Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4cbdd0c4-172e-31fc-9d70-2eaddbf75069.roa
File:                     4cbdd0c4-172e-31fc-9d70-2eaddbf75069.roa (raw, json)
Hash identifier:          QYc8NG205sVZAw+/GP/TdLvNJHs81l/mvmcirgv84fE=
Subject key identifier:   02:FA:07:F8:70:1F:14:CB:A1:96:92:9C:7B:6D:20:09:0C:35:F0:45
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA6C5E01801EA97F527C780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4cbdd0c4-172e-31fc-9d70-2eaddbf75069.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     33659
IP address blocks:        96.108.48.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a6:c5:e0:18:01:ea:97:f5:27:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=cc4e8200-553f-4016-870d-d6a62539a8ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:2d:37:71:ab:41:68:dc:7b:b7:0d:29:98:c8:
                    15:62:f6:f6:2d:ef:a9:4c:3a:e3:3c:eb:d2:30:2a:
                    f7:49:fd:6c:1a:10:ac:66:2a:7e:1f:da:7e:81:70:
                    89:90:cf:56:a2:4d:50:b8:a0:da:c6:43:db:da:34:
                    e8:78:06:46:17:e2:35:be:d6:ce:01:84:8b:db:74:
                    32:5a:8b:c8:d7:1e:55:33:13:91:59:7d:6b:67:9a:
                    64:46:bb:d3:6f:0e:2b:f5:53:ab:b1:a0:7b:82:34:
                    e1:ba:fc:c4:60:e4:0c:14:58:02:bc:d3:bc:db:3f:
                    17:76:60:25:ee:24:fa:3f:d6:78:f0:0b:4e:d0:48:
                    26:17:6e:14:d0:f8:3e:31:77:af:73:78:6c:f2:88:
                    c1:6c:8f:5a:ae:8d:98:d0:82:8d:82:5d:e7:d8:66:
                    5b:68:8e:33:01:b3:17:89:80:71:8e:3a:c6:61:88:
                    39:b0:5d:53:8f:71:b9:21:62:44:37:0a:4d:0a:a0:
                    bd:bc:c2:93:32:4a:cf:52:a5:19:7e:03:4c:b8:08:
                    c3:98:c0:14:7f:40:a6:c9:ac:22:9f:8b:6d:cc:4e:
                    1a:66:9a:b9:13:ef:70:ed:a0:10:2f:a7:75:a1:45:
                    cc:bc:f5:84:3e:fc:cb:9e:0a:95:44:c1:96:dd:99:
                    32:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:FA:07:F8:70:1F:14:CB:A1:96:92:9C:7B:6D:20:09:0C:35:F0:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4cbdd0c4-172e-31fc-9d70-2eaddbf75069.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.108.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c9:38:6f:5a:11:e2:f2:4c:ed:67:be:14:18:66:44:66:06:44:
         46:f7:bc:b0:d5:6b:48:35:83:cb:a6:2a:be:e5:9e:23:40:41:
         08:65:3f:e7:dd:cd:0d:ad:5d:44:39:73:a4:51:9c:be:9f:31:
         78:f5:d0:3f:da:34:be:04:d9:96:48:ea:22:c0:c3:d7:a0:ff:
         b3:fc:aa:08:ec:9d:d9:08:49:37:18:a1:77:f4:80:5b:ae:54:
         32:09:9e:09:50:ed:9e:90:5a:8e:66:b5:12:be:74:e8:0a:f9:
         50:e1:92:17:67:aa:1f:74:80:bc:cc:26:66:09:51:79:77:73:
         fc:7c:25:72:ed:50:c7:e4:58:07:ae:d7:5b:07:34:57:f4:25:
         cf:79:c3:e3:7d:f6:73:11:7d:83:58:3f:3e:70:34:81:d4:9e:
         7b:36:8c:86:64:3e:b1:23:33:80:3c:33:a4:2b:cd:e1:e0:5c:
         1b:ee:36:06:7b:c6:e8:87:12:9b:9e:83:54:4c:cc:ed:a8:54:
         09:06:34:36:5b:63:c0:90:40:af:d9:9a:08:59:8e:6e:b1:94:
         32:de:21:10:37:a3:d8:5e:1e:65:de:08:f6:6d:ef:86:d9:2c:
         af:24:4f:ae:e9:61:82:65:e4:2a:a3:fd:35:e4:a2:2e:b9:c0:
         2c:9b:13:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----