Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/41560147-5b49-330c-acc9-448b2a6d0e24.roa
File:                     41560147-5b49-330c-acc9-448b2a6d0e24.roa (raw, json)
Hash identifier:          kn5sAGgcBG0mTC4eEDGJAS5BsLxwo5O7+5PQKCWYzpI=
Subject key identifier:   29:17:15:6B:D8:6F:AF:36:EA:91:D7:FC:F4:09:B1:5F:C3:EA:4C:64
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA4B59541D629623AE8DA40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/41560147-5b49-330c-acc9-448b2a6d0e24.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     7016
IP address blocks:        2001:559:14e::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a4:b5:95:41:d6:29:62:3a:e8:da:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=2892d48f-ee05-4db5-8452-7d0dd6829456
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bd:8a:50:10:59:d1:fa:bd:38:6c:fd:b8:46:
                    99:0b:f4:f0:e7:57:6f:f6:59:9a:cf:59:a3:8c:e6:
                    a4:da:5c:86:14:a0:e0:2f:b8:f1:1b:cb:cf:cf:e1:
                    bd:fa:12:79:f3:c3:43:d9:e2:3d:cc:0a:67:72:45:
                    a6:dd:32:2e:7f:68:ae:37:8b:81:45:7f:0a:b7:e1:
                    9e:16:9b:3b:2f:ec:18:ca:18:ec:c2:99:ca:18:a0:
                    51:eb:07:a8:bf:35:64:97:61:96:a8:ab:72:3b:2d:
                    20:a0:68:87:a2:92:f7:7e:29:ff:15:f2:7f:8a:c0:
                    4f:bf:59:c5:c6:0c:72:28:69:18:4d:dc:f4:a5:d4:
                    65:cf:06:12:40:fb:23:83:cd:f8:bf:76:dc:dc:14:
                    a9:91:80:21:72:9c:bc:9a:85:f7:55:7e:96:63:3c:
                    5b:0a:d5:32:35:7b:74:36:22:4f:18:25:54:b8:48:
                    3b:1d:f4:81:5a:b0:4a:f2:1a:3c:c6:d5:96:17:2b:
                    16:18:af:b5:ca:76:91:e2:ef:b4:57:43:39:39:15:
                    fe:9f:28:cf:ea:18:d2:b7:04:4f:64:22:61:5e:5e:
                    36:fe:08:45:a7:25:0e:d8:88:77:b2:55:49:ec:4a:
                    bf:46:fb:7c:39:c0:5e:03:36:47:19:e3:2e:37:73:
                    37:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:17:15:6B:D8:6F:AF:36:EA:91:D7:FC:F4:09:B1:5F:C3:EA:4C:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/41560147-5b49-330c-acc9-448b2a6d0e24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:14e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:a8:ce:95:09:4e:d1:c6:c1:2f:17:a0:50:0c:ad:93:73:eb:
         9c:b1:36:83:3c:40:20:9e:20:36:01:f0:2b:d0:12:18:83:24:
         58:9e:a3:8a:a5:b1:f5:ca:48:4f:d2:df:8b:b7:8c:a6:c3:10:
         ce:3a:0e:e1:ca:aa:5f:ae:ef:db:2f:1e:3f:10:47:5d:61:eb:
         6c:97:04:24:e6:12:e9:68:64:0e:b8:73:1c:8d:ad:69:76:00:
         ef:ad:67:59:be:0e:92:ed:e5:5e:54:71:03:5f:ba:5e:bc:88:
         15:4d:93:01:cd:fb:56:26:a3:44:85:52:6d:a7:c1:6d:4b:51:
         ab:5d:85:37:d9:6a:51:66:7c:7d:9b:7f:2b:02:a7:31:8e:ca:
         c1:3a:6f:e0:56:48:95:b1:14:00:cc:bb:55:5a:a1:f4:78:9a:
         ec:9d:88:13:e3:9e:c7:da:38:8a:85:c4:9b:5f:6c:19:f0:82:
         f0:8b:d5:63:65:59:91:c8:de:ae:53:af:a7:0d:20:fa:96:98:
         15:47:4e:ac:1f:09:be:a5:d8:4d:f8:2e:25:e2:e6:d4:e4:4a:
         9d:60:d6:60:4b:96:f4:17:79:6d:a9:7f:91:f8:e9:36:33:91:
         62:89:d4:14:40:8c:d4:cc:cf:b7:c9:95:6d:29:b1:3a:45:f6:
         c7:86:80:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----