Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/489acc22-fc85-343b-921e-e36031565fc8.roa
File:                     489acc22-fc85-343b-921e-e36031565fc8.roa (raw, json)
Hash identifier:          DO5gojLo8TRAIIkUwUOxbYSRehmtNI3XolcUdA9cDA4=
Subject key identifier:   EB:AC:E7:47:01:53:21:37:F4:B4:A0:25:04:BC:20:12:E3:42:53:AF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA6621C131558FD5F29D9C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/489acc22-fc85-343b-921e-e36031565fc8.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     7015
IP address blocks:        2001:559:31c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a6:62:1c:13:15:58:fd:5f:29:d9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=1e0f3adb-69f2-41e7-b66c-619779eeaf9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b8:72:7a:1e:1e:67:b2:48:90:44:34:87:f3:
                    90:f8:d1:ce:e0:39:a2:b1:2c:24:c5:1e:40:ca:be:
                    77:9d:94:a4:45:aa:77:0b:94:f4:1b:65:26:ef:5b:
                    6f:66:0d:3c:b7:b3:2a:99:21:e5:9b:a6:d9:3c:aa:
                    c0:45:08:81:6d:5a:88:a7:d9:f6:1d:02:2d:c5:ad:
                    08:fe:ed:ac:2a:09:59:c5:16:7b:1b:e6:da:63:c8:
                    b7:41:40:15:ac:14:2c:f9:c3:76:a3:d3:a2:89:ee:
                    c8:05:93:cf:44:20:87:b2:46:7d:68:3c:1f:53:22:
                    05:79:db:a0:d3:07:67:60:e2:5b:88:24:1b:5d:b7:
                    80:fe:97:dc:18:b9:89:68:52:b1:aa:e8:ab:d7:25:
                    c0:f6:c9:ed:2e:da:d3:ca:c4:95:cc:6b:50:8a:43:
                    40:ab:bc:05:bf:e9:af:e2:48:6e:f5:ac:c5:7d:96:
                    09:3a:d7:b2:02:7b:91:a4:08:da:f0:30:0b:04:b0:
                    b0:cc:c1:ea:47:ad:8b:29:40:a3:3e:30:2d:02:72:
                    0a:b6:ab:eb:c9:8f:ae:92:8e:ae:0f:9d:b2:f6:e7:
                    fb:ce:e7:29:e2:18:89:12:06:0a:a4:4e:cd:eb:b5:
                    0f:16:4a:b5:06:de:97:2a:ee:7d:a0:fd:00:a0:e0:
                    23:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:AC:E7:47:01:53:21:37:F4:B4:A0:25:04:BC:20:12:E3:42:53:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/489acc22-fc85-343b-921e-e36031565fc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:31c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:75:44:ad:09:94:48:41:86:36:8a:f6:15:cf:f4:76:46:e7:
         3c:36:9f:d9:03:6b:6d:ed:f9:a2:17:97:1e:b1:72:af:53:eb:
         15:79:69:b0:ce:a3:5b:ad:84:52:0b:ed:fe:ad:0c:48:12:62:
         09:aa:4d:65:27:3f:01:3d:ec:23:ed:71:dd:73:14:f1:ca:ba:
         de:93:80:b7:39:12:27:f1:b0:08:4b:a3:9d:7a:4c:40:49:07:
         7e:a6:6a:54:f7:51:f9:12:72:b7:a4:0e:c1:7a:f1:f1:8b:92:
         39:c8:89:aa:1d:a0:5b:b0:e7:c4:55:b1:92:89:0b:a8:4d:ac:
         8b:94:98:29:6c:24:55:32:ca:ec:fb:34:05:13:c1:32:ca:98:
         00:a0:d4:01:88:e8:8a:b2:b2:b4:45:03:a0:07:19:9e:91:5e:
         53:9c:c8:b4:87:2d:36:33:0a:84:da:33:48:6f:cd:90:32:7a:
         4b:59:73:1e:23:ff:a3:c9:ac:b8:94:26:14:73:bd:d6:9b:11:
         6c:85:ee:3d:65:79:15:d7:fe:9b:d5:c8:91:86:ac:69:97:5d:
         5a:45:07:30:e2:1f:a2:88:0c:96:28:42:6b:14:0a:08:df:ad:
         27:39:57:37:e8:4f:b9:72:4c:82:74:63:1b:e9:2a:82:f2:e7:
         29:89:04:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----