Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/618761e8-0402-3bfc-9388-cb0607631bd5.roa
File:                     618761e8-0402-3bfc-9388-cb0607631bd5.roa (raw, json)
Hash identifier:          4pYYjez23WM+ODAYHBNKMkcL2VOu/IbM/isPWs9JUaY=
Subject key identifier:   17:83:B2:7E:29:AC:25:3D:DF:76:A1:30:C9:06:30:99:06:51:1B:AF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848B26767E5AE7A7D657F13F280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/618761e8-0402-3bfc-9388-cb0607631bd5.roa
Signing time:             Tue 28 Jan 2025 17:49:07 +0000
ROA not before:           Tue 28 Jan 2025 17:49:07 +0000
ROA not after:            Mon 28 Apr 2025 16:49:07 +0000
asID:                     33651
IP address blocks:        67.180.64.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b2:67:67:e5:ae:7a:7d:65:7f:13:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 28 17:49:07 2025 GMT
            Not After : Apr 28 16:49:07 2025 GMT
        Subject: CN=99cbe5c3-aff9-4e8d-a828-8c0cb407e279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:5a:64:1b:43:3f:1b:67:49:96:7e:3c:b7:42:
                    97:44:dd:26:cd:f2:9d:eb:a4:19:0e:03:5a:79:a0:
                    cc:31:ad:84:ad:62:06:78:c2:8c:56:0c:c9:66:7c:
                    63:5f:47:72:d2:44:45:e6:ae:58:9d:ca:af:d5:c3:
                    be:9b:ac:58:a1:4d:40:d6:18:65:1c:37:32:64:f6:
                    7a:79:3d:06:11:4e:b6:91:65:c9:4c:50:b7:bc:1b:
                    8d:cb:8d:31:29:89:cb:af:26:76:c0:d0:bf:51:1a:
                    cd:34:40:eb:0f:b7:98:3b:98:d9:86:e7:17:ff:65:
                    13:b8:dd:24:0d:5b:db:18:39:17:48:7d:51:26:bd:
                    2c:6f:61:24:4e:58:85:5e:56:1c:89:c9:8f:fa:40:
                    0c:a9:99:b1:09:2d:23:2a:6a:3a:cb:8c:03:d8:3f:
                    e9:55:2a:ec:c8:0b:0e:f5:9f:13:8e:47:1a:b0:65:
                    a0:55:04:51:f2:f0:39:12:be:8b:43:90:fe:f1:cf:
                    2b:dd:ba:30:13:cd:a3:88:4b:b7:ae:2f:ca:cd:70:
                    88:4f:08:d6:ef:fb:ee:63:e3:e6:4b:b5:ff:21:a0:
                    0d:5a:83:6f:5f:a1:5d:ea:61:d2:98:7f:4a:eb:b1:
                    6d:d3:dc:67:33:a2:66:c0:bf:ec:d9:45:4d:ce:8b:
                    d5:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:83:B2:7E:29:AC:25:3D:DF:76:A1:30:C9:06:30:99:06:51:1B:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/618761e8-0402-3bfc-9388-cb0607631bd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.180.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:57:49:88:03:40:89:a9:0e:fb:3a:3b:d4:dd:a2:8f:f4:53:
         1e:9c:57:2c:14:65:d0:35:36:b3:2b:6d:8f:8a:6e:79:c8:20:
         a3:21:14:f3:24:ad:b6:9d:fa:34:53:41:7d:99:ce:04:dc:7b:
         3f:69:ec:aa:46:87:12:2b:71:6e:93:35:2f:22:f5:e0:c4:5c:
         93:18:05:39:8a:bd:0e:7d:5f:84:cf:ca:eb:a0:de:19:57:83:
         b7:b3:a8:09:c7:b8:81:c6:76:65:62:ab:41:af:b1:58:16:fc:
         2b:14:bd:d0:61:48:68:07:dc:b3:df:9a:86:a7:e9:a5:e2:60:
         c0:6c:5e:bf:0d:a5:07:7b:a9:fc:38:26:a7:90:f6:59:28:61:
         f5:7f:1e:98:7b:4b:40:11:3d:9e:62:1a:3b:f0:8a:7a:cb:7f:
         1d:05:a9:fb:4b:24:55:f4:99:46:a2:93:14:c7:44:07:0c:c6:
         fc:37:40:63:bd:4f:04:fc:50:df:34:ee:67:c6:9c:e2:11:24:
         73:15:aa:58:89:4e:b4:ce:ee:20:ed:58:9f:26:ac:4c:15:b4:
         9b:21:f9:bc:43:f0:36:29:47:85:56:cc:66:0e:b1:44:dd:5d:
         cf:97:51:c5:60:c7:d2:94:6d:36:d9:06:9f:9a:a6:10:fd:2b:
         f9:64:36:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----