Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/801ceaa5-6106-3246-9ea9-34b35fe74c76.roa
File:                     801ceaa5-6106-3246-9ea9-34b35fe74c76.roa (raw, json)
Hash identifier:          j+og18yM2YC2UGcC0GpsLO017Q2H5fRmqWJ+9RUPnaI=
Subject key identifier:   98:ED:AF:9E:1B:94:41:8C:0A:7F:39:7F:AC:4F:29:F0:4A:5B:F3:83
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA5B3A09012DD9F1996D9F0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/801ceaa5-6106-3246-9ea9-34b35fe74c76.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     54787
IP address blocks:        50.201.192.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a5:b3:a0:90:12:dd:9f:19:96:d9:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=388bc72c-28e7-495d-9bc9-68225cd40d7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c6:8a:9c:c8:ba:45:b7:55:44:18:0e:83:cc:
                    af:5f:e9:45:42:dd:a8:b2:ef:3c:b8:80:c1:42:96:
                    6c:ea:bc:ef:6d:b8:94:5e:73:bb:28:24:f9:fd:ce:
                    86:62:07:8f:c2:77:9f:7c:91:5c:87:23:6c:94:4d:
                    6f:e3:cc:1b:4f:45:07:33:ed:bd:87:bd:27:90:16:
                    3b:19:64:b8:9b:c8:5f:75:53:b5:48:e7:bf:6a:ae:
                    5a:ae:2f:49:bd:e9:40:a4:f5:ad:eb:03:31:be:0d:
                    8f:47:f6:44:42:6e:5e:d2:f2:83:ee:ce:c1:00:ba:
                    42:02:27:77:88:73:a9:d2:4b:02:d1:89:85:23:e5:
                    f4:bf:91:eb:0d:df:bf:32:3e:7b:1c:6c:f2:45:40:
                    f2:2b:e4:f0:a1:a0:30:97:b3:94:2e:a9:a8:2f:30:
                    eb:99:0d:57:a2:3d:05:18:80:cf:c6:c8:52:d5:3d:
                    4c:48:8e:71:9d:14:9d:5e:37:62:3f:1a:5d:e3:13:
                    1a:50:94:71:78:f8:a0:3f:67:b1:54:75:93:07:01:
                    32:46:76:72:21:1c:f8:03:ad:05:82:50:91:fa:48:
                    82:69:db:f1:ae:12:97:05:5f:9b:ff:e3:11:f0:21:
                    8e:ae:22:e5:20:29:c6:ee:7f:1b:5d:c6:86:c4:8d:
                    5c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:ED:AF:9E:1B:94:41:8C:0A:7F:39:7F:AC:4F:29:F0:4A:5B:F3:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/801ceaa5-6106-3246-9ea9-34b35fe74c76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.201.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:2b:0a:4b:71:0b:0a:3d:4b:a7:bf:6b:26:11:55:00:c1:e6:
         f3:70:f9:d3:9b:2f:01:88:d2:76:65:e1:63:95:a5:c6:1e:ed:
         69:5c:1d:bb:f8:f0:0b:01:84:6f:c4:26:4b:20:9f:3b:6d:f6:
         16:b9:77:89:0e:42:1a:8b:fe:84:db:f2:8b:6c:67:05:c9:91:
         17:b2:a0:b6:3c:50:5c:d6:da:7b:77:a5:42:5d:98:04:cc:5c:
         6e:12:af:ef:ce:67:a0:2d:af:b3:04:cb:2b:6a:df:f5:e7:51:
         1c:58:a5:f5:0e:ce:13:e8:64:8f:43:be:76:f9:b9:56:e5:4a:
         fa:40:21:0c:28:d0:31:ac:29:54:a4:9d:30:f7:8b:91:2f:a2:
         43:a3:31:87:a6:a5:bb:db:21:d4:24:d4:29:79:26:f3:44:54:
         5a:f9:d3:9d:73:2e:2f:2b:da:61:03:71:31:d2:0f:db:88:15:
         59:7e:a8:ec:db:f4:7d:a4:e2:97:3f:c7:e9:7b:0b:96:80:77:
         29:bf:27:39:2e:96:4a:02:2e:c1:60:25:82:ad:23:38:1f:9c:
         66:a7:4d:57:d6:1f:06:69:a1:33:f3:2c:31:89:b3:cf:04:56:
         d3:6c:4b:cc:86:27:15:68:64:ef:93:36:c5:81:cc:91:c4:35:
         35:cb:05:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----