Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/846f5136-dd73-37dc-9d51-5a71c704e0f0.roa
File:                     846f5136-dd73-37dc-9d51-5a71c704e0f0.roa (raw, json)
Hash identifier:          +X4UJroWAJe9FkN4PhMkJlGNQ2lIJihjGcUdUbmtY6M=
Subject key identifier:   F6:49:19:CC:53:2E:3C:E7:A8:38:8F:74:A6:57:F8:B0:3E:43:BE:9C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA5F621D6433CCE08989900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/846f5136-dd73-37dc-9d51-5a71c704e0f0.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     19047
IP address blocks:        2001:559:0:37::/64 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a5:f6:21:d6:43:3c:ce:08:98:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=e35e93d5-e0a4-4591-95ae-64d2861f7038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0e:e4:b1:f7:e9:7a:cc:1a:81:16:c4:0b:8e:
                    12:92:73:cc:a2:51:69:22:9b:8e:18:d1:f9:58:21:
                    38:1f:49:35:cd:17:7e:9a:36:a6:e1:59:40:17:b8:
                    d2:28:1c:3d:64:b6:9f:1d:fa:4e:41:50:1f:1a:1f:
                    3f:36:aa:ef:d9:37:b9:1d:87:af:9e:8a:32:ac:5f:
                    24:a8:c8:33:8c:22:b3:8e:63:5e:26:39:7d:ca:79:
                    7a:46:e0:e6:e7:8b:24:d2:00:06:73:21:7d:0e:89:
                    6c:09:f5:c4:d1:e0:68:01:27:30:ce:ee:7d:38:a8:
                    9d:b7:87:22:76:e8:2f:ef:d6:c4:79:37:c9:ed:85:
                    76:0c:bb:98:1d:ee:a6:bb:4c:c3:3b:ab:7b:ae:19:
                    40:39:f4:ab:67:c5:14:33:fd:07:f3:a4:2c:b5:e2:
                    0b:16:7a:ea:a0:f8:cb:a7:63:76:a9:3e:29:dc:bd:
                    cc:e2:3d:38:1b:fe:8e:5c:b5:6c:45:27:66:a3:f6:
                    a2:b1:bf:85:1e:05:95:fb:ff:4f:8f:25:5f:de:13:
                    85:a6:5e:a9:31:e0:22:fc:ab:9e:fb:d7:32:6b:a1:
                    c3:2f:4b:91:b4:d1:22:de:2d:a5:94:a0:0a:cb:ae:
                    d8:9f:c8:e8:98:f5:74:63:9c:60:95:e0:73:47:eb:
                    76:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:49:19:CC:53:2E:3C:E7:A8:38:8F:74:A6:57:F8:B0:3E:43:BE:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/846f5136-dd73-37dc-9d51-5a71c704e0f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:0:37::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:62:33:e7:4e:14:55:2d:2d:3f:53:70:71:b1:94:ac:d1:e3:
         ea:b6:09:d1:47:0b:34:cf:f6:3c:60:de:79:5f:2c:92:68:9b:
         60:bf:25:18:b4:62:f0:16:b0:24:07:b4:7c:c3:cd:35:df:d6:
         a6:5e:ea:45:22:68:4b:b8:4b:14:a2:e0:f9:6d:f3:3c:ae:2f:
         70:e6:f5:40:ec:fc:58:e2:1a:a7:d0:39:70:9b:ff:19:7f:48:
         19:04:99:38:5d:49:58:1d:29:10:76:97:e1:7d:6f:6b:bc:05:
         85:87:09:b5:f1:e1:07:13:bb:ee:f5:3e:ea:ee:11:7c:7c:30:
         25:52:0d:8d:7e:de:09:c7:3b:43:85:ce:94:e1:21:ce:f7:82:
         44:f7:a0:48:a6:1a:03:aa:f3:08:f6:0e:53:2d:cd:16:9e:58:
         35:b5:59:68:58:eb:64:29:15:e7:02:8d:75:68:d3:a8:0c:90:
         59:4b:96:61:69:9c:db:72:d9:a1:36:9c:70:3e:86:64:a3:4e:
         ed:38:9b:d7:b3:32:be:37:d4:1d:a8:c9:0e:a8:a4:ae:b1:a3:
         b9:8a:64:79:7e:74:80:e2:2f:22:12:3e:5c:61:91:f1:75:d2:
         4d:df:1c:d4:d9:2c:f5:0e:3f:44:2d:e7:41:f7:88:80:5f:4a:
         38:63:4c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----