Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9d850da6-5ae4-33c7-a512-9568c0cc9144.roa
File:                     9d850da6-5ae4-33c7-a512-9568c0cc9144.roa (raw, json)
Hash identifier:          KtFRoz4rB2F9ytkNanSqsrccAaXtltXb+WgdrlaNdWg=
Subject key identifier:   3E:38:28:33:2F:EA:60:47:E3:76:FC:81:C7:62:CE:DC:05:BC:88:5D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848B269022C23290277A4157E80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9d850da6-5ae4-33c7-a512-9568c0cc9144.roa
Signing time:             Tue 28 Jan 2025 17:52:21 +0000
ROA not before:           Tue 28 Jan 2025 17:52:21 +0000
ROA not after:            Mon 28 Apr 2025 16:52:21 +0000
asID:                     33651
IP address blocks:        96.114.65.192/26 maxlen: 26

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b2:69:02:2c:23:29:02:77:a4:15:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 28 17:52:21 2025 GMT
            Not After : Apr 28 16:52:21 2025 GMT
        Subject: CN=f3f605ca-3f00-4213-b6bc-c23d7c660a31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4c:67:a5:dc:8a:71:8f:05:a5:b3:3f:d0:47:
                    0b:76:58:6c:93:ae:8a:2e:fd:8a:ff:5c:90:90:fe:
                    49:cb:26:91:af:db:e3:fc:b1:42:55:bd:6d:cb:7d:
                    e6:08:dc:e4:ee:76:6a:03:24:09:30:33:18:85:0b:
                    93:77:9a:33:ec:ce:2f:d4:42:f2:a1:4b:f3:e0:90:
                    57:e6:20:70:00:c1:95:9b:7d:f4:df:de:29:64:13:
                    56:c6:a3:b8:aa:ba:03:ef:49:ca:9e:42:97:d8:3e:
                    52:a6:05:01:43:9f:df:a5:7c:3f:c6:1b:14:76:ae:
                    f7:be:9e:f3:75:81:a1:a5:19:a7:34:7e:1b:b9:5d:
                    54:20:6e:de:a3:ae:68:a6:97:ac:4d:7f:ac:72:29:
                    fd:4a:01:fb:db:24:04:8b:ad:7a:1a:ea:a8:e1:8d:
                    f4:d8:44:ec:5b:80:8a:5c:c4:1b:4c:a1:06:32:5c:
                    c1:f6:1c:95:09:53:6a:12:aa:6b:85:fa:6f:f6:aa:
                    76:d7:6e:a3:44:02:5b:fa:45:0e:eb:32:d5:1a:41:
                    fc:3d:48:3d:0b:d4:d9:7d:f5:32:1c:89:8d:6a:a3:
                    d2:64:b0:38:3b:3b:3c:01:e8:89:e2:51:a8:e6:e2:
                    e9:d0:f1:7a:07:2d:a6:7a:97:a1:a5:74:e1:13:27:
                    fe:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:38:28:33:2F:EA:60:47:E3:76:FC:81:C7:62:CE:DC:05:BC:88:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9d850da6-5ae4-33c7-a512-9568c0cc9144.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.114.65.192/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:9b:48:48:8e:c0:96:ca:4a:f7:62:9d:3b:87:c0:0c:7b:76:
         cf:ee:4f:b6:b4:91:5c:39:00:b7:5b:ff:28:89:fb:44:99:03:
         47:36:e6:03:c0:8f:9c:3a:36:a7:15:75:30:0c:e6:21:27:1e:
         74:24:84:e3:22:90:ec:06:24:81:26:2f:c8:68:8a:3d:c3:ae:
         34:85:2f:65:75:62:a9:f2:92:2b:71:6a:d7:9f:8f:de:c7:47:
         f3:24:98:56:87:28:4f:21:fe:af:a0:dc:0e:76:bc:dd:b2:8b:
         a0:70:35:18:e6:fb:6f:75:e4:cb:4a:3e:89:c4:e3:eb:52:62:
         ed:e6:24:61:01:1f:66:71:43:58:5a:70:02:47:51:bb:c2:89:
         8f:c1:31:37:80:dc:e1:1f:d3:6d:94:27:5d:5f:5d:60:cd:1c:
         ad:b5:aa:d8:19:0b:9c:20:b6:f0:88:66:83:46:17:dc:3a:9c:
         5e:8e:fc:64:5e:c5:3e:c5:14:3d:8a:5e:01:50:d9:ef:54:ac:
         88:f6:05:94:6a:93:e2:a0:67:48:ee:34:3a:ab:7c:fc:15:97:
         d9:52:ab:58:16:3e:42:2c:b2:42:1e:3e:44:24:e4:57:4a:86:
         f3:6b:97:6c:4e:43:2e:43:db:a5:e6:da:dc:5b:27:a4:5b:18:
         bb:47:37:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----