Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3d1eb941-f631-3648-aee2-fabcead1f5db.roa
File:                     3d1eb941-f631-3648-aee2-fabcead1f5db.roa (raw, json)
Hash identifier:          TcbhoaIWsJHp2j2HcXLeSYbvzPaS87/vBYKwID87asA=
Subject key identifier:   B2:3F:BA:67:0D:76:55:D2:0D:00:95:F1:B7:E9:48:8A:40:41:B7:9F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA605831C6C2DB4E2C50F00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3d1eb941-f631-3648-aee2-fabcead1f5db.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     7016
IP address blocks:        2001:559:8770::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a6:05:83:1c:6c:2d:b4:e2:c5:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=c21a4288-951d-4ffe-928b-ca7b0d620e35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:04:da:3f:df:78:cc:2f:73:01:5b:8e:90:1b:
                    79:bf:40:39:b1:5a:d1:d3:68:3c:f8:73:01:75:f9:
                    cb:04:77:24:ef:39:6e:3a:b0:75:2a:3a:35:a6:ed:
                    92:be:78:b6:d6:55:46:cd:26:83:bd:8c:de:cc:2d:
                    c8:0d:5e:df:f4:e6:c1:e5:74:d9:16:63:ca:38:90:
                    46:99:47:6a:95:98:a5:e7:e5:ed:7a:23:f4:c8:2a:
                    fc:37:12:0b:34:1a:42:2e:13:a0:f4:b8:6d:72:ca:
                    a7:21:8e:f7:4b:eb:e4:1b:43:1b:4c:50:42:47:d5:
                    6b:53:4f:73:00:1e:cf:13:42:d0:a1:28:e1:f0:14:
                    1a:fb:12:1d:a6:09:2d:b5:52:ed:c8:8c:5c:2c:1c:
                    78:be:26:a4:c3:82:09:f8:49:bf:94:a1:2c:8e:12:
                    3d:74:ae:11:db:56:f5:d7:53:5b:99:d4:6d:64:9e:
                    f2:32:76:d6:39:39:ab:c5:06:37:35:fd:95:a1:2e:
                    57:55:3b:f7:fa:b0:ca:6a:f1:25:ff:6b:8e:8a:ec:
                    2b:c4:a6:90:57:2e:cb:37:df:bc:45:65:70:57:c7:
                    d6:67:4f:ef:dc:0e:e5:cd:2f:32:0b:e0:b2:6c:38:
                    52:64:01:39:17:15:b3:d3:6e:45:c0:85:2f:7b:12:
                    05:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:3F:BA:67:0D:76:55:D2:0D:00:95:F1:B7:E9:48:8A:40:41:B7:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3d1eb941-f631-3648-aee2-fabcead1f5db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:8770::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:1b:a3:13:4e:e1:ce:92:11:c0:a0:d3:88:06:4d:b1:fc:39:
         22:48:47:59:70:cd:98:59:8b:e1:90:99:34:51:d8:71:84:1f:
         a1:92:89:36:30:6f:52:e4:49:28:f6:27:fb:54:20:94:34:2f:
         de:4b:52:ff:85:3d:b2:fc:9c:be:05:7e:f0:19:8c:9d:79:3e:
         3d:a1:ec:ef:d2:6c:99:4b:1b:d4:20:7a:93:c2:fd:5c:4d:c6:
         72:6d:8c:e1:e2:7c:91:c4:ca:dc:0e:5a:1d:97:c6:b2:1a:24:
         f6:6e:d9:7a:65:fe:b4:26:5a:57:0a:ec:b4:6a:f9:2e:b4:c0:
         23:00:9d:e0:3a:4d:6d:e6:6f:38:8b:70:cc:d1:11:43:f9:b1:
         f7:fa:df:79:b8:fb:07:48:3a:fd:77:13:66:ef:cd:5a:30:ba:
         af:ba:7d:11:fb:75:c2:dc:4b:84:4b:ae:41:54:ee:83:46:4e:
         c9:ff:6f:52:14:29:81:93:a4:d0:ca:1a:c9:f8:09:6a:d9:0e:
         b8:e0:36:9e:9c:05:a1:b7:16:5e:72:5b:d2:52:02:50:b4:95:
         9a:b7:18:5c:be:8c:2f:ee:6b:4a:e1:99:c5:af:1b:07:13:21:
         63:9a:01:05:e8:b7:45:97:70:50:c5:53:45:d5:4c:79:7d:49:
         44:4a:2f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----