Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5c36823b-c1a3-3175-86e7-eda5b30d8edf.roa
File:                     5c36823b-c1a3-3175-86e7-eda5b30d8edf.roa (raw, json)
Hash identifier:          9rUwCIYzYNeSs0x4M9t4qvv+ZNUeMD0r5xcX4T7ql3k=
Subject key identifier:   BA:01:2B:B7:F4:55:8E:33:08:46:B0:F3:8E:7F:A9:1D:6B:62:03:C4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CB17B3529D76308F7B94500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5c36823b-c1a3-3175-86e7-eda5b30d8edf.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33651
IP address blocks:        67.188.208.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b1:7b:35:29:d7:63:08:f7:b9:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=ad23f953-0954-4585-8b90-eb1de41800b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:95:e4:00:c6:b3:25:95:1c:1b:13:a2:db:02:
                    0e:44:64:77:11:96:54:a2:67:5b:97:02:32:97:2c:
                    a0:25:89:53:d9:80:5c:14:f9:ee:83:3c:1d:4c:d3:
                    6a:9b:b0:c7:6b:61:b6:2c:f6:1f:3e:b6:7b:1c:f4:
                    5d:33:4e:11:28:fe:0b:f5:5b:2c:35:88:51:74:2c:
                    88:a6:83:e5:cd:b9:e9:97:87:2a:b8:17:c6:e6:65:
                    74:37:60:e6:f2:cc:9f:0e:fd:d2:b3:1c:de:ea:49:
                    41:bf:40:2c:42:19:d1:92:7d:69:d9:54:3d:b8:d8:
                    9a:69:35:0e:21:c4:ff:b8:bf:7b:fe:40:ea:fc:56:
                    5f:e4:5d:d3:06:c4:7c:59:96:de:f7:27:de:46:46:
                    93:b5:75:dc:9a:36:ae:f2:88:ae:4b:ab:a1:20:36:
                    99:be:ec:f1:ab:5b:0d:a7:89:82:7b:98:53:7e:94:
                    93:b2:e7:5f:11:01:f0:a1:8f:81:49:52:73:50:74:
                    57:5e:73:1d:b7:d8:32:46:03:dc:74:bc:88:8d:f1:
                    b6:03:ee:f5:8a:0e:ae:e9:db:76:6f:96:f4:99:ac:
                    af:b2:b9:7b:fc:fd:4e:b9:d9:b9:5e:7a:44:10:61:
                    44:a1:00:09:18:03:ea:e3:ea:a0:de:2a:6b:63:dd:
                    14:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:01:2B:B7:F4:55:8E:33:08:46:B0:F3:8E:7F:A9:1D:6B:62:03:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5c36823b-c1a3-3175-86e7-eda5b30d8edf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.188.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:c7:d7:61:7a:2c:6b:cf:16:ed:25:8c:e3:21:aa:e6:81:93:
         1f:d8:35:c3:dd:9b:7b:3c:d3:74:db:3a:9d:77:4d:ba:eb:70:
         a8:18:f3:7e:5b:ee:e5:81:02:6a:07:0f:59:15:b3:73:93:c5:
         f6:e9:a1:d4:2f:d4:9f:b0:b1:eb:4f:ed:9b:40:11:74:e4:cd:
         37:81:bc:1b:d7:5b:ca:d7:ca:ee:90:6a:0d:8a:50:a4:f5:1a:
         cb:d5:b0:16:f6:f5:6f:e0:12:88:81:42:d2:55:cc:8b:31:1d:
         35:fb:b4:d5:08:b9:d7:f7:1a:4b:c8:47:76:fa:8a:35:b7:22:
         5a:40:76:92:3f:4d:bf:3c:34:b3:b5:2b:ad:be:7d:9f:39:c8:
         98:a5:9a:2c:b9:03:e2:f5:66:d5:26:a3:71:19:bd:0d:5f:0e:
         f1:c2:d9:3a:4b:75:94:17:fe:99:20:67:c1:7c:4e:a9:fc:e8:
         01:19:69:f4:eb:5d:36:bd:4e:4b:b8:21:3e:d2:ae:e5:1c:ca:
         64:1a:75:b1:05:b6:e0:1c:dc:5a:be:50:04:c9:c4:5c:31:0e:
         d1:21:7c:ae:77:e7:6d:30:12:d2:89:93:85:77:a6:0a:d6:eb:
         ab:75:2c:6b:c1:5d:1f:8f:2e:07:2b:2f:da:da:87:0c:44:b1:
         61:fc:41:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----