Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7ddee7a4-c6d5-35e1-bb30-927e7c5278b0.roa
File:                     7ddee7a4-c6d5-35e1-bb30-927e7c5278b0.roa (raw, json)
Hash identifier:          vw+Bp2j42o+s4PaI8pa+3AciTPD6gOeer9fztqD8sTc=
Subject key identifier:   7F:1D:2E:F3:28:F6:07:3B:1A:49:ED:BD:18:BC:64:0E:1B:2A:BF:D4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA66C17034C2958F3011FC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7ddee7a4-c6d5-35e1-bb30-927e7c5278b0.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     7015
IP address blocks:        2001:559:8758::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a6:6c:17:03:4c:29:58:f3:01:1f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=6a32fcef-8120-4da5-ade3-7597e5a3e044
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:45:0b:de:38:37:ba:60:67:17:1c:28:93:26:
                    a2:78:30:7b:56:aa:98:33:98:f1:6a:8e:f0:75:96:
                    82:12:4d:12:c3:eb:73:a1:45:c2:ca:a2:e4:11:84:
                    fb:3b:4a:ab:62:e7:9f:c8:ec:00:0a:5f:58:a8:d4:
                    5b:16:e4:10:90:16:f4:3d:92:cd:f6:0e:cd:ce:8d:
                    c9:44:ea:bb:98:00:8f:ae:18:49:73:2e:19:35:4e:
                    82:72:1b:9b:88:ad:82:9a:cb:26:84:0a:e3:84:07:
                    1b:ec:e5:5c:0a:d9:28:1c:38:eb:96:c1:9b:c7:57:
                    c9:65:11:20:d8:0f:53:eb:c5:0f:db:8b:f9:28:0c:
                    62:01:79:1d:fc:f5:3e:c5:79:1f:cf:55:42:c8:71:
                    d1:8a:43:25:9f:5c:a0:e3:60:83:41:ae:ca:c5:ca:
                    e7:b5:d2:a5:a2:69:67:33:4d:52:7c:ea:10:d0:d0:
                    0d:03:6f:71:ba:fb:39:0a:56:0e:d7:8e:26:b4:cd:
                    c7:b0:1d:25:96:b0:30:ef:1a:ae:aa:dc:8c:3c:70:
                    c5:0e:2b:92:26:c0:19:d0:ac:ee:37:a0:db:70:46:
                    c1:6b:0b:7c:1a:c2:d2:08:5f:97:e1:9f:1e:ba:4e:
                    af:89:39:4f:fd:66:a5:65:78:1b:25:88:44:fe:72:
                    70:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:1D:2E:F3:28:F6:07:3B:1A:49:ED:BD:18:BC:64:0E:1B:2A:BF:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7ddee7a4-c6d5-35e1-bb30-927e7c5278b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:8758::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:ea:07:2a:f7:e7:d2:b8:26:c0:d4:93:91:d5:3f:ad:de:d5:
         bc:7b:e2:95:44:f8:b8:f8:a5:d6:7e:de:d9:50:55:00:25:e9:
         ac:b5:a3:4f:c4:9d:51:74:fe:66:ef:2f:c2:10:3d:e5:35:c7:
         62:f2:0b:d5:9b:d1:de:3a:8b:f1:8b:08:27:6b:f1:b4:57:03:
         e0:d5:c3:48:7d:21:75:0c:ef:7c:6c:fd:00:76:85:7f:05:bd:
         42:e7:16:14:27:13:74:da:5e:aa:25:1c:17:ab:53:e7:02:62:
         39:d1:fe:7f:43:a8:b3:b2:26:7d:60:40:8a:cf:8e:92:35:a7:
         1f:8d:2b:9e:6f:26:a4:5f:6a:30:4a:27:6d:90:62:ff:b0:19:
         4a:77:8d:18:55:25:2e:34:56:c5:73:2b:fd:e3:a1:68:eb:f5:
         ee:d6:fc:80:81:34:40:00:12:14:86:4f:ca:c2:f8:53:bd:05:
         45:ef:24:50:71:31:96:08:74:e3:78:cd:9a:c1:0c:82:59:11:
         55:63:63:12:9f:cd:0f:c0:aa:93:7a:ec:d8:79:8a:5e:fe:60:
         ca:0d:bd:eb:41:0a:22:9c:c9:f4:4b:3b:63:cc:26:ee:21:22:
         9f:58:cb:46:15:67:29:9f:42:ce:5a:f4:68:00:63:52:c8:40:
         2f:f5:96:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----