Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6bce5e60-41bc-3beb-9d17-28033c462e29.roa
File:                     6bce5e60-41bc-3beb-9d17-28033c462e29.roa (raw, json)
Hash identifier:          5GHlcBvE1kb+++XtZuae16Cr0IC4o6vfBO6bGqPXSbY=
Subject key identifier:   D1:70:54:E6:C5:E4:5E:EF:25:AB:8D:7C:08:72:1A:AE:B6:A4:19:0C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA68999BB277167B5DB74C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6bce5e60-41bc-3beb-9d17-28033c462e29.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     13367
IP address blocks:        75.72.228.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a6:89:99:bb:27:71:67:b5:db:74:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=9ab51fb7-5513-4b59-9dfd-8040667e3404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:fc:19:a8:70:e6:54:e3:54:44:3e:1f:84:8b:
                    e2:79:fa:39:c2:5c:33:ad:7c:12:c5:bb:33:51:1a:
                    ee:12:a7:2a:46:0a:ae:67:aa:1b:db:fe:09:ba:4a:
                    3a:9b:92:54:68:8c:f1:ee:d1:b5:b6:22:f0:f3:28:
                    58:cc:8b:43:c8:37:72:b5:6c:54:de:96:06:6f:69:
                    fd:e3:e6:07:ed:f9:cb:4e:8a:8a:f4:f3:8c:15:c3:
                    cd:00:17:29:24:59:e1:4c:4d:f5:97:53:d9:58:46:
                    5d:6f:d0:93:26:08:30:20:79:f1:81:05:82:e8:b9:
                    33:aa:e1:1d:0f:3e:17:ef:af:fb:4a:6a:55:4d:53:
                    7e:b7:12:b9:c3:db:9f:98:21:49:2c:a1:0e:dc:81:
                    16:84:58:a8:75:60:68:9b:c5:e3:81:bf:0c:c8:29:
                    89:d8:4f:2a:fc:3a:3a:6d:a6:1d:dd:0a:5a:a8:4b:
                    71:53:1b:64:b7:0b:60:01:1d:29:ae:ec:1e:74:11:
                    6e:b1:a6:e7:ee:cd:1b:e0:29:dc:87:9c:c2:80:2d:
                    cf:d7:a5:78:67:0d:e9:b4:9a:47:18:b0:9d:0e:c8:
                    9c:b5:20:94:cc:49:8e:62:c1:3e:90:11:07:5d:6b:
                    ac:8d:43:9a:f1:1b:7e:d0:23:5d:82:e8:53:95:7a:
                    a6:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:70:54:E6:C5:E4:5E:EF:25:AB:8D:7C:08:72:1A:AE:B6:A4:19:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6bce5e60-41bc-3beb-9d17-28033c462e29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.72.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:1d:ac:45:a6:25:51:42:e0:1b:9d:76:8a:a0:24:a7:09:48:
         58:7e:3e:b4:5c:10:59:6a:16:c5:58:e9:95:18:c3:b4:bd:41:
         7f:de:44:2c:7c:2a:fc:d9:71:11:5c:9d:81:a9:6d:96:81:31:
         e1:b0:5c:32:ec:ee:bd:a3:12:b0:59:c3:5d:b8:4e:f9:f3:6a:
         af:58:09:ad:48:17:df:e8:14:0b:37:44:92:fd:15:14:e6:f4:
         95:82:57:83:4b:2e:64:cf:d1:4a:b6:4a:2f:d8:79:5e:b7:50:
         1a:ca:7f:05:a1:1d:0c:40:da:d6:f9:7b:89:6e:96:b7:2a:a5:
         32:94:9a:87:13:82:02:16:74:07:f2:2d:22:5a:71:0c:b8:2f:
         d4:4a:5a:25:c4:22:e5:55:16:e3:30:d4:8b:73:c7:2d:da:f8:
         30:b3:2c:27:ad:df:d5:22:6f:a7:40:c9:08:e6:24:02:ce:51:
         ea:35:12:d8:41:8e:eb:2c:e6:ae:83:00:cd:a3:92:ee:fe:e8:
         5b:8b:c0:64:7c:8f:62:34:ef:11:dc:0d:8d:45:6e:0d:a7:e2:
         9b:80:2f:b8:e3:91:3b:1a:6c:c5:10:1f:ca:78:ab:be:7e:20:
         60:70:15:fb:1a:20:33:4d:59:d2:f9:52:46:95:e6:c3:14:e2:
         23:76:73:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----