Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/81e0549b-29ff-333d-8fb0-193e0d2ff47f.roa
File:                     81e0549b-29ff-333d-8fb0-193e0d2ff47f.roa (raw, json)
Hash identifier:          r/tan86v+IiqJWjF5nC5VPYHboYXz7JnRFBxQg1p2ug=
Subject key identifier:   0E:2A:1F:EB:ED:C7:05:84:92:3F:6F:22:F3:40:F1:AF:A7:4D:36:2A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA4831992EAD6E5EB825F80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/81e0549b-29ff-333d-8fb0-193e0d2ff47f.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     22909
IP address blocks:        68.53.192.0/18 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a4:83:19:92:ea:d6:e5:eb:82:5f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=fe31e8c1-a3df-428f-ae88-65891ee1e7cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:59:ce:3c:ed:24:88:47:d2:3f:72:00:6a:61:
                    a1:47:40:81:a9:04:30:e3:bd:53:87:86:d9:f3:06:
                    46:56:e2:1b:41:88:5e:d7:d3:e3:10:1d:da:62:89:
                    db:e0:f8:6a:2d:ab:4d:2e:ee:ba:07:62:0b:01:c6:
                    14:17:70:e1:ef:a8:e5:f6:c1:2f:e5:3d:c6:08:b5:
                    56:48:c9:4b:42:bb:74:6c:34:56:91:01:c3:d3:04:
                    51:4c:c8:43:bd:72:6e:26:a3:28:a8:d1:be:d4:fa:
                    e7:2f:ac:1a:40:4c:95:cf:51:c7:fb:65:33:2b:cf:
                    ae:c3:03:44:c0:6a:04:ea:75:c9:1b:21:97:e4:e3:
                    2e:6d:cd:bd:ec:8b:f4:ba:ea:15:41:0c:34:62:49:
                    21:0d:66:43:f3:d8:0a:0b:d0:65:d8:34:b7:49:6c:
                    84:a1:91:c6:20:92:21:02:f7:e9:da:ec:9c:9c:b0:
                    56:78:d2:bf:01:d0:d7:bf:c3:a4:30:58:20:2c:ee:
                    6e:d0:56:89:f6:5c:9c:13:60:d3:a0:eb:b9:8e:73:
                    06:d4:19:1e:f6:bc:c7:77:e6:79:06:d9:ec:f9:96:
                    a1:7c:7e:c2:04:3f:0d:b3:b8:20:23:cc:e7:11:ba:
                    65:bc:8c:85:8d:53:78:4f:6b:b8:08:f2:a1:ae:57:
                    f9:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:2A:1F:EB:ED:C7:05:84:92:3F:6F:22:F3:40:F1:AF:A7:4D:36:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/81e0549b-29ff-333d-8fb0-193e0d2ff47f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.53.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:19:c4:b0:51:e8:0c:ff:a1:e2:14:40:0e:b4:1c:89:45:e5:
         4a:87:bb:68:b0:fb:17:cb:f7:c6:12:be:de:2c:4d:67:d3:de:
         b2:8b:71:80:8e:b0:d9:10:c8:fc:1a:e6:71:b0:d2:ba:a3:1d:
         08:f4:ef:ec:96:f7:59:a6:b8:81:d5:38:e3:a7:e3:96:73:61:
         e1:cf:c8:a5:54:7a:d3:6c:9a:fc:25:50:7d:d0:76:63:30:96:
         90:44:29:61:42:e7:a1:a2:ad:e6:46:70:54:eb:5b:28:82:1b:
         ed:41:8f:0b:7b:42:aa:e6:62:b8:be:45:5f:0e:b0:51:53:e1:
         bf:69:1f:a2:79:c1:6a:b2:df:31:0c:0e:04:e1:61:c7:84:da:
         c0:59:06:71:05:81:fe:57:fd:aa:c9:8b:f8:68:8a:9e:7f:97:
         16:f8:0b:e6:a5:cd:fe:37:ad:88:9f:18:1b:40:66:90:df:d9:
         e1:3b:e7:3e:d6:0e:8b:53:4d:f7:04:3c:5d:5a:10:3b:60:c4:
         4e:76:b6:59:59:19:03:28:be:81:5c:28:f0:bd:a7:fb:f8:f1:
         cd:84:11:a8:67:06:0c:22:68:d1:36:04:88:c8:81:87:da:bb:
         88:4c:c9:90:23:9f:d4:f6:22:b7:5b:6f:fd:4f:73:4a:83:83:
         9a:4d:9e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----