Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/93700a02-12d8-3009-96c3-97dcc771e48c.roa
File:                     93700a02-12d8-3009-96c3-97dcc771e48c.roa (raw, json)
Hash identifier:          9+MuvmPe4HhgFBx5ncQcqw9Lgf0rFUXg4N3hphjEhJ8=
Subject key identifier:   56:C4:8C:79:B8:A8:A9:AE:31:D9:E2:C1:C2:F4:33:AF:69:9F:AC:16
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA6273DAC00DA8F21CAF1C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/93700a02-12d8-3009-96c3-97dcc771e48c.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     33650
IP address blocks:        50.237.50.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a6:27:3d:ac:00:da:8f:21:ca:f1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=b946c2eb-0f31-446b-b989-9506439d8e1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:3d:14:cf:f9:b3:52:9e:e7:d2:4f:dc:83:bf:
                    b2:29:17:2f:32:a9:90:e3:0e:a8:8f:f4:d6:cf:da:
                    ce:4c:82:c6:e4:e2:02:ed:40:64:dc:63:cc:21:e2:
                    98:85:ea:c0:5d:09:a7:e8:b5:a2:0a:0d:b5:20:86:
                    a2:ec:f4:fd:cd:dc:5a:b1:1a:59:a2:87:27:f8:2f:
                    8a:15:a0:f1:a7:2d:47:8b:67:2d:60:7a:df:f3:a7:
                    c1:06:f7:f3:5f:2e:c9:3e:7e:74:f5:b8:d2:cc:40:
                    15:3e:ec:97:0d:91:3a:45:48:a3:e5:b0:97:79:71:
                    a1:9a:4d:2f:ce:83:2a:b7:0e:18:e3:94:4c:62:be:
                    b6:91:57:a6:25:23:93:4e:e0:19:2c:ca:3a:48:8d:
                    88:f5:8c:0c:d5:95:16:00:be:41:6f:62:4f:6d:90:
                    56:80:eb:43:96:6d:8f:a7:03:a4:03:3e:00:83:4b:
                    80:47:5b:9a:e7:75:73:e2:10:b2:a3:74:21:f7:04:
                    16:69:11:47:52:91:2a:7d:57:4d:bd:9b:67:f4:0a:
                    e1:f7:9b:a6:df:dc:fd:90:f8:21:cc:87:a0:ba:a6:
                    c3:db:54:7d:e7:8f:ef:13:60:b3:a7:57:f5:1d:61:
                    00:fe:aa:62:8a:0c:a4:03:64:1d:47:e9:57:f8:b7:
                    ac:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:C4:8C:79:B8:A8:A9:AE:31:D9:E2:C1:C2:F4:33:AF:69:9F:AC:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/93700a02-12d8-3009-96c3-97dcc771e48c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.237.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:f4:e6:89:86:50:88:10:4c:68:46:37:3c:fa:67:cd:1f:3e:
         1e:81:40:83:3d:8e:3f:bd:ff:4d:43:91:18:1e:29:ee:3d:bd:
         56:87:6d:5d:f0:78:a3:bf:91:50:5f:1d:f1:51:9c:bc:12:5d:
         e5:3f:e4:f6:a5:b2:7a:4e:25:e0:23:35:a7:f9:1b:51:a4:cb:
         15:e2:4a:ba:35:a7:32:bb:1e:b6:bf:e4:ad:fb:fa:f0:e4:73:
         f3:d2:46:1c:9d:67:c0:c3:9c:d7:a0:4a:d5:00:33:94:6f:ad:
         1a:91:a2:2d:51:1a:de:0c:fd:4a:3f:7c:72:a2:2b:17:b7:e0:
         08:02:4a:32:c9:8a:86:36:be:90:52:78:fe:6a:ae:99:47:0b:
         49:55:a1:12:3a:12:21:2c:a5:ff:77:6b:53:07:58:64:a1:88:
         07:72:c6:67:3d:05:74:47:c8:28:e0:2b:85:07:ce:dd:b8:43:
         93:7d:73:b8:b9:5d:28:ff:05:f9:0d:27:e4:a7:f9:31:1a:ad:
         ff:18:6c:a3:1c:5e:47:ea:86:f3:9c:4d:e8:16:aa:47:dc:09:
         1a:5e:cc:d0:42:5e:3f:81:e6:05:21:fa:3c:8e:16:e2:ae:1f:
         14:d0:01:bc:2b:fa:c3:b1:5e:4d:0c:b2:3b:29:fd:a9:78:c2:
         51:9d:38:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----