Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/76991a7f-1c3e-376d-b9d0-0bc627160402.roa
File:                     76991a7f-1c3e-376d-b9d0-0bc627160402.roa (raw, json)
Hash identifier:          T0nSiXL0lisivtc16j38FWtbg2cdHSxu5YvmzAWGIeE=
Subject key identifier:   82:A9:A0:D5:A4:38:5F:68:71:14:6C:39:3C:91:6E:75:EC:23:36:29
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA5B291048E51E5E66B2380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/76991a7f-1c3e-376d-b9d0-0bc627160402.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     53410
IP address blocks:        50.229.95.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a5:b2:91:04:8e:51:e5:e6:6b:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=4037ec95-b036-4183-b235-db1616b0f039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:36:4a:ed:26:42:95:54:f7:25:4a:14:af:74:
                    39:59:33:31:ee:52:90:9c:c6:50:5e:10:ee:18:9e:
                    1a:e1:17:a4:f9:0f:6e:ff:67:fc:ba:40:45:ef:c8:
                    b6:a0:8f:20:cb:31:2b:b8:af:15:5c:42:f5:91:91:
                    08:c1:4c:35:da:8c:25:5f:1f:b1:f2:78:b9:28:2e:
                    56:c5:55:8d:d7:18:6e:0c:6f:41:da:04:73:da:7d:
                    05:20:d5:2c:8e:1f:5d:da:25:c5:47:46:41:9e:77:
                    55:8d:26:3d:ce:88:34:70:19:4b:3e:81:31:e3:ab:
                    78:0f:25:67:9d:02:0b:11:2d:68:f0:e6:d9:9d:a7:
                    a5:01:bb:8d:ed:ae:0f:8b:26:27:a7:d0:85:7f:55:
                    ed:c1:df:69:3f:bb:61:ed:84:91:91:46:6b:a9:bc:
                    e1:ac:95:9b:b9:05:b4:b7:fe:7f:c3:4f:3a:a7:1e:
                    88:26:0b:a3:db:59:17:bb:b1:10:ca:fd:55:75:dd:
                    a7:02:e6:4f:2c:e6:12:a0:d6:90:78:9b:30:09:0e:
                    21:fb:05:47:26:41:97:0b:90:6a:ea:5a:53:83:44:
                    26:3b:62:73:15:4d:8d:d1:5f:a4:5b:53:b5:08:31:
                    c2:df:92:d9:d8:8f:e3:82:15:2e:1e:f1:e8:24:3d:
                    58:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:A9:A0:D5:A4:38:5F:68:71:14:6C:39:3C:91:6E:75:EC:23:36:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/76991a7f-1c3e-376d-b9d0-0bc627160402.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.229.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:88:f5:d1:4f:00:b7:d2:46:55:28:57:29:ce:86:48:2f:95:
         63:d7:08:ae:8f:ae:8a:68:d7:34:8c:7a:16:2b:73:0c:8f:60:
         02:b2:76:52:7a:9f:4d:8c:f6:a6:db:c8:5f:5e:7e:0c:42:f4:
         9e:65:c0:09:f4:98:34:32:d2:6c:b5:4d:2d:77:a3:d6:07:97:
         4f:6f:56:85:46:13:4c:57:89:62:cd:4b:3f:69:c7:31:29:90:
         bc:d3:49:6d:9a:06:12:dc:5e:89:11:35:48:71:76:a4:89:b6:
         23:ff:ef:4d:45:0d:f0:a4:1d:fc:49:5d:b7:85:91:0e:81:a3:
         73:70:03:98:3b:44:09:27:81:a5:44:a5:ee:01:24:41:37:6e:
         ad:24:71:58:fc:eb:6c:2b:e3:ef:4e:6c:34:fa:4a:ba:0e:c4:
         4e:3e:24:7a:9c:2d:6a:38:88:2e:4e:3d:d0:4d:ee:33:4a:2f:
         0f:a3:f1:77:ae:47:77:f9:9b:c4:7e:fd:89:86:37:ee:70:4b:
         a0:5c:59:24:94:7d:a9:95:ab:8c:3d:54:d2:85:1c:4c:34:07:
         12:dc:a6:bf:dd:46:39:cc:5c:ee:62:3d:7f:6c:79:a0:df:22:
         6e:2b:33:89:6f:67:c9:5f:b4:7c:c5:68:00:3c:78:1d:0c:11:
         37:84:85:54
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9pbKRBI5R5eZrI4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk
NDAzN2VjOTUtYjAzNi00MTgzLWIyMzUtZGIxNjE2YjBmMDM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTZK7SZClVT3JUoUr3Q5WTMx7lKQnMZQXhDu
GJ4a4Rek+Q9u/2f8ukBF78i2oI8gyzEruK8VXEL1kZEIwUw12owlXx+x8ni5KC5W
xVWN1xhuDG9B2gRz2n0FINUsjh9d2iXFR0ZBnndVjSY9zog0cBlLPoEx46t4DyVn
nQILES1o8ObZnaelAbuN7a4PiyYnp9CFf1Xtwd9pP7th7YSRkUZrqbzhrJWbuQW0
t/5/w086px6IJguj21kXu7EQyv1Vdd2nAuZPLOYSoNaQeJswCQ4h+wVHJkGXC5Bq
6lpTg0QmO2JzFU2N0V+kW1O1CDHC35LZ2I/jghUuHvHoJD1YrQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIKpoNWkOF9ocRRsOTyRbnXsIzYpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzY5OTFhN2YtMWMzZS0z
NzZkLWI5ZDAtMGJjNjI3MTYwNDAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMuVfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF+I9dFPALfSRlUoVynOhkgvlWPXCK6Propo1zSMehYrcwyPYAKydlJ6
n02M9qbbyF9efgxC9J5lwAn0mDQy0my1TS13o9YHl09vVoVGE0xXiWLNSz9pxzEp
kLzTSW2aBhLcXokRNUhxdqSJtiP/701FDfCkHfxJXbeFkQ6Bo3NwA5g7RAkngaVE
pe4BJEE3bq0kcVj862wr4+9ObDT6SroOxE4+JHqcLWo4iC5OPdBN7jNKLw+j8Xeu
R3f5m8R+/YmGN+5wS6BcWSSUfamVq4w9VNKFHEw0BxLcpr/dRjnMXO5iPX9seaDf
Im4rM4lvZ8lftHzFaAA8eB0METeEhVQ=
-----END CERTIFICATE-----