Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2a15157c-b32f-3056-8f48-26cff61b9acf.roa
File:                     2a15157c-b32f-3056-8f48-26cff61b9acf.roa (raw, json)
Hash identifier:          BNS3N6iRpF3YxYuANS2fL31z01jtVi/PSJv/lTfKsrM=
Subject key identifier:   27:83:17:3C:A5:6E:FF:E7:B5:48:40:35:39:95:AE:AF:7B:3A:DD:4B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA4B7A6E0B37D520011CA40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2a15157c-b32f-3056-8f48-26cff61b9acf.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     7016
IP address blocks:        2001:559:511::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a4:b7:a6:e0:b3:7d:52:00:11:ca:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=fa38b9e7-cc88-4ba9-8dcf-24aaf00ef499
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:01:ac:79:83:82:35:44:60:a4:6a:59:2c:c6:
                    97:6b:0b:f5:bc:3b:c5:8e:fd:43:38:37:51:b0:a5:
                    8b:fb:cc:b0:c7:8d:2c:25:61:b4:96:d9:32:95:41:
                    1d:01:64:0f:0e:c8:96:42:ba:b3:20:01:7c:b7:40:
                    c0:15:9b:8d:a0:cb:4a:99:04:24:47:21:aa:8b:fa:
                    a2:a9:86:c1:d2:7f:03:04:0f:5b:fe:0c:7e:bb:92:
                    12:a5:16:c2:af:80:4f:de:ad:ed:72:4d:04:dc:3e:
                    a4:2c:33:78:6e:6b:ea:38:19:94:3b:40:70:d3:29:
                    d7:e8:c0:7e:28:7c:26:1f:93:9c:7d:06:f7:76:63:
                    6c:3f:f7:fb:ae:53:a6:1b:aa:df:99:41:52:30:3a:
                    ad:12:c7:28:79:c8:a8:2a:d9:d4:4e:e0:da:7c:12:
                    35:e8:4d:d8:ab:de:9d:1e:91:70:40:97:aa:91:07:
                    2c:58:ad:c9:23:00:46:ff:92:6e:b0:98:f3:23:19:
                    aa:7e:b8:64:ae:d2:29:7d:1b:c7:0a:d9:9f:98:53:
                    c9:c0:c8:90:69:e1:05:e1:e5:a2:d7:73:39:ae:34:
                    e2:37:1f:55:e3:be:40:36:cc:25:c7:1b:d2:14:46:
                    82:5a:09:76:e3:09:da:c9:e1:67:20:e4:20:af:fb:
                    73:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:83:17:3C:A5:6E:FF:E7:B5:48:40:35:39:95:AE:AF:7B:3A:DD:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2a15157c-b32f-3056-8f48-26cff61b9acf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:511::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:e0:6e:af:fb:61:db:60:d1:1e:bb:98:00:9f:d8:41:12:36:
         d0:71:fa:42:ce:be:eb:73:87:59:74:a6:c9:eb:75:45:32:15:
         6a:4e:68:f6:00:52:05:3f:7b:3e:f5:ca:ae:1b:77:50:e5:96:
         94:13:bf:fb:e8:6a:01:1c:e9:ad:6d:a8:95:fd:8f:79:d3:61:
         84:e7:da:a6:4b:10:67:57:c8:26:1e:6a:c7:30:22:19:b9:71:
         0e:ff:f3:42:4a:68:21:e2:82:02:95:95:5c:1f:7a:26:c4:8a:
         e1:a8:3a:66:a3:d0:8b:18:92:61:a1:14:a2:84:c9:a3:ce:4d:
         1d:fe:e0:a5:70:c5:bf:55:c1:dd:26:47:95:00:2d:0c:f1:38:
         bd:b8:1e:9d:4f:4f:65:3e:f9:0b:87:8d:9e:3b:b4:f8:33:33:
         14:77:17:5c:13:22:6f:6e:15:92:23:27:ee:c5:5a:41:9f:9d:
         f6:ca:96:44:15:04:c9:a3:2a:8e:db:8c:12:e4:d1:86:1f:3c:
         5d:80:60:6e:d1:8b:6a:a3:d5:cb:3b:32:b4:ed:08:d0:fa:81:
         af:03:f8:c0:ab:c6:b8:47:f8:a7:aa:1b:b7:f3:3e:59:29:72:
         f1:9f:6d:d1:a2:ee:c8:6b:82:e6:5d:e0:ab:c4:19:41:ea:16:
         b0:d5:b5:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----