Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/848cce4e-d545-3f70-a702-c7d2dbac54de.roa
File:                     848cce4e-d545-3f70-a702-c7d2dbac54de.roa (raw, json)
Hash identifier:          8bqVQ+bCnyQeHLJmyEv87IZcegg2u7yX745XZ5DvHDU=
Subject key identifier:   6B:02:7E:CB:B8:CE:4D:2F:61:D1:33:08:A4:96:C6:E6:E2:EE:BD:82
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA65DCF992027149C34EE79
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/848cce4e-d545-3f70-a702-c7d2dbac54de.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     7015
IP address blocks:        76.96.86.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a6:5d:cf:99:20:27:14:9c:34:ee:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=1230d406-8fd3-4933-a937-4c644bc2c9f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:62:4b:db:56:fe:ff:5d:3a:b2:52:e8:64:8c:
                    4e:f4:c3:81:a4:88:ba:33:42:ca:07:22:59:75:b2:
                    aa:55:68:08:ee:6e:9f:d9:96:1a:59:30:0e:0e:ca:
                    a4:65:0a:99:54:47:c0:13:2b:e0:52:12:ca:df:0e:
                    62:e4:32:e5:30:0b:b5:b3:8e:df:ac:2e:99:33:67:
                    a4:08:92:52:41:62:53:32:54:13:66:54:f6:e5:35:
                    e9:27:64:d0:79:1c:67:16:c4:90:f3:ae:33:91:bc:
                    d4:94:3a:c8:8a:19:06:68:1d:b0:fd:6d:9a:52:e2:
                    91:10:40:75:9e:f1:c7:8d:93:3a:09:80:c6:2e:bf:
                    d3:e9:bc:06:ea:24:7b:1c:88:43:a1:4a:c7:c5:d0:
                    ae:73:d8:8a:8c:7e:36:2c:b8:79:6d:a4:44:12:c5:
                    a1:ea:6f:69:f5:83:01:b0:41:f3:cb:4d:9a:44:85:
                    1c:62:aa:39:34:47:12:32:43:0e:20:a5:26:82:c1:
                    ca:09:8e:c5:18:39:6c:27:af:71:f8:1d:ad:03:16:
                    f9:3d:b9:27:61:48:dd:f1:fa:c7:d1:9f:32:5f:e1:
                    25:18:67:f5:43:eb:c5:2a:8e:d0:5c:3b:50:d8:8b:
                    e1:c0:cc:c2:2a:7a:e9:c2:62:82:01:36:5a:00:4b:
                    9f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:02:7E:CB:B8:CE:4D:2F:61:D1:33:08:A4:96:C6:E6:E2:EE:BD:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/848cce4e-d545-3f70-a702-c7d2dbac54de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.96.86.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:81:c1:4b:b1:a0:90:3f:48:ba:4f:6e:ab:fa:e9:5f:8c:85:
         f2:04:20:ea:b0:db:f8:71:71:34:b5:67:eb:5e:66:67:46:bc:
         f8:5f:65:1c:21:48:5a:21:6b:f9:c5:2c:dd:2c:32:76:2f:5a:
         1c:2b:d1:1c:9b:87:9c:62:6d:34:9d:69:71:f3:6d:0b:62:63:
         5a:ed:d7:4b:cc:f5:8e:89:0d:dd:46:27:2f:11:0c:5d:80:76:
         d0:b9:b8:50:0c:9e:f3:f9:45:55:19:11:98:45:85:a0:bc:02:
         f2:39:a3:e9:b4:af:bc:59:73:79:a6:20:2b:7c:5c:e2:2c:79:
         c6:14:b2:ee:8c:25:68:b3:d4:71:97:0c:cd:b7:f2:e0:1d:67:
         f8:bb:1e:b2:39:b3:21:43:c5:be:37:17:e2:4c:79:44:ea:7f:
         16:d7:bf:0a:0a:b8:6a:ee:90:e5:07:bc:e5:7c:c6:3f:5c:72:
         5b:07:6a:e3:94:86:b2:13:a7:39:ec:73:9f:26:f7:ef:29:61:
         df:b0:17:5a:ff:11:99:4c:82:19:2f:d1:c0:d4:9d:e4:d9:65:
         05:e0:8f:36:aa:a7:70:46:40:fa:83:21:13:6e:f8:58:64:05:
         8d:b8:8f:67:0e:bd:3f:dd:0e:a5:da:3d:fb:be:c3:a1:2e:0b:
         37:fb:89:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----