Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/852d8e0f-cd35-3945-a4b1-27a172e620b1.roa
File:                     852d8e0f-cd35-3945-a4b1-27a172e620b1.roa (raw, json)
Hash identifier:          sxbaHkVIOffhyoxlni3Doypn0sHGUnIpIJp1Mfww53M=
Subject key identifier:   CC:F0:BF:FA:2C:C6:6A:92:41:5A:E2:89:FB:7B:B5:1C:44:39:06:11
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA6BA0AD9C404A090E42600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/852d8e0f-cd35-3945-a4b1-27a172e620b1.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     33657
IP address blocks:        2001:559:2ee::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a6:ba:0a:d9:c4:04:a0:90:e4:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=e9e8120b-3467-499b-9f35-01df3fb50a43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:97:5a:b7:b5:ef:2b:15:38:e8:41:47:41:31:
                    58:99:9c:05:50:32:76:b9:38:89:86:0a:e9:0c:89:
                    47:db:2d:ea:59:bf:4e:ea:a3:37:73:e7:28:61:29:
                    2f:43:02:5c:41:ee:b7:08:40:f4:54:52:58:84:11:
                    00:49:f8:93:e4:c5:bb:66:7c:61:cf:c6:c7:6b:ca:
                    3c:90:df:d7:8e:43:7b:4d:3b:9b:00:2c:8b:e5:be:
                    f2:b6:80:62:28:e7:cd:ad:8e:58:77:ba:b1:1f:57:
                    27:86:c2:33:1c:e0:ec:d9:a9:5e:a8:ba:32:d6:77:
                    d9:2a:a9:6a:5a:f1:21:be:e5:71:3c:49:07:2f:ba:
                    1c:f9:7e:7b:11:54:a4:dc:5f:dc:19:c2:32:7f:00:
                    05:2e:1d:1e:a0:42:59:84:41:06:20:97:33:84:4d:
                    b3:c1:d8:28:88:5e:c7:bb:40:02:08:3d:5c:c6:03:
                    91:76:39:bf:0a:bf:e8:2f:92:bc:fb:b4:09:32:a1:
                    34:91:7a:e4:b1:a3:dd:91:1c:3a:00:c5:b1:46:61:
                    d6:b9:d2:69:66:5d:8a:88:aa:18:3f:c3:39:de:b5:
                    46:00:3a:eb:3d:73:88:9c:ca:66:f8:64:4e:96:2c:
                    29:c2:80:cf:b3:3d:d3:b7:f4:74:78:db:13:73:94:
                    57:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:F0:BF:FA:2C:C6:6A:92:41:5A:E2:89:FB:7B:B5:1C:44:39:06:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/852d8e0f-cd35-3945-a4b1-27a172e620b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:2ee::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:fd:5e:e0:11:24:ed:9b:c3:7a:c5:62:44:c8:dd:4c:b5:40:
         fa:ac:5e:32:59:d4:83:a6:10:29:e8:52:43:e9:05:09:0d:d9:
         38:6a:de:80:92:a6:f7:73:19:1a:1c:32:68:bf:1b:13:c3:a4:
         53:17:0a:dc:5a:75:4d:cf:98:ec:51:da:6b:b7:7d:23:67:f2:
         44:2b:6f:05:54:ab:ae:00:ff:3c:70:72:68:53:72:a9:9c:e6:
         1c:ea:61:41:96:bc:ea:51:fa:ab:00:66:a1:8a:6e:d9:a4:65:
         d3:93:f0:cd:45:34:45:48:f2:03:00:86:10:8c:2a:1c:6b:9c:
         16:43:3f:8a:2c:ed:a1:11:5d:9e:16:43:ee:b1:de:07:29:8c:
         ef:ad:10:c9:12:a0:74:be:1c:94:b7:c6:04:ec:0d:d4:a0:a7:
         b2:ce:0c:39:e9:98:a6:9c:bb:cc:30:67:92:d9:17:ae:b0:5c:
         81:cd:e7:0c:be:25:34:61:48:d7:25:12:b5:49:34:b2:ed:3d:
         ba:83:bd:17:db:a4:9f:d0:f3:92:53:c8:2d:9c:af:41:2b:82:
         3e:6f:76:c2:4a:9a:c1:b4:32:93:78:41:2e:b3:0b:94:4d:65:
         bb:84:3d:1e:cb:62:6e:6a:bf:30:c6:9d:3f:cb:a7:94:b7:f6:
         c3:01:1d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----