Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9a2bcdb2-8baf-3f32-beec-d95dca10f28c.roa
File:                     9a2bcdb2-8baf-3f32-beec-d95dca10f28c.roa (raw, json)
Hash identifier:          jbcjYfsgEHFJpQwh1i36Ako970uWCZD0Dmx8J6xpmAc=
Subject key identifier:   1A:48:5B:91:0D:20:F0:24:E9:7A:B8:FA:8F:38:19:84:DA:95:DF:7E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F853069E1ECC52BF49B400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9a2bcdb2-8baf-3f32-beec-d95dca10f28c.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     7015
IP address blocks:        24.2.164.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f8:53:06:9e:1e:cc:52:bf:49:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=a4a0c987-914a-4332-8c28-d325aa3fa68f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:fe:47:0d:4e:6e:bc:19:fb:45:4c:6d:7e:ec:
                    ac:f8:dd:e0:08:e1:74:9b:f4:c9:f2:b6:4e:85:bd:
                    aa:ba:4d:d2:42:60:05:a9:0a:84:1e:4e:9a:45:48:
                    59:f6:a8:8f:72:a4:5b:cc:20:50:5d:bc:54:c4:3c:
                    5f:8c:be:b8:0e:45:c6:98:f1:c4:01:3b:19:72:4f:
                    70:8c:2c:77:9a:39:1a:57:5d:84:e6:ff:2c:e7:2e:
                    75:0f:d5:8f:ef:2d:e1:ec:4f:b1:65:4f:8a:34:12:
                    78:d1:7a:93:5d:90:27:4e:61:78:ac:10:66:16:7b:
                    8c:a4:09:1b:e8:fa:d2:6f:da:58:88:a1:26:61:55:
                    2d:dc:b3:be:1b:9f:0a:a8:48:b7:77:35:9e:3c:3d:
                    87:af:09:32:33:73:e3:dd:dc:e7:a8:9a:85:5b:1c:
                    4a:c3:5b:82:99:fa:b6:14:c2:c7:13:a1:3e:06:92:
                    e9:c5:66:22:bc:24:9d:64:f0:b7:36:8b:a7:15:0e:
                    5f:b3:74:0f:a6:35:fa:d5:cd:d3:7c:a8:ec:c0:9d:
                    bc:d2:07:ee:29:68:ce:4a:14:6b:ff:b8:b2:e1:19:
                    ca:f0:4c:27:ac:12:e1:6b:cd:9c:d0:4f:71:2f:36:
                    f3:da:e5:75:d1:02:b5:ee:03:03:45:3d:7e:bb:fd:
                    4b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:48:5B:91:0D:20:F0:24:E9:7A:B8:FA:8F:38:19:84:DA:95:DF:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9a2bcdb2-8baf-3f32-beec-d95dca10f28c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.2.164.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ce:b2:8a:49:33:a1:62:d8:4f:02:8f:28:8d:4d:76:86:7a:14:
         73:a9:7d:b7:5f:0e:4d:bc:2f:7e:7f:15:b7:3d:17:de:cd:d1:
         c8:ff:6a:21:fa:f0:6c:d7:d1:28:98:44:8a:24:ce:10:c3:4b:
         fc:07:ca:f9:20:ed:13:e9:93:3c:39:2e:08:07:b5:7d:1a:d6:
         82:7d:ce:a2:b8:d0:a9:40:c7:4b:dd:8c:d7:f1:b9:59:3d:09:
         40:1b:0a:55:1f:ad:5a:ce:a0:a5:7a:bd:43:3a:86:34:63:d2:
         3d:d2:34:95:aa:1d:19:72:31:0e:27:b0:a8:3a:4e:20:da:41:
         d6:3b:7d:bc:10:f5:ca:f5:a5:97:07:47:48:ca:4d:b2:6a:1e:
         1d:83:1f:ec:8b:a6:a0:8d:66:e2:de:7a:23:12:09:78:00:b9:
         c4:34:55:f3:bf:67:cb:cb:e1:cd:7a:54:90:d4:2a:f9:93:ad:
         5e:c6:b3:ff:53:33:c2:cd:f1:8f:2a:93:12:70:cc:d8:72:8c:
         5c:09:ce:98:7c:af:62:5f:bd:8c:9d:f4:98:93:e8:42:9f:2a:
         f8:17:a6:2b:5d:ae:9f:40:a8:dd:b5:5f:ab:ea:4e:1e:e2:da:
         aa:0a:1f:90:d9:f8:f5:69:32:25:6f:8f:57:2d:b4:02:0a:0c:
         13:f3:5a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----