a3-8aa5-b2a3e0b78e9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.28.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:2e:a5:e0:61:22:73:88:6e:68:dc:2e:0c:83:55:62:10:4a:
         e4:03:e5:b3:e1:7d:b3:bc:ad:56:9a:c1:10:0b:17:6c:b9:f9:
         90:e5:4f:4c:5c:8b:fa:a3:50:d7:dc:c7:9f:e1:70:9d:83:bc:
         77:32:e6:64:a4:b5:11:d0:08:99:07:d8:f2:d6:de:fd:30:62:
         34:4b:01:20:e0:75:e1:14:46:de:e8:c5:22:3f:6a:50:45:36:
         3a:11:a4:18:21:9a:26:fc:0a:49:69:f9:f7:0a:97:04:17:f1:
         0e:b5:0a:74:de:4f:11:68:70:00:80:3d:f5:94:ee:48:fa:fa:
         54:0d:63:54:8c:39:26:b3:b5:a6:75:54:66:09:09:c1:e3:1d:
         02:d9:ca:8e:c4:a9:97:16:25:ec:d6:e0:45:88:81:61:bf:b6:
         97:f2:83:24:e6:7c:22:1b:54:bf:f0:77:c6:f2:1e:19:e9:de:
         07:34:d7:fd:6f:98:15:1d:16:9a:1b:a0:b3:17:83:95:55:d1:
         fd:62:44:b6:57:5f:68:d1:62:a6:0c:47:e5:d0:c1:ed:e4:55:
         92:cc:33:4a:1b:c9:ad:ee:00:4b:f0:84:72:78:c1:36:c4:0d:
         66:44:b2:67:42:d5:07:18:97:a8:42:da:5b:d4:a0:10:2e:91:
         b4:39:12:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----