Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4cc57b6b-98fc-3402-811e-e1a7d4fe65ad.roa
File:                     4cc57b6b-98fc-3402-811e-e1a7d4fe65ad.roa (raw, json)
Hash identifier:          1o4aTwwWTmin4cVXpCoxOyZc56bHff7zgRVYhHGZqH8=
Subject key identifier:   14:42:A8:48:2E:B7:68:83:E3:F5:0B:3D:FC:93:75:D0:FD:B1:EA:69
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA6D59931F40B5046F77940
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4cc57b6b-98fc-3402-811e-e1a7d4fe65ad.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     23235
IP address blocks:        50.200.163.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a6:d5:99:31:f4:0b:50:46:f7:79:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=323e93a4-f1c9-4225-83f3-4cd39bb4e90f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8a:3f:03:b6:51:26:d3:70:20:eb:e5:05:6f:
                    cb:af:15:40:40:47:ab:6f:36:2b:ba:ec:46:0a:63:
                    3f:95:83:fc:e7:83:b8:10:6e:e9:22:83:01:3c:15:
                    5f:07:2f:32:e8:3f:a7:6c:80:78:4b:9b:35:7a:ed:
                    a0:44:e8:ed:ad:a9:2d:43:0f:dc:3c:e9:6a:98:16:
                    43:b7:77:01:38:1f:c3:a1:9c:d2:5a:6b:62:6b:d6:
                    2d:1d:c7:2e:30:e7:4f:d1:f4:f7:fa:61:01:fd:45:
                    51:74:d3:23:1b:67:49:cc:e7:25:8d:03:dd:ee:cf:
                    bb:12:c7:e8:50:76:60:48:89:ca:1d:3a:f1:5f:35:
                    5d:fb:90:ec:1f:30:2d:52:f2:83:2e:d4:1b:a3:93:
                    5b:4c:50:20:01:44:9e:67:59:bf:25:11:ec:9e:03:
                    fd:bd:73:c8:8c:0f:a3:3a:3a:01:e3:ce:2a:d6:14:
                    3c:a5:a5:9f:18:0d:05:41:b9:e9:8c:e4:20:57:a5:
                    59:60:b9:ee:6a:02:f4:83:87:bb:a5:7d:66:ce:d9:
                    0c:a2:f1:f0:f4:eb:25:d3:0e:b8:f2:57:39:1f:e3:
                    40:d2:5e:63:1f:b1:57:85:2d:b2:b7:2e:7d:59:50:
                    7e:71:50:35:c7:76:d2:3b:c3:31:35:48:eb:33:56:
                    59:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:42:A8:48:2E:B7:68:83:E3:F5:0B:3D:FC:93:75:D0:FD:B1:EA:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4cc57b6b-98fc-3402-811e-e1a7d4fe65ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.200.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:ca:23:91:fd:75:76:1c:e6:44:9d:95:f3:52:91:8c:e8:d5:
         0d:9c:e6:a0:c7:e5:b4:a7:ed:36:12:ac:73:ea:df:a9:7c:ad:
         d8:2b:2c:ab:62:77:19:93:3c:5e:7a:7a:30:92:dd:8a:ff:cb:
         c6:ca:b5:ad:d0:a5:2b:3f:97:6c:61:71:54:5a:66:a0:be:00:
         1c:5f:ad:a4:9e:fc:9d:1f:e4:79:88:55:67:f6:55:20:56:0e:
         51:55:65:35:54:33:63:f3:46:35:77:bc:1d:9e:e7:24:96:5a:
         cc:d3:04:cb:c5:fb:53:b1:dc:e7:70:06:33:27:12:65:89:b8:
         82:86:b9:17:4c:23:46:71:4a:53:80:c5:e2:6c:30:0d:27:16:
         86:f3:f5:6e:72:2d:38:3b:dc:74:5b:2c:2f:27:b4:af:f9:ad:
         94:9d:ae:c3:99:03:67:3f:9f:ad:db:4a:cf:1b:ae:fd:10:90:
         57:24:95:a1:23:39:09:0f:dc:65:7b:d9:9c:23:6e:86:6d:e9:
         5f:bd:fa:a6:57:f7:c0:8e:8c:f6:03:14:dd:c6:a2:f6:3f:ac:
         39:30:1f:1b:e9:f6:d1:a7:f2:be:09:76:1f:14:da:ed:f7:dc:
         c4:01:17:f8:c5:ad:12:9a:0f:1f:ef:06:0c:77:7d:73:b5:be:
         65:6f:96:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----