Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/abed704f-833f-3a41-8ca0-86683e9b407b.roa
File:                     abed704f-833f-3a41-8ca0-86683e9b407b.roa (raw, json)
Hash identifier:          2tTlmIgnFC+jzWKL6+ocBllJ9zl+Hq8qq6n5UC4HTkE=
Subject key identifier:   3C:7E:2F:79:6E:76:94:A2:F9:92:F0:E7:F6:47:31:FC:82:36:86:29
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA65F7C6C975A8453F33380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/abed704f-833f-3a41-8ca0-86683e9b407b.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     7015
IP address blocks:        162.150.192.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a6:5f:7c:6c:97:5a:84:53:f3:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=ca938c8f-51ee-4353-bb3b-fefba6192152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:52:14:27:c1:97:c6:04:8a:2f:98:41:6d:69:
                    d4:62:d9:69:d0:ab:69:af:e4:cf:32:1a:0d:46:67:
                    d9:45:f4:5d:c4:c5:e8:cf:c2:30:1a:90:51:1a:72:
                    b3:f8:1a:d9:df:5e:cb:b2:52:18:bd:b5:fc:5a:05:
                    74:57:0d:e3:ae:15:0a:af:33:e0:29:6b:3c:02:b4:
                    e4:6c:df:57:bc:08:f6:f3:09:b0:71:8f:40:8b:cf:
                    1f:b5:c4:ce:4b:83:b4:ee:6c:1c:aa:c0:74:0c:30:
                    4b:30:6e:3d:d7:80:db:d0:4e:62:e0:26:3c:0c:94:
                    9f:79:80:3a:3c:eb:3c:61:d3:a2:a0:df:36:e8:65:
                    a6:7c:98:0f:0a:20:88:48:dc:d9:81:15:a8:09:b3:
                    0a:29:c5:cf:bc:80:b3:d7:fa:3b:cf:b9:3c:86:7c:
                    17:ab:d6:06:83:f3:37:94:71:a2:73:ed:a8:32:dd:
                    3d:8f:e9:c8:52:b5:10:6d:b1:5d:c2:66:a6:1d:1e:
                    09:35:30:53:17:6b:60:c4:37:11:36:99:73:5e:11:
                    89:d7:a7:fd:17:87:02:21:b3:ee:e7:31:fd:a7:10:
                    4e:e6:16:da:7e:37:6d:7b:63:ef:ea:46:fa:43:f0:
                    7b:1d:16:42:78:1f:61:e2:62:df:89:09:85:5e:38:
                    8d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:7E:2F:79:6E:76:94:A2:F9:92:F0:E7:F6:47:31:FC:82:36:86:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/abed704f-833f-3a41-8ca0-86683e9b407b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.150.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:4e:01:80:9e:6c:2f:05:3a:0b:58:b2:2a:d0:c3:35:56:3e:
         78:0f:cc:62:d7:d7:fc:fa:98:9b:4f:d3:8f:1d:95:0e:44:f9:
         bf:e2:53:78:f7:cd:c3:0a:9d:27:34:48:5f:d9:32:d4:19:55:
         b9:f7:a1:c9:54:18:7c:d7:05:1e:84:3c:21:72:20:da:12:a6:
         75:87:92:f9:bc:f2:11:92:54:e3:e7:fe:c9:b4:de:32:e9:dc:
         59:f5:f6:81:c7:32:df:73:6f:17:69:d3:8f:4a:f5:f5:aa:94:
         cd:d0:1f:6d:be:e3:f4:d6:2f:c7:1e:f0:83:a5:eb:35:b0:b1:
         e3:c3:5d:5b:82:cf:54:28:b7:da:2a:9d:78:61:2b:83:83:02:
         4e:67:06:27:87:89:30:d7:0c:c2:fe:db:8c:fa:72:a4:eb:82:
         ac:b1:37:75:6c:55:7b:73:53:78:bc:79:de:a9:39:11:80:be:
         c7:5f:4f:49:23:7e:4f:80:17:b0:30:6b:cf:57:05:a7:0e:6b:
         e5:52:37:b6:ca:e3:79:02:2e:f2:eb:5a:a2:37:93:be:47:04:
         c8:0e:88:66:03:5b:4d:9f:cd:fe:81:29:ee:7d:03:4e:b3:66:
         0f:e3:34:80:f1:68:58:18:c5:6a:d2:ea:b1:17:af:31:fc:08:
         72:eb:09:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----