Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/68cf7af0-b9bf-3a9c-9d08-de5ad03b2954.roa
File:                     68cf7af0-b9bf-3a9c-9d08-de5ad03b2954.roa (raw, json)
Hash identifier:          zEYvPwySXVuCzbu1rQYecTldaTNcn4YytLvdnLcbTeE=
Subject key identifier:   1E:D8:1A:85:2F:58:C8:1B:C1:B3:B7:81:8B:EC:5B:24:C7:A1:AF:2E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CB02C813861075761281500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/68cf7af0-b9bf-3a9c-9d08-de5ad03b2954.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33651
IP address blocks:        98.42.40.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b0:2c:81:38:61:07:57:61:28:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=56113780-9a8b-46c9-b56e-c8563e53d33a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:6d:2f:8f:c1:ab:f4:d7:23:3a:bc:8f:6c:4c:
                    21:27:ad:0f:c7:9d:7b:bb:2f:a6:41:1d:77:d5:2f:
                    9d:4b:97:7a:cd:f7:8c:2e:74:8b:22:0d:89:0e:7f:
                    d0:ed:75:38:22:85:aa:2b:d8:17:d0:56:69:26:ca:
                    a3:a7:6a:b3:09:22:b9:8d:2a:eb:bf:86:1b:e0:54:
                    d7:e1:96:dc:e5:60:55:5b:89:c3:42:29:ca:2a:b3:
                    59:a2:3e:28:5b:60:85:86:45:58:b0:14:f8:d5:2a:
                    20:a4:fa:60:1f:ab:9b:97:2d:1c:cc:48:ee:4b:cd:
                    96:3a:90:b6:c4:d3:af:b5:f2:ee:10:70:a7:a1:1b:
                    b1:a8:e4:4c:c6:35:1e:e3:ce:37:e6:19:35:05:73:
                    f5:c8:e8:72:3a:f5:53:49:f9:12:ac:67:5f:5d:de:
                    b4:21:c2:76:db:3d:68:8a:77:b9:44:68:c3:9c:3e:
                    d3:e6:05:a0:a2:d9:f1:ff:0b:04:c0:75:0f:f3:1a:
                    32:c2:ad:12:40:88:22:49:10:9f:aa:02:ef:da:63:
                    21:ac:e3:0b:e6:56:28:12:b0:b5:cd:5f:ae:7b:f4:
                    cf:ac:d8:39:33:69:7e:b6:ac:b8:a9:b2:fc:64:24:
                    b8:df:d8:bd:6f:82:a7:8c:d0:ad:45:df:07:52:00:
                    b6:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:D8:1A:85:2F:58:C8:1B:C1:B3:B7:81:8B:EC:5B:24:C7:A1:AF:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/68cf7af0-b9bf-3a9c-9d08-de5ad03b2954.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.42.40.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:b6:bd:ca:16:be:01:d2:a9:42:81:5e:10:43:35:1c:12:cc:
         3a:ae:61:e2:f1:6d:8f:85:e0:c3:44:18:8d:66:17:44:38:54:
         26:9c:f2:2b:ae:d8:82:4a:8f:49:d0:e6:8b:4d:f9:cd:14:92:
         68:3b:eb:53:66:bc:cd:6d:39:eb:b6:81:15:98:0b:d2:fe:0a:
         81:05:13:ba:58:ed:8c:f5:10:02:2e:c5:5b:5d:37:4a:c5:f4:
         9f:1b:14:ca:12:4c:3b:8d:a8:d0:00:99:4d:60:02:e2:b5:68:
         94:39:14:b4:46:2f:11:cc:48:5b:d9:d8:09:fa:a8:ad:ee:18:
         be:89:64:23:5f:28:44:38:1b:42:4c:1d:22:ee:a1:df:70:0a:
         f7:49:76:0e:e2:24:92:50:d5:41:a5:e2:e7:02:df:ca:a0:78:
         55:c0:40:71:13:ee:a7:bb:d4:24:cf:58:c9:ad:9a:29:23:e5:
         38:46:d0:7c:c7:c1:6c:84:48:b0:6c:0c:9b:fc:91:e2:8d:49:
         db:ec:b4:e6:d1:29:21:1c:df:74:76:04:96:f0:0f:68:8c:a5:
         f1:e1:f6:ce:08:79:43:1d:83:68:d9:15:15:27:9b:da:2a:9d:
         92:f1:66:2a:28:0e:e3:a5:7a:43:e7:0e:ea:82:2b:82:a4:07:
         30:2f:ee:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----