Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/632e8dac-f3ee-3cd7-a3cf-ee3330ab213c.roa
File:                     632e8dac-f3ee-3cd7-a3cf-ee3330ab213c.roa (raw, json)
Hash identifier:          HJ8z8bCjCm8CMsyjUZXXpwa72BMhaMX0Hwpcy0k4+4k=
Subject key identifier:   41:F5:8D:91:C0:3B:8D:0E:4A:4F:42:35:47:96:A6:1A:D7:47:FD:A4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F952EE76439EA9A920EF00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/632e8dac-f3ee-3cd7-a3cf-ee3330ab213c.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     33662
IP address blocks:        76.31.32.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f9:52:ee:76:43:9e:a9:a9:20:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=fe0c9ea0-68d7-4488-b75b-8f8a2c82ec34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:40:3c:d5:96:04:07:68:b4:0c:9a:98:d8:c4:
                    26:d0:0e:2c:42:b7:b0:fa:f5:2c:ce:a0:d0:b9:98:
                    e5:1e:3a:3a:6c:5e:f1:28:32:cb:83:c1:45:f7:07:
                    93:41:c1:ed:67:75:94:a4:8d:6e:c3:a5:90:f2:25:
                    0d:94:93:03:d5:d6:00:2b:e3:15:89:13:68:73:e0:
                    2a:1a:70:e3:8d:67:39:a6:9b:fb:e6:15:e7:c4:bf:
                    80:65:83:72:df:74:9a:b0:58:f5:91:ff:89:87:5c:
                    1f:a6:2b:3b:a0:73:13:76:3d:3f:71:e0:76:08:de:
                    2d:16:b3:da:46:02:d7:21:86:0c:49:71:02:4d:49:
                    5a:e8:b5:d0:11:b1:22:f8:dc:49:5e:8e:d3:ec:bc:
                    48:ca:0f:f8:72:45:2f:32:53:53:fa:e0:bf:a2:ea:
                    55:13:0f:9b:f2:25:20:73:92:df:63:a9:08:0a:84:
                    9e:99:3e:8f:b1:eb:5c:31:9d:88:4e:99:00:1a:e8:
                    a6:1c:fb:0b:0a:fe:35:0f:86:13:9f:bd:0c:ac:03:
                    75:80:3a:01:4e:ef:84:3d:3c:6d:55:0d:6d:a3:ed:
                    83:0d:1a:04:75:9f:69:d4:19:43:a8:0c:83:20:d7:
                    73:bc:1b:c8:83:40:56:d3:e3:fd:6a:e3:50:61:f7:
                    10:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:F5:8D:91:C0:3B:8D:0E:4A:4F:42:35:47:96:A6:1A:D7:47:FD:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/632e8dac-f3ee-3cd7-a3cf-ee3330ab213c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.31.32.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:c2:78:dd:02:f3:5c:40:c9:70:5e:f6:8b:ce:76:3f:31:d9:
         d6:e5:22:b5:30:fb:15:7a:5a:2a:09:66:e4:b8:79:5d:30:4b:
         4b:c6:55:dd:e4:c4:5b:1a:a1:b2:c9:ce:08:a2:94:cf:13:81:
         f4:b2:4c:65:0d:da:30:db:32:8a:e9:c9:32:04:d9:5c:ad:c0:
         e4:c7:73:da:1b:ce:73:6f:a3:3c:8d:8f:c4:ed:9c:48:83:82:
         a6:d4:6e:77:12:27:5a:77:5c:a1:b1:8a:a9:f5:da:bd:ec:dd:
         84:6e:dd:3b:28:20:66:04:68:85:a6:f9:5c:1e:f3:76:ed:cc:
         ef:6b:96:83:ef:52:c2:f3:24:65:2a:b8:6d:8d:86:02:f4:fb:
         d0:78:ad:c5:dd:b5:32:0c:51:1f:88:0b:9a:99:1c:48:a3:5c:
         ec:9f:33:43:d1:b4:e1:7f:ad:58:66:cb:41:dc:15:0f:63:57:
         49:4d:1c:5e:25:26:9f:34:c9:5e:dc:11:b6:20:f0:e7:d9:52:
         1f:31:68:03:46:63:48:2d:93:f9:6b:ce:ef:e7:1b:6d:65:e2:
         75:f3:3f:b9:d8:7b:01:e6:f3:b7:af:c3:75:2e:51:dd:aa:cd:
         df:4d:84:a7:da:5d:64:86:e7:40:af:83:a4:fe:02:9c:27:0b:
         2e:46:ab:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----