Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43e8bb35-e45f-3186-8090-62e009383384.roa
File:                     43e8bb35-e45f-3186-8090-62e009383384.roa (raw, json)
Hash identifier:          Kdsb+3stqD26AOjNeqxQp8/2DtlxZ1wWpcIw3se6TVQ=
Subject key identifier:   DD:45:48:0A:1C:E4:8E:03:C7:CD:E1:EC:40:12:AD:B8:36:91:2B:8F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA5456F48365A897A8E0B00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43e8bb35-e45f-3186-8090-62e009383384.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     13367
IP address blocks:        76.113.136.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a5:45:6f:48:36:5a:89:7a:8e:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=b3f088f9-059a-4f38-a563-cf17440126e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:40:8c:96:65:8b:1f:4f:0c:6d:73:03:a3:fd:
                    f1:2e:3e:4c:31:6b:bf:e9:b4:63:f6:07:18:35:57:
                    c1:72:d7:81:d6:64:69:75:da:20:a5:15:59:13:3f:
                    2b:47:54:ed:2c:09:09:78:24:79:63:d0:2d:1f:cc:
                    a4:0e:60:e2:69:77:f0:49:27:5b:5a:54:f0:6c:48:
                    03:29:7f:de:ef:f7:33:d2:15:d5:82:0a:90:69:0b:
                    a5:2e:51:75:c0:7c:44:de:fc:36:a8:1b:c6:99:ba:
                    c5:f5:9d:28:a8:20:5a:a1:1e:e3:e5:23:20:4d:c0:
                    ba:18:11:27:b5:c4:51:40:60:b9:7f:65:41:0f:fe:
                    e3:0c:11:a1:22:90:ab:ec:cd:68:42:b6:a0:66:ab:
                    56:38:9f:a0:7e:a9:c8:54:6a:82:1d:75:dd:9c:03:
                    2b:91:4f:9e:79:2d:04:31:4a:f8:6c:14:25:f5:4f:
                    03:b8:e6:26:a7:be:8a:60:29:bc:ef:6a:5d:61:41:
                    c3:8f:95:2f:4c:a4:26:11:70:a1:04:4c:52:f2:3c:
                    84:e7:2f:fe:46:49:cb:bb:40:5c:f7:32:26:19:0a:
                    c8:15:38:e1:99:39:3e:58:0e:54:16:ec:ef:ab:28:
                    18:b7:a7:c6:7c:59:38:e0:68:37:9c:91:73:d0:cf:
                    1c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:45:48:0A:1C:E4:8E:03:C7:CD:E1:EC:40:12:AD:B8:36:91:2B:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43e8bb35-e45f-3186-8090-62e009383384.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.113.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:5e:db:5a:81:34:83:19:b2:36:f5:59:22:7f:ad:c4:90:3b:
         c1:a2:89:5c:f1:20:87:fb:2c:45:41:ef:df:5a:40:6d:eb:f2:
         65:77:c3:1d:bd:a7:62:4f:aa:dc:97:9b:58:9c:7a:a0:f8:39:
         b9:04:11:77:8d:ce:3a:4c:03:42:95:94:92:2f:08:f0:68:ef:
         2e:f4:15:e3:12:93:bb:75:bb:94:83:9e:de:14:e7:64:fb:b4:
         0a:e6:f7:24:74:61:c5:eb:2b:ed:35:df:01:10:49:a2:38:88:
         93:65:c5:69:ce:b6:a3:04:35:ad:db:01:3e:57:4c:19:31:20:
         30:18:87:90:4c:a5:03:0d:2b:07:62:f2:4a:2b:00:47:36:2e:
         a3:1d:f7:6f:ef:90:c8:3d:67:c7:ee:01:b5:0a:3d:c6:75:c3:
         73:aa:5b:b4:15:d8:9f:e7:cb:b0:6f:f1:86:5d:fb:60:a2:4f:
         35:d3:92:cd:c4:d5:6a:69:98:95:e6:f4:fe:e2:d5:5a:80:6e:
         ce:06:f3:d1:3a:0a:54:97:8f:3c:6c:e7:d5:8c:b5:ff:6f:dd:
         ac:67:91:6c:de:a8:27:1b:62:de:90:d9:7b:79:01:48:2e:3a:
         bd:db:65:4d:ff:d8:8e:91:04:28:27:27:29:c7:08:06:b6:ad:
         27:12:1b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----