Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/56e96d53-d6d2-3891-8028-eb971ba63d7d.roa
File:                     56e96d53-d6d2-3891-8028-eb971ba63d7d.roa (raw, json)
Hash identifier:          zPr5cvUGiiNTjImLzOK2TjNJXs749AJXkM5dwFzxjPY=
Subject key identifier:   E3:03:04:17:21:41:16:85:08:5F:F4:28:0F:F8:9C:93:1B:E3:A7:2C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA635DCE550E1C6EBC9D180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/56e96d53-d6d2-3891-8028-eb971ba63d7d.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     33651
IP address blocks:        2001:559:80c3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a6:35:dc:e5:50:e1:c6:eb:c9:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=9edc4b37-79d2-4ce5-882e-db63f77b901e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5b:19:5d:06:3a:d2:93:4a:57:15:bf:1f:82:
                    12:ab:03:29:47:0c:3a:6c:56:d9:36:af:97:ab:1c:
                    9f:a5:25:3f:a7:45:b9:4a:98:92:61:e3:15:a5:4c:
                    da:22:a5:b8:b3:ee:94:6e:38:1a:aa:03:a2:68:a3:
                    d4:e7:29:a5:8c:a9:22:c8:96:22:27:20:a8:55:1c:
                    ef:46:06:0b:c0:b5:07:ea:e0:6f:c4:15:69:08:65:
                    8d:be:04:ca:f0:ad:8f:8b:c4:f0:07:5b:a3:1a:4d:
                    64:2a:1c:28:2b:8c:b5:ca:27:3a:9a:e8:24:95:9b:
                    df:bd:6c:4b:b4:f6:b6:b7:d8:69:8b:3a:32:58:a5:
                    01:7c:3e:7f:c1:40:bb:24:6d:05:4f:b9:cb:53:6c:
                    10:60:08:81:05:55:85:ff:eb:a4:94:d0:75:5d:2d:
                    ae:d4:26:11:5a:df:a4:19:16:e9:53:f4:be:82:67:
                    24:b9:a0:e7:60:c7:cd:03:25:08:19:67:e5:c5:c8:
                    3d:0b:a8:bd:94:43:d7:e1:47:ee:2e:b9:60:96:7d:
                    01:fe:f0:db:3b:08:e6:f4:f6:7e:0f:03:b8:24:7c:
                    36:58:d0:a4:bd:eb:84:22:4e:ff:7c:80:56:be:4c:
                    30:eb:e1:c4:b9:5c:7b:c4:40:62:6c:f4:7d:b0:8c:
                    eb:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:03:04:17:21:41:16:85:08:5F:F4:28:0F:F8:9C:93:1B:E3:A7:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/56e96d53-d6d2-3891-8028-eb971ba63d7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:80c3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:89:05:54:53:5a:3a:08:ef:e0:f4:a0:bf:65:44:a4:f9:95:
         32:ce:38:08:63:5e:de:ec:59:10:20:5f:42:80:0a:a8:3b:c9:
         fa:38:2f:92:f1:bc:0e:a0:60:88:7a:88:96:ae:0b:1d:91:86:
         d0:53:7c:6c:f0:5f:54:59:ab:2a:da:99:93:6e:15:aa:b9:ef:
         92:02:b6:8c:6f:fd:e0:2a:c3:13:fb:8d:54:61:88:34:63:cc:
         53:9d:1e:a5:8e:fb:f3:c5:3b:7e:fd:4d:80:69:f6:da:4d:0a:
         49:cf:4a:5c:c2:64:cc:89:48:d6:4f:7b:19:2b:2c:2a:3f:ac:
         44:40:48:40:61:cd:38:f9:4e:b5:03:96:16:ce:62:54:2e:6e:
         a9:8f:32:df:09:8f:9c:f9:22:59:c9:08:19:24:98:b5:e9:e1:
         c2:81:93:ad:b1:75:66:67:05:f6:bf:f4:28:03:7e:af:8d:54:
         59:a4:4f:49:24:3e:65:5e:6a:d1:76:02:8c:12:94:b7:37:ae:
         84:ea:14:01:4e:84:d8:7b:f2:8a:85:cd:7e:76:bd:1f:42:5d:
         35:96:04:e8:39:b3:3a:a1:ee:35:39:82:73:fb:fe:21:4a:32:
         24:dd:7c:40:d2:16:a9:17:2f:0c:86:81:ff:f8:0d:3c:7c:56:
         3c:10:16:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----