Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6150e97a-e464-3061-b154-e192fa0bd19f.roa
File:                     6150e97a-e464-3061-b154-e192fa0bd19f.roa (raw, json)
Hash identifier:          lJUbYHfN/ESMXpUgsfstcrwe22cB0m7sJ+3RHqJYIXs=
Subject key identifier:   0E:8D:50:64:73:B9:68:B1:D2:E5:5D:5C:F0:27:B1:28:AA:FD:18:D3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA5F7DF651966AAF54D8F04
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6150e97a-e464-3061-b154-e192fa0bd19f.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     33661
IP address blocks:        50.227.97.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a5:f7:df:65:19:66:aa:f5:4d:8f:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=49597257-fe6f-4940-a629-ed6811fa932d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:23:e0:58:70:e0:e3:6c:f6:d9:d5:86:3b:1d:
                    88:83:65:b2:ca:f0:4c:1d:72:24:d1:fb:0b:ad:7a:
                    f4:3b:c5:74:76:75:09:9b:18:f6:52:d9:cf:84:2e:
                    9e:50:ff:3a:d7:27:75:c7:84:a7:df:e3:f6:95:d4:
                    6a:f4:7d:fa:29:41:9b:53:5e:35:e1:3f:4d:d0:2a:
                    c7:de:32:47:fe:3c:ae:bc:20:6e:93:0b:7b:d0:34:
                    9e:3e:42:c2:6d:76:6f:b7:8e:22:4d:7d:5a:2e:dd:
                    a9:c2:c9:11:07:e4:c2:9e:da:8d:89:1a:09:b9:39:
                    63:5f:59:c6:1c:c3:3e:3f:75:d7:a8:61:da:e1:d2:
                    ab:d9:7c:4b:e3:c2:68:e6:3e:3d:1c:cd:d4:f5:f1:
                    6f:69:7f:d0:56:01:80:d9:a7:4b:1c:5f:d0:31:7a:
                    cd:c8:b9:78:f6:e9:b6:d4:b5:e8:3e:09:29:e5:0a:
                    bd:ac:4c:1c:91:ac:26:54:ac:c5:78:06:97:97:1c:
                    99:80:5b:00:42:f9:aa:28:8b:66:b4:dc:aa:d8:bf:
                    d8:74:b5:45:d4:6a:ab:84:42:e9:05:8d:2f:c2:3e:
                    37:62:44:f8:2f:c8:4d:b0:f1:18:5b:66:17:bd:76:
                    40:e0:29:98:0b:8c:59:d8:31:36:6a:c5:46:0f:1c:
                    2b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:8D:50:64:73:B9:68:B1:D2:E5:5D:5C:F0:27:B1:28:AA:FD:18:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6150e97a-e464-3061-b154-e192fa0bd19f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.227.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:b8:77:26:6d:af:e5:03:7c:3d:a3:e5:8f:36:77:f8:1b:c7:
         f3:58:b4:4d:15:19:29:1e:44:6a:69:f2:58:8a:da:fb:9f:43:
         9c:f2:d5:04:91:1f:a4:df:7a:6a:ee:c4:8f:38:16:5f:f8:b1:
         e1:7b:c1:96:f4:38:d6:e1:f0:b1:0b:9d:f7:42:4e:49:a6:ca:
         10:1d:1a:dd:86:20:e3:03:52:e0:11:0d:52:38:41:c4:d7:04:
         ce:7e:22:1d:ff:97:b3:16:6e:cc:1f:98:6a:ca:0d:92:36:36:
         4d:99:7b:9d:9d:b9:5a:74:3f:e3:ed:fa:66:ce:d3:c3:b4:4b:
         a8:ac:fe:72:99:ea:5a:4a:31:6d:77:8a:3f:16:49:ff:96:bf:
         17:3d:70:49:f7:bf:be:0f:98:42:bd:d9:9e:5c:79:2d:a7:50:
         54:eb:35:1d:d1:03:9b:ef:a1:69:67:1f:9e:1c:fb:be:d2:b1:
         22:10:e6:0f:16:40:be:86:46:d9:e4:5a:a7:c8:c6:62:26:26:
         02:ed:95:b1:96:09:21:d4:89:29:0c:36:fc:a3:f8:25:14:07:
         16:c8:5e:7e:22:94:c2:20:e3:d1:64:d6:55:72:33:c8:55:25:
         4b:8d:76:4c:e2:1c:63:1d:73:a7:16:7d:32:b4:17:3b:fa:c7:
         40:1f:19:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----