Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43a3b20d-f266-36a4-acd8-855a170d31a9.roa
File:                     43a3b20d-f266-36a4-acd8-855a170d31a9.roa (raw, json)
Hash identifier:          kC9yTwKgn6SGw55/UwtiFXN401b9vjLEB9iZ8mSF17c=
Subject key identifier:   67:C9:3E:03:1D:6A:F6:ED:71:C6:60:02:5C:F4:65:59:68:EF:81:F3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA69EA26B7F8F8FFCB89DC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43a3b20d-f266-36a4-acd8-855a170d31a9.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     33287
IP address blocks:        107.1.136.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a6:9e:a2:6b:7f:8f:8f:fc:b8:9d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=afec3761-0af1-42a5-a41f-e2d85207a4ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:70:e1:11:89:ce:83:68:e9:e6:dc:7e:6e:78:
                    02:82:ca:50:33:9a:f0:1d:6e:c7:90:17:ac:bc:49:
                    16:09:84:92:97:c0:11:68:99:2c:c8:83:24:e7:1e:
                    d5:16:dd:8d:53:4f:ad:a2:53:ec:8e:0d:ae:a4:f4:
                    45:d0:eb:ab:d3:ea:fb:31:c9:19:4a:1f:3a:31:5f:
                    0b:54:f2:4f:80:6e:4d:57:0d:ff:86:22:1c:a5:ab:
                    13:ca:41:93:fd:f2:67:77:26:c9:bd:7d:d7:8b:e0:
                    a9:8c:c3:e3:57:43:ad:bd:6c:ae:7d:3e:f3:6e:95:
                    b3:6f:07:15:cf:65:9f:da:72:36:a4:84:a7:8e:d0:
                    c1:d1:2e:ce:94:1c:a1:18:23:ad:f1:e9:14:73:a4:
                    c7:ec:d6:46:8a:48:9f:4b:57:c1:2e:74:5a:92:61:
                    27:3e:d5:6c:0d:77:c4:e4:a6:29:62:81:d8:d5:7b:
                    cc:b2:e3:73:df:f6:3f:8e:4d:ba:2e:79:6b:4d:40:
                    da:64:99:7f:5e:de:6b:ce:07:e2:b9:c5:ca:f7:ae:
                    26:43:38:5a:d4:8b:3d:e1:0d:40:ca:f1:e6:ac:4f:
                    97:9c:23:15:42:a9:3f:1d:4e:78:f2:1e:f5:ac:96:
                    65:10:19:f9:5b:b1:89:bf:20:2f:5e:72:ea:50:11:
                    5a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:C9:3E:03:1D:6A:F6:ED:71:C6:60:02:5C:F4:65:59:68:EF:81:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43a3b20d-f266-36a4-acd8-855a170d31a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.1.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:d6:a9:37:88:4b:27:fb:c0:63:cf:2d:28:c4:5d:62:29:07:
         f3:b9:9d:0c:2a:d1:f9:00:7e:ad:2e:f9:45:21:8f:ac:7a:cb:
         b1:8d:6b:b1:ea:0b:ac:f2:08:af:3d:43:d6:24:56:94:15:59:
         96:36:0b:5e:48:af:ca:21:0e:b5:d5:60:73:76:40:ff:ce:2f:
         7b:90:a7:27:a9:60:57:a5:61:b0:ed:02:08:4b:a8:eb:49:3a:
         6b:4f:a5:22:78:db:45:35:6d:76:ca:10:02:8a:ba:d8:d6:97:
         73:0b:a5:f4:2a:56:5d:f6:99:3c:33:94:7c:a7:9b:e2:7d:8f:
         44:a8:3a:30:e7:7e:36:b1:46:fc:c8:0b:ac:ef:a3:3c:c2:97:
         bf:7f:11:04:97:fc:75:eb:3a:42:f0:86:c3:88:1d:c2:cf:7e:
         45:d6:5e:76:90:f3:c5:3b:2f:2c:6f:19:29:53:d2:b6:0a:19:
         a2:d0:64:ac:55:e0:de:e3:cd:30:10:d5:38:e3:ac:9a:9a:b0:
         65:b3:62:3e:74:6f:2d:42:7c:58:7c:a3:56:57:86:ef:87:c3:
         4b:da:ac:18:67:b1:1e:f8:fc:1a:96:3d:ae:81:6b:8b:ad:76:
         cf:6b:d0:cf:ec:2d:e9:b3:01:b7:82:fe:01:5b:7b:44:d9:2d:
         8b:0e:d6:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----