Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/56cb8bac-f31e-3918-9274-9ac616c04d06.roa
File:                     56cb8bac-f31e-3918-9274-9ac616c04d06.roa (raw, json)
Hash identifier:          RRCpJEPttzKm30zJVfuoRpnGvVBJVtyAOo4R4waNpP4=
Subject key identifier:   2B:52:E0:93:45:FC:C8:46:E9:61:5F:82:5F:03:D1:79:A5:7E:C9:56
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA59EC1A3BCA08D4DC4E5C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/56cb8bac-f31e-3918-9274-9ac616c04d06.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     33659
IP address blocks:        2001:559:1a9::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a5:9e:c1:a3:bc:a0:8d:4d:c4:e5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=9037b12b-2c6b-4e09-9d9c-0f74e7995b4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:b7:87:99:2a:6f:71:6c:6e:09:6d:7a:d1:61:
                    f1:05:cd:26:86:30:6e:bd:e9:53:ae:ef:dd:96:2d:
                    8c:f5:37:c8:bc:13:1b:79:f4:9d:78:d0:82:6f:f3:
                    05:5a:f4:b9:97:60:93:ce:5c:aa:97:a9:75:90:1a:
                    86:b4:e5:1d:30:52:d7:e5:56:99:87:22:c2:19:a0:
                    35:47:77:97:a8:a1:22:f2:20:38:bd:5f:00:2c:91:
                    a3:0c:db:de:f7:c5:c8:07:14:c4:9e:e4:04:a2:e1:
                    6a:5b:d5:6f:30:6a:a6:93:c3:7b:93:d4:a0:6c:eb:
                    8c:fb:65:d6:f2:29:ca:4d:46:9c:97:88:aa:e7:dd:
                    0c:58:de:c6:3d:22:b1:6a:fe:7a:0c:e2:ee:6d:49:
                    36:a4:f7:54:e0:e4:71:a0:ce:21:71:d1:72:a2:0a:
                    e1:3b:f0:a0:65:45:82:42:c5:1a:2f:b0:b1:be:6c:
                    c0:cd:70:da:05:f0:f2:94:c9:dd:b9:52:89:c4:cb:
                    34:56:33:86:32:e0:e8:42:e2:ab:0e:cf:1a:b3:f0:
                    45:4b:11:f8:8d:15:5b:9e:e3:ba:68:93:7d:f4:d7:
                    f0:8d:99:dc:33:44:3f:ab:bb:ae:24:f0:54:7c:cd:
                    c6:ee:e5:72:ce:f3:56:d0:1c:83:5f:a0:70:45:70:
                    04:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:52:E0:93:45:FC:C8:46:E9:61:5F:82:5F:03:D1:79:A5:7E:C9:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/56cb8bac-f31e-3918-9274-9ac616c04d06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:1a9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:53:cd:35:51:f3:38:46:a3:76:72:b0:38:8c:d2:94:6e:a0:
         ab:0e:26:35:73:fb:5c:a5:34:e2:5f:34:16:3c:e2:e5:2a:0d:
         4f:15:7c:07:a2:d2:28:97:e3:f4:91:c4:17:8f:31:bf:c4:7f:
         77:81:8d:df:66:df:2e:99:49:81:94:e8:0e:c8:b1:5a:84:80:
         27:db:dd:2a:5e:c5:08:34:d8:cf:0e:f4:b9:0a:5f:77:fd:1f:
         d7:cc:cf:9e:cf:53:59:85:d3:c8:35:91:36:08:1d:36:b8:ad:
         a1:70:69:34:d3:d9:ee:72:3d:2f:40:c9:29:d1:a5:61:e6:29:
         c9:62:82:c5:ee:12:be:14:f7:a8:a0:46:06:c3:2f:9b:25:fb:
         89:fb:d7:5f:85:5c:b3:47:1f:72:9b:ea:ea:2c:6e:51:07:48:
         b5:af:5f:00:89:2f:43:28:0a:13:ec:6f:29:7d:96:b5:29:85:
         d7:5e:8c:87:5f:f3:5a:f5:c7:c1:6e:94:59:c4:95:df:73:ae:
         3e:f9:a6:72:4c:b3:04:37:d1:e1:3a:46:73:86:07:ec:d7:33:
         68:9b:38:5b:72:35:da:f1:1a:c9:f8:db:93:53:56:42:e2:e6:
         17:03:3f:ae:85:af:81:8a:32:32:37:ea:64:72:49:50:38:0a:
         17:84:9a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----