Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aeabeecd-707f-3f73-a685-9892266dad3a.roa
File:                     aeabeecd-707f-3f73-a685-9892266dad3a.roa (raw, json)
Hash identifier:          0m9jOnCnrxfwe5fuzIb/xavisz66nv/T3pYSuscuh7w=
Subject key identifier:   9F:81:D9:5E:FF:4A:4F:87:FD:CD:8A:9C:86:88:C3:37:D4:F3:B8:AE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA584C69A6E6F12332C6700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aeabeecd-707f-3f73-a685-9892266dad3a.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     33491
IP address blocks:        98.46.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a5:84:c6:9a:6e:6f:12:33:2c:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=993bdf84-23a2-4f7f-b27f-aca35f3d1bb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2d:38:44:1d:37:e8:7b:ba:6a:eb:04:91:7b:
                    24:ce:6e:b2:52:32:8e:59:78:84:7a:a6:88:d9:10:
                    e9:e8:8f:53:5b:a2:25:6a:ae:5f:3f:e1:32:a9:2c:
                    da:f7:5d:c8:f1:3a:76:49:0b:9b:d5:8a:32:43:67:
                    ed:8d:d8:d7:fc:e0:68:bd:b7:0e:91:28:b0:7c:0d:
                    9e:98:7c:3c:e9:09:38:05:a4:bf:b7:9a:69:8b:33:
                    ec:e6:fc:84:3a:4d:18:5f:8c:8c:ab:f6:91:f0:40:
                    59:80:49:20:b6:3f:c9:d5:a1:9b:ec:c4:33:11:ba:
                    d2:78:9f:17:bd:ce:45:50:ec:2d:7a:59:59:99:c5:
                    ba:e2:06:16:b5:8c:f5:c2:5e:94:66:d6:00:b9:5a:
                    f0:f4:1d:8b:6b:28:75:1c:cb:92:61:4e:9e:39:2a:
                    e2:b3:33:46:35:04:da:2d:16:1f:19:65:39:4a:d9:
                    5f:12:c0:7c:cb:86:bc:4e:40:ae:ce:92:8d:c5:76:
                    a0:14:6c:4c:0f:05:49:74:c7:99:2e:e3:6d:2e:9f:
                    92:cc:a8:96:ad:6a:62:e7:de:14:ef:ab:c8:e2:9f:
                    e8:82:3f:fb:68:e3:f6:14:94:46:95:e1:8e:e5:1d:
                    d8:01:6b:03:52:e8:67:d6:66:f0:be:78:65:c9:9a:
                    ed:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:81:D9:5E:FF:4A:4F:87:FD:CD:8A:9C:86:88:C3:37:D4:F3:B8:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aeabeecd-707f-3f73-a685-9892266dad3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.46.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:49:b9:e0:9b:04:1f:e7:ec:c2:30:bd:7a:c1:8c:4e:24:e3:
         b9:d9:59:7f:04:60:4d:ea:8d:70:b9:94:3e:c0:53:bf:94:5a:
         e7:a3:a7:66:ca:34:ee:84:de:ba:3f:d3:a7:03:91:27:fa:9f:
         c9:36:91:2d:89:76:25:d7:e5:32:7b:f5:c5:ef:f9:a8:7c:88:
         8c:a8:2d:44:0e:b1:f2:2f:09:f7:79:db:78:fb:20:a5:5c:1d:
         78:39:9a:7e:e8:97:9a:c2:0a:d9:5c:a1:d1:a1:5b:5e:95:f8:
         6f:c4:9f:e0:65:48:2c:54:e9:fe:1b:25:08:62:74:c5:25:8c:
         ff:17:8b:7d:a3:c9:8d:15:19:01:f6:92:69:20:e5:40:01:a4:
         48:1c:e5:3c:0b:92:58:46:0c:81:57:8f:9f:ea:ab:d6:a1:6b:
         35:0c:f3:c4:cb:c5:ad:dc:2a:1e:94:61:bf:da:00:b1:10:79:
         a5:a7:f9:06:88:69:77:3f:9f:72:25:89:c8:8c:d9:c5:91:20:
         8e:70:3e:57:23:03:59:f7:f6:ef:26:f7:7b:cd:88:10:52:dd:
         3b:6a:63:7d:54:0a:fe:04:dc:e9:40:ac:ec:e6:4d:4b:16:ba:
         d4:21:b4:da:73:32:92:a1:27:7d:27:65:df:19:19:e0:27:53:
         36:21:44:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----