Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/566d92f9-d3e5-3005-b924-2c07272040e6.roa
File:                     566d92f9-d3e5-3005-b924-2c07272040e6.roa (raw, json)
Hash identifier:          +7sGywfQOmkgUkwj1kt7IUoGhCUmqmEWLLw8TrLc11s=
Subject key identifier:   2F:BC:F6:F9:DB:C4:78:70:CD:2F:1C:62:D1:E9:90:CC:42:CC:08:50
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F907ABA1446C35985B4B80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/566d92f9-d3e5-3005-b924-2c07272040e6.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     33668
IP address blocks:        98.209.42.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f9:07:ab:a1:44:6c:35:98:5b:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=63b1c02e-893e-4dc6-b30b-dfa743c57459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:3f:ec:ea:b7:04:9e:9b:93:76:e1:7a:12:b5:
                    6c:c6:c6:f2:d9:85:27:fb:3c:fe:4a:75:d1:bd:2a:
                    29:a1:19:6a:82:aa:80:28:b7:0f:43:72:91:6a:a9:
                    6b:92:56:3c:da:3c:cb:21:ad:ab:25:d3:38:ca:09:
                    10:ae:6d:10:7b:27:66:1b:1c:16:18:d8:6a:bc:aa:
                    8c:be:44:7a:b3:c0:5d:e8:2a:6d:6c:51:51:73:77:
                    1a:b8:d3:37:7a:86:bf:21:f5:a1:22:a2:98:d8:ea:
                    68:94:59:76:ff:97:0a:3c:de:9b:fb:34:18:f7:1d:
                    ea:b4:af:02:46:ae:b4:8d:44:c3:24:35:c6:25:5a:
                    fc:76:07:2d:9d:ec:ad:59:6f:29:25:db:9d:45:c7:
                    f7:a5:cf:06:1d:06:f3:ca:ed:c9:18:c7:96:3f:ae:
                    6f:ea:ff:14:55:02:fb:fe:82:e9:b2:f9:1b:fc:1d:
                    9c:74:73:90:ba:db:81:7b:b3:65:d9:cc:66:73:8c:
                    4e:82:21:66:c0:45:80:6d:14:c0:4a:5d:03:05:d9:
                    a8:9f:a2:24:19:f6:c1:c2:ca:4e:c9:c2:6c:3c:81:
                    54:29:3d:0a:4e:41:88:bb:31:74:1b:43:c8:f2:15:
                    d5:24:df:16:ec:71:48:65:73:af:7a:b0:c2:6b:60:
                    a1:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:BC:F6:F9:DB:C4:78:70:CD:2F:1C:62:D1:E9:90:CC:42:CC:08:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/566d92f9-d3e5-3005-b924-2c07272040e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.209.42.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:85:82:4c:7d:e8:21:96:b7:4b:c0:be:7e:73:d9:45:25:f2:
         57:8e:2c:af:a6:58:e9:c1:67:02:06:de:82:13:a8:3b:3e:95:
         d0:f9:51:b5:45:07:d3:ca:95:ea:11:db:47:2d:07:7f:c8:e1:
         b7:e9:b5:2f:50:80:b4:60:57:38:28:92:1e:e3:b6:ce:c0:46:
         c8:6b:ec:c3:dd:15:59:86:70:8a:64:11:e1:07:78:92:65:ed:
         5b:62:62:46:73:f5:ab:d1:d5:fd:ac:97:e9:36:3b:35:05:7e:
         26:23:a9:f7:52:7d:62:a9:9e:d5:81:e8:8d:8f:cf:b8:a5:51:
         f6:49:07:48:3a:41:0d:8f:29:59:3a:e2:a0:b0:a8:dd:82:b9:
         35:dc:24:57:23:b5:b6:87:d4:fe:16:8c:f6:00:fc:63:ae:9c:
         d7:e2:b1:81:df:0f:9c:e8:24:c7:2f:57:45:87:91:d4:a5:44:
         5d:bd:77:5b:3d:64:99:43:a8:ff:29:82:c2:c2:6d:cc:84:f6:
         9a:35:c2:74:54:ed:06:7d:72:24:81:6e:c0:7d:13:5f:d1:4b:
         d6:2f:ce:ec:d8:ec:10:f2:d9:89:68:85:1b:d6:bc:4d:9b:59:
         d7:2b:f4:22:e2:a8:1e:7b:5d:5c:b5:12:89:69:40:c6:7e:7e:
         10:6f:28:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----