Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7c289c6-92c9-3d4a-bbc8-ea59f8ca261e.roa
File:                     a7c289c6-92c9-3d4a-bbc8-ea59f8ca261e.roa (raw, json)
Hash identifier:          etH8hCtpbTT2HHOawVL6eTwLiGKzkAzYrbQHW/VcVWo=
Subject key identifier:   DE:D6:FD:6D:DA:BB:0E:73:41:FF:BD:50:38:27:F5:21:BE:7F:43:9F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F8DBBCAC59EFF1B7E7D680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7c289c6-92c9-3d4a-bbc8-ea59f8ca261e.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     33668
IP address blocks:        68.36.160.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f8:db:bc:ac:59:ef:f1:b7:e7:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=bca18da9-23f7-4286-a067-0653b506ded1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e8:df:d7:b8:66:44:fa:08:f7:ee:20:95:62:
                    33:ed:f7:63:7c:80:70:49:04:95:91:e3:38:4b:7a:
                    02:69:bb:c3:67:dd:2b:30:f3:fc:24:74:0a:85:69:
                    b9:14:c3:2b:a3:e3:aa:9e:1e:20:1a:30:84:3d:11:
                    da:ca:dd:78:bb:e9:bc:55:37:6b:bd:d2:4e:e4:7c:
                    c5:84:6c:7a:a4:a8:5a:e3:62:bf:44:af:2f:2e:77:
                    7c:a1:07:43:c6:5c:d6:01:47:1a:9a:e1:b6:f2:a5:
                    81:26:b1:f7:98:64:84:ee:50:83:b1:18:87:19:c0:
                    e7:96:4e:5b:54:60:c4:cd:d6:34:8e:4f:7c:6b:2f:
                    af:fb:12:5b:b2:5d:a3:21:bf:3a:fa:1c:ad:a9:5e:
                    fe:2f:bf:dc:30:06:c4:38:e8:c7:97:76:ad:99:26:
                    9b:30:e8:8a:5a:4d:20:11:4c:4f:f2:d9:56:59:8e:
                    06:08:88:f0:7d:00:85:ec:23:c9:9f:be:f0:40:4c:
                    9d:9b:19:fd:30:97:1f:4c:8f:14:6f:74:09:75:ba:
                    bf:77:ff:d4:80:56:2e:99:7b:9f:53:37:5b:66:93:
                    db:1b:54:78:9e:c9:ec:43:0e:36:43:d4:f3:58:ec:
                    82:4f:85:9a:94:b4:4a:07:80:88:0a:f0:80:68:5b:
                    ae:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:D6:FD:6D:DA:BB:0E:73:41:FF:BD:50:38:27:F5:21:BE:7F:43:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7c289c6-92c9-3d4a-bbc8-ea59f8ca261e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.36.160.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:f7:05:5a:47:8f:8a:3b:49:0f:65:70:f3:4f:18:ee:e1:66:
         af:4f:41:cb:28:28:d9:2f:d6:50:9a:e2:90:ba:17:69:56:2e:
         78:5b:6e:34:c0:7e:d2:c2:57:58:98:af:0c:94:1b:24:cf:aa:
         b9:36:e7:3f:19:b0:e4:5f:4e:97:e8:16:54:46:47:09:9e:5c:
         8d:31:bf:1f:88:eb:10:51:41:9c:d5:e5:7b:05:38:b0:36:2f:
         6c:83:5f:34:81:b8:ab:c2:fb:75:ae:e6:cf:a8:19:fc:52:4c:
         14:82:ce:f7:c9:f4:e5:38:b9:e6:b1:a5:e6:bf:04:15:d2:1b:
         69:8e:5c:ba:4f:eb:d8:d5:4f:a8:be:ac:4d:9d:3f:5f:4b:0c:
         5a:f2:58:91:f1:fa:e7:b8:bf:45:57:62:d6:e1:23:d7:88:38:
         f3:2e:86:a3:37:6c:66:e5:e6:b0:25:36:ca:5d:8d:bb:5d:79:
         83:67:6f:8f:b0:78:af:bc:cc:b7:9e:12:aa:b6:ee:cb:43:70:
         5f:2a:0c:65:a8:71:9a:bb:ba:b7:b6:a9:1d:82:8e:2e:a7:27:
         4c:ea:06:68:ef:19:bf:93:73:fa:6f:a0:50:47:87:b3:02:8c:
         67:08:43:5e:5d:6e:eb:74:c7:2c:d3:d3:6a:cc:7c:b1:2a:55:
         42:d1:bb:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----