Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/64da350a-f728-3ff9-9de8-5c72a8c80eb8.roa
File:                     64da350a-f728-3ff9-9de8-5c72a8c80eb8.roa (raw, json)
Hash identifier:          nBufEXwINY2hSGEY6gpHsSxJANzPkUgppTUxv+qg1wE=
Subject key identifier:   3C:4C:13:32:CF:58:FD:12:E6:86:32:A5:FE:88:2D:DD:0D:D1:47:34
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F79164535930DBD6594650
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/64da350a-f728-3ff9-9de8-5c72a8c80eb8.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     33668
IP address blocks:        68.48.134.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f7:91:64:53:59:30:db:d6:59:46:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=ebbdc8a8-f071-4a83-9d51-ac774f81b146
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:46:36:40:21:81:eb:6b:09:5f:a9:73:76:97:
                    b8:cc:ad:55:7f:21:0c:c3:c5:03:f0:66:f9:e4:b8:
                    63:e1:13:f9:84:ca:6d:ba:e2:73:d7:19:24:bb:d7:
                    5f:2c:5b:58:a9:a3:bb:b3:a1:30:54:f4:5c:19:1e:
                    01:03:74:78:5c:ce:a0:d9:e6:d7:13:b3:07:9b:44:
                    0f:4d:54:a4:ff:1f:ee:ef:4f:37:1d:84:1f:10:01:
                    e2:fc:c3:2b:6c:64:93:fe:eb:08:98:dd:6a:3c:b4:
                    fa:a8:5a:9e:bd:80:a9:65:37:71:bd:e9:83:85:e5:
                    63:1d:ee:65:95:ed:2e:8b:29:18:ef:8a:8f:94:3b:
                    1a:45:ae:96:a8:52:4f:82:1b:e8:83:2c:08:83:3c:
                    6b:4f:3d:f2:e8:24:69:04:d7:c1:da:2d:a2:8d:80:
                    0f:04:16:df:c5:51:6f:75:48:55:14:b8:5f:9f:fd:
                    48:22:3e:01:18:c7:c5:de:40:2c:d2:a6:a7:e9:42:
                    9f:11:f7:a2:f5:e5:29:e5:c1:aa:32:b9:b2:4c:ab:
                    79:5f:dc:b3:7c:56:54:9c:d1:38:aa:5f:9f:40:51:
                    2e:6b:3d:da:a2:5c:f9:ea:75:ac:0b:ac:9e:8b:49:
                    10:24:af:7f:4d:eb:e7:3b:9e:da:8b:0b:36:e1:2d:
                    b3:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:4C:13:32:CF:58:FD:12:E6:86:32:A5:FE:88:2D:DD:0D:D1:47:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/64da350a-f728-3ff9-9de8-5c72a8c80eb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.48.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:91:82:e0:4a:22:28:5f:5e:76:b7:b3:cb:91:a1:35:91:bf:
         75:8b:a3:26:46:25:37:f4:01:e6:f4:55:17:c4:38:7f:2f:e1:
         bf:6d:2f:7d:ed:99:2a:f9:c8:9e:c5:75:a8:77:0f:86:77:33:
         e6:11:b6:47:a1:29:69:79:71:2b:57:2f:29:d2:fc:be:c0:ea:
         45:b5:84:06:16:c9:1e:2f:41:36:a3:06:14:35:0e:66:94:57:
         23:d9:4c:be:c3:a1:47:1c:a7:83:19:d3:e0:80:eb:29:61:c6:
         e6:cd:20:9f:57:c4:93:65:91:88:fa:f9:d5:dd:2b:db:a8:b1:
         d5:21:5d:5b:fc:dd:e2:7f:aa:ff:fe:f1:40:9e:9a:aa:68:a0:
         e6:92:22:e2:ee:4f:ff:34:23:29:17:cf:45:27:8f:9a:e8:ea:
         73:5b:d0:a9:b9:ab:59:a0:fe:c3:60:fe:cb:c4:a4:2a:e3:39:
         87:a0:6f:2f:f2:bf:ae:f4:1e:c4:33:7c:c3:04:53:11:14:a2:
         e4:2c:70:9a:04:b0:58:ea:e3:ca:9e:19:ab:f8:d4:8b:2a:90:
         6f:14:78:1b:80:a6:64:30:c7:18:19:bb:73:0c:5d:f7:6c:82:
         a7:66:41:88:7a:3d:f8:c2:eb:fb:8e:b8:1c:da:b4:de:eb:fb:
         41:51:63:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----