Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28b34cbb-0568-37fd-8777-84ead9851ed9.roa
File:                     28b34cbb-0568-37fd-8777-84ead9851ed9.roa (raw, json)
Hash identifier:          Ph38wOFu8apRXMm5228R0IBYOf1xEcoGeQxGnS2jE3g=
Subject key identifier:   31:3E:C6:36:21:E8:1A:55:FB:70:31:25:03:4B:18:A1:62:14:75:5A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA61AFC05DC620A8BFB8200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28b34cbb-0568-37fd-8777-84ead9851ed9.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     22258
IP address blocks:        96.110.132.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a6:1a:fc:05:dc:62:0a:8b:fb:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=b4180642-4755-4b95-8c86-71dcc6fa20bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:11:bf:9d:98:38:80:c2:1c:51:cb:c4:c5:a7:
                    ed:e5:32:59:8c:d5:63:d5:81:f8:e1:f6:fb:f6:4b:
                    bc:cd:e3:b9:b2:7e:3d:42:5a:0b:08:b1:54:0a:42:
                    f9:c0:39:a5:99:03:76:9c:1f:ac:25:e6:a7:e7:fb:
                    2a:a8:7b:6a:9b:06:b0:69:fc:38:7c:0f:a7:52:c1:
                    5c:6d:1b:46:41:b6:70:ee:b5:ed:59:32:cf:f9:52:
                    51:30:e0:29:06:bf:09:6c:76:00:0e:25:c9:81:06:
                    45:e2:fa:04:fd:3e:dd:38:a3:11:eb:04:80:44:41:
                    36:11:ef:ee:fe:82:b9:c9:1e:d0:2c:3d:dc:62:03:
                    cc:2c:08:95:2c:8c:75:a0:a7:56:b9:44:ac:87:ba:
                    31:5a:c6:a6:30:5e:a8:a3:7a:8a:5d:ab:0b:f2:11:
                    b6:3f:a9:de:40:ed:3a:06:73:f0:2c:30:e8:19:7b:
                    a0:b5:60:fb:06:a5:02:b4:f0:a3:4a:c4:ee:1b:3c:
                    2a:77:20:5e:4f:40:47:6b:5b:7a:47:10:df:b5:6f:
                    1f:a8:0d:c1:d4:df:52:33:99:54:97:0a:b2:23:dd:
                    00:e7:b7:20:a8:f1:9e:f1:ea:34:16:e1:a4:1a:cc:
                    f2:0a:96:a8:85:db:ab:a0:25:cd:7b:2b:68:96:ee:
                    e5:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:3E:C6:36:21:E8:1A:55:FB:70:31:25:03:4B:18:A1:62:14:75:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28b34cbb-0568-37fd-8777-84ead9851ed9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.110.132.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:0e:68:fa:d1:20:53:53:2a:90:b3:20:0e:82:3e:c9:20:32:
         c1:38:20:4e:1f:e3:bc:62:51:69:fe:77:e9:bd:19:a0:8f:f1:
         5a:3a:ea:0b:bc:c3:4e:8a:97:87:bf:0f:4e:5b:29:49:b7:85:
         5c:eb:d0:f3:61:b8:d4:b6:88:90:40:59:dc:2d:03:b0:13:72:
         d7:ad:65:85:2e:0d:d7:f3:2e:34:d4:a7:32:92:58:78:a2:f4:
         37:ed:45:fb:67:b0:e6:22:a5:53:9b:80:26:d2:1b:55:ba:0a:
         38:69:ee:3d:3b:e5:b4:f2:0a:10:d4:5c:82:d6:66:02:2a:ee:
         a5:fa:00:78:6c:13:a0:9a:73:4b:27:2d:5a:40:43:f4:bd:9d:
         21:5c:87:fb:af:d1:f7:b4:e4:00:58:5a:6c:c8:31:31:27:cf:
         ec:53:6e:8c:11:82:11:45:47:6c:1d:9e:12:4c:f3:6c:44:3c:
         cf:95:40:d5:fd:3e:95:be:9c:ce:9c:d9:ed:e1:bc:6a:62:7c:
         b6:18:a8:67:b2:bf:6f:3d:d3:ce:13:00:38:fa:93:db:61:b1:
         6c:53:11:4a:72:68:e8:3a:1d:9d:e9:95:50:a5:3d:43:ca:51:
         43:a4:0f:58:18:b3:2f:25:82:26:df:57:99:fe:60:38:ff:fa:
         4a:3c:c2:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----