Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6e222209-9fbb-3a97-8ca4-962018e9d135.roa
File:                     6e222209-9fbb-3a97-8ca4-962018e9d135.roa (raw, json)
Hash identifier:          yGLGaJWrWXYqqgFG0Tcn+1NGwnbHB37GyYr6jCpWdPY=
Subject key identifier:   2A:C7:3A:F7:17:96:C3:BB:6D:7E:25:4C:2A:7F:3A:60:84:4C:90:82
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848B261847886BD9EA02FD4ED80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6e222209-9fbb-3a97-8ca4-962018e9d135.roa
Signing time:             Tue 28 Jan 2025 17:37:16 +0000
ROA not before:           Tue 28 Jan 2025 17:37:16 +0000
ROA not after:            Mon 28 Apr 2025 16:37:16 +0000
asID:                     33491
IP address blocks:        71.201.26.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b2:61:84:78:86:bd:9e:a0:2f:d4:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 28 17:37:16 2025 GMT
            Not After : Apr 28 16:37:16 2025 GMT
        Subject: CN=20b7649b-2059-4015-9b42-2a562a5845ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:87:43:e5:95:b6:e9:5c:4b:0d:63:b2:aa:4e:
                    e9:82:1b:8c:f8:8e:28:ee:97:42:91:77:2c:9f:cc:
                    ab:b5:b3:b6:a3:9e:a8:51:7b:b7:01:16:a9:2c:90:
                    32:7d:b0:69:d4:88:ef:81:67:28:38:d2:28:c8:2f:
                    fb:9c:d8:16:03:81:45:86:44:02:cb:ef:de:00:d7:
                    40:6c:f8:a9:6f:e9:95:3f:c5:8a:c2:df:c0:32:c2:
                    df:2f:50:84:b6:39:59:af:2c:04:ab:e3:15:10:0f:
                    81:01:e8:5c:7d:c3:de:39:d0:9d:e2:d8:0b:f1:b0:
                    4e:9e:c9:08:fb:74:dc:09:c6:eb:88:53:d7:17:76:
                    e1:86:69:91:da:b5:be:71:66:94:69:5a:cf:04:98:
                    e3:34:43:05:d1:26:68:d3:92:4d:b3:28:d5:6e:49:
                    ce:77:5b:5a:6f:81:57:14:43:b3:68:dd:c9:01:b5:
                    43:0f:b3:9d:72:38:05:0d:6b:c4:f7:c7:f9:8b:2c:
                    55:06:2d:5d:82:17:7b:13:04:bb:cb:d9:11:ac:5c:
                    7f:b5:84:f5:6d:b0:7b:ee:70:2f:dd:57:b0:f2:2f:
                    0e:a9:a1:75:9b:5a:e9:db:94:cf:38:ef:0a:be:84:
                    1f:e4:6d:f0:59:be:15:07:c0:c9:51:1f:90:5a:b1:
                    55:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:C7:3A:F7:17:96:C3:BB:6D:7E:25:4C:2A:7F:3A:60:84:4C:90:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6e222209-9fbb-3a97-8ca4-962018e9d135.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.201.26.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:d9:8a:37:cf:6d:d9:78:92:97:53:a8:40:0d:67:ef:ba:f4:
         cf:07:85:2d:03:87:de:e0:89:15:92:26:96:e9:7f:4c:84:73:
         d8:9a:4e:c4:c0:46:b1:4f:bd:89:d1:4b:85:ff:5e:48:52:8c:
         2f:ca:23:5e:cd:51:03:c4:fa:81:9a:05:51:66:05:ab:49:34:
         dd:db:16:f8:57:7a:f2:76:20:47:c3:ee:7f:c8:08:7d:91:98:
         72:cb:50:c1:7c:d0:4c:f2:24:29:e4:c3:0d:70:7f:03:16:36:
         60:03:51:b0:b1:43:62:ab:8b:17:c2:92:ff:32:b9:93:e0:38:
         be:82:ba:6a:0b:a4:b8:bc:fb:5e:0c:9f:c2:1a:28:46:f6:84:
         fe:a3:d4:6d:2f:fe:88:6e:8f:b9:bc:9e:00:48:22:9a:e5:ff:
         25:c6:50:74:34:ff:fb:e6:cf:d8:eb:54:e0:c0:46:73:c3:cd:
         e8:73:b1:a6:33:12:23:ba:17:e5:80:47:28:8f:7d:c5:d8:68:
         b8:2b:61:80:02:50:9b:98:17:61:c3:5f:e6:87:7d:58:28:cf:
         29:28:01:1f:8f:b0:9d:b8:04:ab:03:a3:b2:b0:7f:b4:cf:6d:
         21:ae:87:52:ad:36:fe:cf:1b:4b:3d:c7:54:cf:b3:91:3a:dc:
         fd:2c:18:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----