Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/78008b4a-d447-3b59-b56c-78b4a57346b2.roa
File:                     78008b4a-d447-3b59-b56c-78b4a57346b2.roa (raw, json)
Hash identifier:          MSOHhV5G7usDZkmCiMiZj6akDBSqg1XtZ1tVa+/WN10=
Subject key identifier:   FF:E5:2E:C7:04:1F:92:DE:8C:ED:A6:71:91:E4:BE:6A:F4:28:7C:C3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA6543646F92D8024BB0500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/78008b4a-d447-3b59-b56c-78b4a57346b2.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     33668
IP address blocks:        96.66.0.0/18 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a6:54:36:46:f9:2d:80:24:bb:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=a8cd4022-7e33-49c3-8d56-5c19a644b310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:9a:4c:f5:7a:43:23:fa:23:ae:44:29:0d:60:
                    a1:28:47:b9:8e:27:85:dd:a8:3e:8c:43:dc:75:d9:
                    14:6e:91:20:4b:0d:4d:1f:59:e8:86:66:5d:b8:65:
                    24:4b:e9:9a:49:bc:e7:22:f0:5a:ff:12:b2:9d:b1:
                    d8:a4:5d:6f:ac:0e:22:be:f9:5a:59:1b:63:e6:64:
                    9d:99:47:13:fd:7e:e9:00:2c:be:65:1a:1b:72:93:
                    57:fd:87:3d:d9:aa:06:7f:53:90:37:d7:58:d8:05:
                    d6:fe:d4:bc:56:3c:da:af:4e:e7:b7:f1:b7:4e:9f:
                    e8:ef:e6:90:52:8b:9c:70:ad:95:19:97:2a:bd:08:
                    57:8e:3f:bd:d2:a6:14:75:61:09:7e:fc:d6:ac:f6:
                    2f:90:98:55:e3:24:2c:19:01:04:5a:12:12:58:b4:
                    52:a5:8a:4a:c7:73:bb:b7:82:7b:8f:6c:b7:31:3a:
                    d9:67:31:28:cc:e9:6a:eb:81:0c:6d:39:e2:75:7c:
                    eb:f3:a9:79:94:7f:2b:e2:1d:ce:bc:10:72:bc:4f:
                    85:8d:d1:e1:b0:d4:ac:0f:7e:42:4d:24:f2:10:27:
                    6f:62:55:c0:a8:0a:59:39:71:e8:e2:c9:a2:ad:fe:
                    3d:d9:0f:4e:82:bf:ac:f6:5e:fc:d2:0c:7c:63:98:
                    27:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:E5:2E:C7:04:1F:92:DE:8C:ED:A6:71:91:E4:BE:6A:F4:28:7C:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/78008b4a-d447-3b59-b56c-78b4a57346b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.66.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:6d:f7:b7:5f:79:c5:d8:82:9f:50:ac:96:25:e4:74:97:8f:
         de:d4:b6:df:52:68:2a:c7:b1:bc:60:50:5e:42:63:d2:b4:b4:
         ef:73:c6:ee:4d:c0:c7:90:7c:5b:0e:7a:f4:e4:40:46:8c:b3:
         33:9f:ee:56:24:ef:13:07:37:6d:e3:a0:c4:27:61:63:3c:29:
         38:85:61:3b:2b:77:00:be:7e:55:8c:32:98:b9:4a:85:bd:ee:
         b3:71:1c:31:61:6e:e7:ff:bd:54:b0:aa:b5:7a:75:09:b4:ea:
         8b:12:aa:30:14:7e:7a:c7:27:fa:59:02:e9:52:e8:41:fb:fa:
         4b:2c:ae:bc:a7:5d:a6:b8:b2:92:4d:21:a8:d8:80:0e:b3:50:
         b1:35:bc:06:4c:cb:09:fc:22:f1:55:07:bc:e1:8b:f9:0d:88:
         13:dd:31:22:79:17:cd:d2:d1:8c:e7:a7:03:fd:b7:d1:12:f5:
         a0:39:65:c2:ef:fd:cb:60:ec:b0:45:24:79:c3:9a:e0:31:44:
         d1:1d:ff:50:2a:00:76:fb:12:a8:f3:4f:c0:d1:d9:a4:bb:13:
         8d:55:51:e3:3e:31:4f:36:c1:04:7e:61:b0:76:63:b3:ee:e0:
         44:a2:96:93:eb:81:4c:80:01:08:18:fc:16:b4:8e:0c:97:f1:
         eb:86:18:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----