Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/863bbd7a-f1bc-3319-a419-896f541b429d.roa
File:                     863bbd7a-f1bc-3319-a419-896f541b429d.roa (raw, json)
Hash identifier:          m+e8fBfefqyo8dbwoyHt8QopxCK50gfXZHpCkyhnKaA=
Subject key identifier:   D5:26:D3:8E:9D:51:8F:DB:8A:0A:B9:C3:2C:78:4A:F2:46:F6:65:39
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA64C66FF47132281719E60
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/863bbd7a-f1bc-3319-a419-896f541b429d.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     33667
IP address blocks:        50.203.5.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a6:4c:66:ff:47:13:22:81:71:9e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=43fd363f-23c6-4522-943b-7a1048b1283d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f3:f9:d1:c9:8e:f9:98:2a:b7:a6:c4:ce:0b:
                    d6:c3:c5:6a:3b:95:97:88:57:b1:94:f9:c6:dc:01:
                    85:7a:29:13:03:ff:5d:5f:03:a4:61:3e:3c:f3:06:
                    ff:84:66:d2:a4:94:87:0b:9d:3c:ba:90:13:92:67:
                    dc:c1:b3:61:25:02:3e:d3:e3:30:97:fe:44:d4:59:
                    37:36:ff:2a:e6:b1:ee:b2:5b:57:55:f6:f8:36:09:
                    34:f9:e6:a1:7d:8a:2e:2e:b5:89:36:e7:d7:df:ab:
                    be:a7:62:a1:30:1d:30:60:91:1a:e1:fa:02:1a:79:
                    8e:c8:b1:f1:e3:ae:bb:51:95:25:fc:e9:fe:49:35:
                    8d:98:0b:e7:c6:51:56:2b:41:ef:68:87:d6:ec:6c:
                    ce:48:4c:67:6e:25:fb:f0:43:71:09:00:d3:fb:bc:
                    ec:3c:97:01:ba:0f:a6:d4:97:ef:66:97:1b:45:69:
                    bf:d7:98:a8:22:2f:68:ce:c1:2d:dc:fb:83:a5:d2:
                    43:0c:11:be:b4:b9:b3:39:18:2d:d8:27:99:90:49:
                    11:b7:a0:03:0a:8b:95:fb:d8:02:e9:db:43:76:71:
                    91:65:d9:6e:c6:a5:cf:c1:29:20:65:94:61:00:e5:
                    d6:f2:3f:4e:73:7f:c8:ef:59:f9:89:f4:89:c5:ef:
                    8a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:26:D3:8E:9D:51:8F:DB:8A:0A:B9:C3:2C:78:4A:F2:46:F6:65:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/863bbd7a-f1bc-3319-a419-896f541b429d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.203.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:ae:35:5d:ae:e0:16:6f:5a:c3:13:4e:b3:f0:dc:2e:6a:44:
         97:a2:64:ee:46:a9:5e:34:25:be:a5:2d:42:f1:8b:b6:39:03:
         a8:75:22:71:71:b6:a5:99:84:d7:9f:19:78:fe:10:84:6f:79:
         01:0e:5e:aa:28:3d:a3:00:cb:0e:32:24:1b:7e:f3:68:12:d3:
         4f:92:88:c6:63:26:35:98:cf:ec:2f:09:05:a1:bd:6d:69:a5:
         f5:46:eb:cf:e6:0b:84:7f:04:4c:c8:56:ce:fc:b7:a6:b9:c0:
         25:39:76:a5:67:fb:d1:0a:31:14:a3:6f:2d:dc:b2:d7:65:21:
         93:81:6d:7f:4e:5d:88:1c:f5:d7:a1:c0:16:9a:e1:c5:1b:37:
         40:49:93:d9:4d:ae:65:0c:47:ad:24:eb:7a:7b:1f:39:13:af:
         5d:81:eb:de:81:92:7d:d2:60:4b:da:8e:90:45:fe:54:f8:75:
         5b:09:45:4a:41:4e:63:77:29:b4:96:e7:35:38:8f:f1:df:b4:
         11:4e:dd:7f:5d:af:7a:e2:f4:76:3b:63:e3:12:07:07:31:c2:
         05:cb:45:3f:61:2e:eb:de:6a:91:eb:39:62:5c:33:ca:fb:9a:
         4b:ec:24:a9:e4:40:be:6a:b6:60:18:b1:db:4f:59:73:42:ba:
         86:d9:e3:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----