Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35e381a6-9da5-3281-b356-ad8ba1e5508d.roa
File:                     35e381a6-9da5-3281-b356-ad8ba1e5508d.roa (raw, json)
Hash identifier:          78euaQel0XiwjWdiKcXmfOaywZv9/dSVQR8K1GboH0k=
Subject key identifier:   62:89:77:C0:57:BE:6F:50:A1:34:87:D6:64:3A:01:77:5A:7D:0D:B1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA48A8CAB64A0CB3286B520
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35e381a6-9da5-3281-b356-ad8ba1e5508d.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     22909
IP address blocks:        69.247.27.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a4:8a:8c:ab:64:a0:cb:32:86:b5:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=6e35c60d-cef4-4290-aa54-1f8699b409a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8b:3f:94:7d:11:74:e4:0c:ca:0d:8f:76:b2:
                    23:82:95:e1:f2:38:f5:77:2b:c2:5d:de:46:3d:92:
                    8e:0b:21:19:4a:e6:50:24:a0:07:1c:f9:d7:1b:ca:
                    03:6a:2c:dc:b8:04:dd:e2:b6:a3:6a:ad:0d:bd:f0:
                    79:64:6e:63:d4:8f:65:52:0e:97:ac:60:27:5e:80:
                    0b:d1:8b:73:d2:3e:67:bb:2b:f9:37:95:e3:b8:59:
                    ea:1f:3f:f6:27:e8:32:fc:58:cc:81:eb:b5:cd:36:
                    18:ec:72:bf:8d:5d:7d:fa:c3:cf:d8:a3:0d:94:60:
                    a3:3c:cd:32:77:4a:e2:7a:15:34:59:2e:68:5f:f6:
                    ff:12:2a:ec:e9:39:51:75:d1:f1:68:b3:b7:37:83:
                    97:99:7b:37:4f:92:46:b2:99:9d:17:ba:b2:a4:a6:
                    9f:c0:63:b4:65:d7:59:02:d6:17:ec:b2:85:f4:6c:
                    45:35:bf:06:f0:42:ae:16:32:cf:a0:ef:68:cb:ae:
                    be:74:61:e0:66:50:03:3d:cf:8c:f5:7a:3f:89:6d:
                    a0:2e:70:fd:10:9c:e1:a8:62:24:c6:f9:78:5d:76:
                    88:9d:3d:8a:43:ce:40:a6:ee:a9:05:a6:be:d3:36:
                    2b:81:d0:2f:3f:7a:82:b7:9d:9b:b9:d6:fb:0b:b9:
                    3d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:89:77:C0:57:BE:6F:50:A1:34:87:D6:64:3A:01:77:5A:7D:0D:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35e381a6-9da5-3281-b356-ad8ba1e5508d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.247.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:c5:cc:a5:43:db:0d:2a:1c:a0:8c:7a:43:24:75:e7:c8:9b:
         52:8b:d5:3e:a1:d1:e5:6c:10:fd:86:7d:5e:31:48:d7:cb:8c:
         f8:2e:eb:6b:a0:74:86:9c:f9:3d:f8:5c:0c:e2:37:ae:8b:86:
         25:75:03:aa:17:c9:b6:e4:3c:a4:ad:57:c4:a6:0b:48:8a:77:
         5f:3c:69:b2:3f:25:bc:4a:53:a1:9a:71:9e:2b:82:5a:1f:2f:
         a6:41:94:66:f1:f7:64:6c:da:e3:15:e4:c2:ae:f7:78:02:94:
         97:5f:b2:c1:ad:5e:36:3e:ff:50:d4:d1:5f:a8:36:d4:f0:ea:
         89:ea:67:6c:e2:e0:a4:7e:4e:f6:72:04:11:88:be:bb:7d:c0:
         69:66:5c:95:7b:e5:d0:0e:7f:c8:8c:7c:45:b8:d2:4d:0b:b6:
         5b:1a:4e:3c:7b:df:39:a5:0c:af:60:3a:af:d1:17:cf:18:ff:
         57:63:f9:18:ee:f6:5f:fa:75:6e:ea:46:e9:a3:64:94:a6:05:
         e6:e5:e0:31:a3:10:7c:f8:4e:ed:11:7e:68:e3:46:fa:3d:f0:
         4b:00:aa:99:76:ee:d4:07:3e:f7:f1:67:dd:23:ed:a9:95:b1:
         5d:8b:64:f0:2e:4c:73:a2:f6:36:e7:70:11:31:b4:e2:17:31:
         b5:c1:b1:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----