Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/72f10377-b958-3648-82ad-afc4b9061309.roa
File:                     72f10377-b958-3648-82ad-afc4b9061309.roa (raw, json)
Hash identifier:          HR/5CJQBVdtpAVh0x3xBfO5jKJJtUqP3HDG7nl7nx04=
Subject key identifier:   5E:1B:E0:7D:DB:9E:7A:D1:C4:29:CF:0B:40:BF:89:A8:0C:2F:41:F2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CAFBB948D49292B0AC678C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/72f10377-b958-3648-82ad-afc4b9061309.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33491
IP address blocks:        76.16.34.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:af:bb:94:8d:49:29:2b:0a:c6:78:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=f5f577ca-b4ed-4eb7-949c-ed7911f7369f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ad:21:b0:0c:38:bf:5d:a5:d7:75:3e:8e:ee:
                    0b:e5:db:8c:0c:25:47:af:36:49:03:b6:37:8b:45:
                    ed:63:1a:74:97:a3:9b:2e:b4:e5:24:52:d6:c5:b2:
                    05:b0:bf:a2:e8:ae:dd:78:a3:d2:f8:32:0e:d3:d1:
                    e6:6f:0a:a5:18:dd:0c:6c:0d:29:2b:ff:20:17:17:
                    ac:41:aa:f5:da:6b:a0:51:8b:43:82:04:cc:f9:52:
                    f3:c1:dc:84:8e:e0:f7:79:f7:ab:ad:13:85:94:4d:
                    ae:9e:8f:da:88:ad:a9:96:2d:da:ea:f8:df:c7:70:
                    73:aa:d8:d6:e0:9b:10:5d:b7:f4:17:c1:5f:71:96:
                    ba:f3:ea:ba:bd:48:6f:70:1c:eb:6d:32:22:40:41:
                    62:30:73:9e:e0:c4:f7:a9:04:00:0c:6c:09:e4:f5:
                    56:da:d9:d2:e3:7b:c5:1b:82:82:fe:5a:70:32:9c:
                    94:91:92:7f:bd:37:34:f5:d5:1e:99:fa:1d:22:ad:
                    05:96:18:2e:1d:0b:c7:5b:32:34:f0:9e:19:1a:56:
                    f6:15:e7:ba:ba:00:02:d9:fc:09:5d:59:1a:2f:59:
                    d3:90:b7:90:7b:b9:59:9a:6f:ca:4e:c4:4d:56:a3:
                    79:60:30:bf:e2:f1:09:8e:76:7e:3e:06:12:93:f8:
                    78:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:1B:E0:7D:DB:9E:7A:D1:C4:29:CF:0B:40:BF:89:A8:0C:2F:41:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/72f10377-b958-3648-82ad-afc4b9061309.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.16.34.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:2d:a6:8d:d4:ca:36:e5:22:c1:8a:04:42:13:cf:10:ad:9c:
         3f:11:d6:0d:f1:8f:65:95:33:99:74:8c:77:06:f3:b3:ce:50:
         01:b1:79:51:29:85:f4:47:e9:03:d9:ad:c8:70:d6:05:8a:96:
         44:9b:ed:6b:24:4e:d4:d4:c2:dd:e1:72:3b:1d:24:58:14:cc:
         31:f0:3d:de:e7:86:b0:ad:26:4b:91:dc:98:35:19:a5:e4:e2:
         97:a0:64:32:21:1f:6f:d6:98:b5:71:97:31:4b:55:86:a0:d8:
         e6:3f:16:61:3e:e2:cd:00:45:d5:a3:20:c4:5a:20:69:63:36:
         dd:61:fb:c6:9e:9c:f7:3f:18:67:c7:c1:f8:35:7f:57:09:21:
         f4:7b:fe:32:83:84:ae:17:32:b2:f6:fc:22:d2:bc:9f:5f:be:
         75:2d:06:11:7e:ef:6c:7a:6f:58:88:a4:bb:c2:1f:84:45:b2:
         2b:1f:ac:bd:f2:fd:34:81:3c:6d:90:a2:96:cb:70:b9:3e:8c:
         90:66:d3:5d:dc:69:8e:c8:04:af:dc:63:a3:e3:15:23:31:58:
         75:97:a4:0d:35:35:9c:ba:27:24:66:27:3e:ba:29:c2:12:da:
         f2:4f:f1:56:f0:ce:7b:a7:ab:a2:a8:99:1b:f4:82:fd:c9:0d:
         2b:69:14:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----