Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aaa25035-e9e3-3f9e-834f-231ef49a54f9.roa
File:                     aaa25035-e9e3-3f9e-834f-231ef49a54f9.roa (raw, json)
Hash identifier:          +679oTiFn7sThnvO3zNIkj2AII9+ius3PHdpDzVcxPo=
Subject key identifier:   06:08:A2:D6:8B:9C:1D:0C:91:C4:96:53:FE:BE:6B:10:2B:0D:F6:1B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA4FCBACB429B211B51B100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aaa25035-e9e3-3f9e-834f-231ef49a54f9.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     33662
IP address blocks:        2001:559:19b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a4:fc:ba:cb:42:9b:21:1b:51:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=8a4b265b-ca76-4fd3-bdce-c1c472863d34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f2:3b:2b:24:8e:d7:35:c5:83:1a:a5:fd:03:
                    4b:0c:ed:c4:f4:04:e1:c2:77:e9:04:33:15:82:91:
                    c1:a0:09:ec:96:e4:76:4a:d9:6f:6f:0f:23:9c:12:
                    82:09:e1:9f:35:27:ca:c4:bc:12:35:2d:55:f3:b9:
                    d0:80:3c:42:75:6d:63:bd:8b:a7:cf:0f:97:e9:0f:
                    e1:8f:88:40:5c:7d:a3:d4:d3:58:8d:f7:c1:fc:a5:
                    94:05:bb:7d:b5:8d:3a:75:40:e4:2f:be:60:fb:bb:
                    bc:a3:6c:18:ea:09:72:85:ed:ad:01:42:30:25:db:
                    9a:86:ed:0c:4e:2f:d3:de:b5:21:92:68:c0:fa:c1:
                    9c:51:c5:10:4f:9d:c9:7a:e3:96:6b:ce:0d:dd:1a:
                    aa:63:1d:b2:d4:cd:b7:6d:61:36:c8:97:7f:01:c7:
                    28:60:53:da:bd:4c:33:6d:99:ab:40:c3:9e:7b:a0:
                    ef:6b:66:ac:9a:1b:42:3b:4f:f9:6a:dd:08:ed:65:
                    f2:8a:0b:a5:30:c5:f8:37:4c:58:ca:a7:4a:0d:bd:
                    78:f6:6f:b7:da:d8:95:3a:fb:6d:3a:74:31:e7:9c:
                    f5:b9:19:47:02:fb:0d:04:71:4c:fe:c2:66:5e:ff:
                    1b:17:91:17:f7:73:9f:f2:90:9d:8e:e6:bd:24:42:
                    a7:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:08:A2:D6:8B:9C:1D:0C:91:C4:96:53:FE:BE:6B:10:2B:0D:F6:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aaa25035-e9e3-3f9e-834f-231ef49a54f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:19b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:ea:3b:49:04:fb:bb:f6:f5:b2:10:cf:f6:d9:fd:70:73:9a:
         d0:d6:57:fc:67:0f:fc:e3:4b:0a:b4:c6:9a:26:c5:b6:c2:34:
         4c:3a:d3:9d:8d:29:d3:18:dd:1c:a7:d4:b1:d2:1f:ef:a2:11:
         f5:70:b1:dc:23:4d:59:f6:d4:32:66:54:a5:0b:a2:0e:7a:dd:
         89:ce:be:11:94:f2:9a:a1:44:f0:92:91:ab:f6:8e:68:87:73:
         d8:67:10:46:a5:1d:8d:1e:6f:55:9c:be:3f:34:90:fc:ab:a7:
         78:17:5f:59:d4:3c:82:22:d1:38:1c:39:8d:71:e6:e2:c3:84:
         32:17:f6:a7:c3:83:d6:54:12:49:8c:f3:41:35:07:f0:a1:a7:
         8d:d8:59:83:74:e7:1e:f9:cb:79:51:fd:91:bb:03:e9:cb:0f:
         e5:1e:db:3f:ff:ac:ab:f6:87:45:97:24:76:8f:7d:06:7e:64:
         f7:0c:65:4c:56:44:ff:6f:02:46:fa:24:3d:de:c5:49:f5:96:
         45:ed:f5:63:21:f8:5f:58:1e:5b:1a:f6:86:76:38:cb:08:8d:
         71:25:e7:20:c4:c3:98:71:7e:f1:8f:66:a5:48:c5:2d:9f:68:
         40:f6:bf:50:80:66:cf:4e:fc:a5:f2:6f:af:10:a9:32:0a:41:
         07:37:25:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----