Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2f6773ce-b382-3ed7-a885-1c34025160e7.roa
File:                     2f6773ce-b382-3ed7-a885-1c34025160e7.roa (raw, json)
Hash identifier:          bv6rcKcRZzTHpKwX6e0IHUsYeDkJ5n/ASDpLYj4L3vU=
Subject key identifier:   DF:B5:A4:E8:80:07:7D:AB:0A:BC:9C:42:BB:77:7D:AC:83:EF:F3:C4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA5B7EC866BBAD107781E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2f6773ce-b382-3ed7-a885-1c34025160e7.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     396415
IP address blocks:        50.219.115.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a5:b7:ec:86:6b:ba:d1:07:78:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=77b9477b-6e33-4325-9666-8369ce69271c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:da:0d:a4:da:95:92:ad:e9:ef:54:b8:cf:fb:
                    d8:a7:d4:17:ac:1a:dd:d6:c9:47:bb:97:bc:4e:2f:
                    72:34:58:6b:0d:57:0b:4b:87:55:76:7f:38:63:33:
                    18:df:e6:ae:25:68:7e:34:9d:93:c9:ea:7c:a1:38:
                    ed:b1:d2:ec:d5:56:ca:8a:f4:10:de:de:7f:51:c1:
                    44:43:96:37:18:73:88:86:61:e9:75:e7:00:c8:91:
                    36:03:ba:15:ee:e7:06:ee:4f:e7:93:14:e3:d7:ea:
                    e0:7a:d6:c5:df:9e:45:8f:35:b9:0a:5c:3c:bf:9b:
                    fe:af:10:4f:f2:41:24:06:73:e5:63:ba:db:f1:98:
                    af:4f:a7:1e:91:4e:1d:56:15:d7:d1:23:66:02:02:
                    80:66:c4:7e:cb:7a:cf:7c:54:77:c5:7c:b8:bc:3e:
                    42:ed:ca:c0:fe:a8:e8:f0:87:de:b3:6e:e5:9a:fd:
                    6a:d3:c8:30:96:da:bf:9f:ea:0a:16:0e:c6:dc:53:
                    9c:c0:03:52:da:86:23:98:fa:b0:94:97:06:a3:28:
                    1c:2c:e6:52:01:8b:93:ca:e8:ff:87:55:a7:f3:df:
                    41:6f:a7:bd:33:91:d9:ba:aa:8e:94:4a:81:36:99:
                    d5:cb:2e:2f:5e:ab:21:27:96:6a:1f:45:77:5f:36:
                    d4:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:B5:A4:E8:80:07:7D:AB:0A:BC:9C:42:BB:77:7D:AC:83:EF:F3:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2f6773ce-b382-3ed7-a885-1c34025160e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.219.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:ab:34:2a:f4:b1:ec:72:e7:df:01:c1:cf:7b:ba:65:33:0d:
         a9:fa:ec:53:67:e8:5a:5b:9e:61:5a:07:11:d7:f6:31:fe:a5:
         83:9f:2f:d3:46:d8:85:2b:9f:15:dd:60:a8:a3:f1:ea:32:08:
         a3:ac:de:82:ae:88:ca:e8:24:5d:1f:ac:c4:69:b2:34:3b:c2:
         7d:3f:db:60:87:d6:68:31:10:9d:05:11:8e:9b:d4:1d:9d:1e:
         43:87:15:f2:36:b7:83:c8:2a:62:cb:f8:18:ff:4d:bb:67:30:
         d3:fb:e1:3d:89:d5:71:c0:dd:f9:6b:13:e3:d0:70:84:89:60:
         fc:2c:ef:fa:ba:b0:47:2e:4d:b1:a9:a5:f8:d8:65:6f:19:6e:
         a6:bb:50:ea:2a:fa:74:03:3d:d0:13:b4:43:0c:19:3a:66:28:
         5c:a7:05:d3:11:ae:da:94:d1:86:f5:0a:3d:d0:12:0f:67:55:
         bd:91:f4:9b:1d:24:2a:f1:46:80:70:e5:77:6e:fe:31:fa:0c:
         ce:91:82:d5:11:2c:a9:81:6f:23:75:9c:86:44:6b:8e:17:de:
         ad:f0:a7:a9:5d:c1:fc:e6:55:1c:03:04:9d:d1:53:4d:ee:c0:
         78:13:b2:76:bf:08:b4:10:5b:14:1d:7e:5b:3a:7e:0d:07:94:
         be:f0:80:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----