Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6c30640f-24ec-3bf9-b1d3-dfe5e3505a03.roa
File:                     6c30640f-24ec-3bf9-b1d3-dfe5e3505a03.roa (raw, json)
Hash identifier:          xr6T/yZ4uTiPNBFWSDtsfDfxKgGp1zXn3j5VExYjQ1M=
Subject key identifier:   63:3E:27:BA:31:7D:88:E7:C6:A2:F9:AC:94:F0:6A:6E:26:A5:35:DC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA5A176F8501F6C93A984E0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6c30640f-24ec-3bf9-b1d3-dfe5e3505a03.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     33659
IP address blocks:        2001:559:753::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a5:a1:76:f8:50:1f:6c:93:a9:84:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=12c65a74-1c1a-47b8-8a99-199a3c6623fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:2b:75:6d:c5:9c:aa:60:42:a3:e0:0d:3a:51:
                    14:9b:a5:fa:c9:55:d3:7f:d6:b7:9f:fe:f1:b6:b4:
                    e1:cf:c4:17:af:2b:a1:db:5e:86:87:a9:d7:ae:47:
                    da:d0:9e:60:e3:d7:00:30:4f:04:d6:7a:db:d6:a8:
                    bc:0d:df:6c:ce:66:6f:d8:10:ff:4b:d9:24:1e:d2:
                    8f:14:0c:c1:64:77:67:eb:46:d5:1a:5e:d7:a0:19:
                    84:ca:d2:31:e8:48:30:c5:5a:59:2b:d1:b7:e6:40:
                    78:19:90:a7:97:05:3f:1c:ae:8b:2c:6b:13:21:f0:
                    f2:3b:12:c1:d5:0c:97:f5:71:be:eb:3f:c8:51:47:
                    5a:78:71:e6:cb:8f:20:40:cf:0a:ca:83:94:da:be:
                    86:af:93:b7:32:2b:5d:27:c5:7d:e0:be:89:09:37:
                    39:e7:43:06:6b:f9:3b:0f:3e:21:f3:06:2d:5c:b0:
                    6e:0a:19:9f:19:08:26:96:9b:ad:14:8e:6d:b4:79:
                    68:1a:8d:12:da:c0:c6:f0:89:f6:e9:50:51:64:95:
                    05:38:48:cd:f8:70:c7:e2:8a:96:a9:aa:9b:ea:a8:
                    ff:94:d8:b9:9e:59:07:6d:7a:ca:e4:31:99:01:5f:
                    02:80:5c:2c:11:98:cf:9b:f8:72:35:ce:96:b1:06:
                    d3:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:3E:27:BA:31:7D:88:E7:C6:A2:F9:AC:94:F0:6A:6E:26:A5:35:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6c30640f-24ec-3bf9-b1d3-dfe5e3505a03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:753::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:63:87:13:dd:80:3d:4f:0c:9e:5d:7c:1c:ee:12:1d:04:e7:
         79:e2:f6:bc:a5:31:19:d0:4e:69:a8:11:ac:1d:ca:3f:23:05:
         f6:6d:a4:97:68:df:09:f7:73:6a:c6:91:e7:0d:ab:7a:54:45:
         72:2a:63:ed:a4:87:db:33:17:5a:44:f3:ab:9c:45:f9:06:de:
         39:06:4d:ac:b7:20:78:65:16:0e:e1:d0:5c:45:45:78:1a:05:
         f8:3d:fa:00:0d:08:93:3d:d4:a5:7e:64:ad:43:5f:2b:8d:77:
         74:87:9b:49:d0:c7:e1:65:3b:d9:4b:b1:b6:a4:e3:1f:02:f4:
         a0:38:97:d5:37:79:6d:4a:23:70:18:a4:48:47:e4:6e:98:23:
         6e:d2:03:17:71:5d:0b:94:b5:c7:9c:e1:6c:5b:b7:4e:ac:27:
         98:89:c4:65:3c:4f:0f:c4:c6:1a:f5:e0:68:c6:74:ca:d3:23:
         5e:ef:b8:cb:92:35:d8:db:07:eb:3e:02:ef:6f:45:2a:95:e4:
         d8:77:99:0c:6d:b2:7f:ce:dd:45:13:af:e8:d3:d2:d4:09:ae:
         67:85:7d:9f:10:f3:f5:be:5e:4c:a6:5a:0f:b6:7f:06:3e:77:
         be:06:e8:e2:ff:1b:1f:4f:5c:70:e4:da:6e:8f:a7:58:a8:d1:
         6d:d7:29:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----