Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/77643593-69e3-3716-9228-a7d9223972ef.roa
File:                     77643593-69e3-3716-9228-a7d9223972ef.roa (raw, json)
Hash identifier:          g/GqHoFoCUFja/QK8hh+WjhrB10/tIOaIRspJ219MHM=
Subject key identifier:   FA:35:B3:27:0C:70:E8:EB:54:6C:AC:B0:D3:4D:1D:BF:E1:8A:E3:C8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA62FFB73031B065F5A4A68
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/77643593-69e3-3716-9228-a7d9223972ef.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     33651
IP address blocks:        98.35.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a6:2f:fb:73:03:1b:06:5f:5a:4a:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=f7ab3a57-9c77-42b1-9069-7438349af335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:7c:64:df:04:78:cd:88:95:9a:80:5a:55:6a:
                    7a:da:7f:14:51:c9:cd:e8:d2:e5:c8:4b:7a:23:42:
                    3c:a0:ad:c3:1d:a4:7a:23:1e:af:3c:7b:59:8a:71:
                    d3:82:b1:69:37:2b:04:30:40:f1:f5:8d:09:17:e8:
                    12:81:89:23:39:68:6c:70:7f:02:51:37:56:5f:87:
                    a6:b3:67:bf:b6:eb:5d:2e:db:9e:e1:c1:53:41:68:
                    37:0d:f1:fe:1e:5f:59:9b:4b:74:2d:98:c1:50:4f:
                    a8:20:bc:c4:78:e6:74:e2:78:1c:3e:10:38:35:eb:
                    d2:19:a5:d8:fb:22:a7:74:91:7e:d9:96:19:a8:a6:
                    d5:1e:73:15:59:d3:57:af:48:d3:57:8f:9c:34:07:
                    30:00:8e:1d:d6:81:f3:6c:16:ea:3e:06:9d:0e:93:
                    50:e1:89:52:ae:55:35:97:fc:02:a2:61:71:df:4b:
                    f7:46:92:cc:55:a6:53:49:08:c8:ba:e0:fe:38:d8:
                    e7:11:e3:3b:e1:64:f9:f6:7f:18:47:8f:c6:0b:86:
                    fd:33:80:f7:76:d1:0c:69:2d:6c:6d:93:91:f9:cb:
                    46:35:64:51:8c:05:9f:af:59:a3:f1:a4:13:ff:9c:
                    d9:50:b9:0b:d7:69:b6:53:4a:44:6f:f3:d0:67:5e:
                    14:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:35:B3:27:0C:70:E8:EB:54:6C:AC:B0:D3:4D:1D:BF:E1:8A:E3:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/77643593-69e3-3716-9228-a7d9223972ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.35.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:26:84:f1:2e:f9:63:06:3b:11:c1:19:b4:7b:f2:34:ac:be:
         61:c4:e6:81:5a:d5:5b:29:09:61:73:6a:d5:9c:6e:e0:6a:ba:
         bc:4d:4d:95:13:78:d6:13:8e:f7:e5:d4:eb:94:00:b4:57:be:
         b1:bf:86:d9:4f:bb:3d:d7:72:f8:09:9e:24:da:03:74:e9:fb:
         b5:34:17:bd:cc:07:f3:5f:48:60:c5:82:1e:62:d3:05:c5:76:
         67:2c:57:a9:99:38:a9:e7:2f:bc:d6:1c:52:43:eb:27:24:fc:
         e5:de:a5:a1:c7:5d:b9:bc:16:dc:18:6b:04:cb:c2:ff:5d:31:
         e4:81:c8:3f:5f:63:af:d5:a2:d0:90:99:91:7f:0e:31:f2:b1:
         ac:6c:ff:72:f7:21:7a:c5:d0:a5:10:fc:06:1e:4c:2d:f2:f8:
         5f:62:dc:fd:95:84:75:87:e1:2d:83:99:de:2c:57:57:f0:bb:
         2f:5d:aa:91:c8:f5:c7:41:36:e9:ac:e2:db:49:c8:d1:d9:47:
         75:f8:e1:e7:27:7e:2e:1c:52:69:d9:60:48:85:44:70:94:17:
         dd:88:87:86:c3:55:a5:d2:66:4a:27:bd:64:34:c6:4b:66:7c:
         d0:89:a4:22:59:96:8c:d4:9c:af:bc:9b:88:06:60:07:fe:44:
         fb:4e:85:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----