Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c0189c3c-d3d6-30db-a8fc-f21a5ccd650f.roa
File:                     c0189c3c-d3d6-30db-a8fc-f21a5ccd650f.roa (raw, json)
Hash identifier:          bCmKDcr4KIgHe0GsvEJ0IEEs3W6m0goLR+MZ4uj9Bu8=
Subject key identifier:   F5:A4:2B:43:60:FD:41:78:DC:2C:A0:D0:79:B3:80:33:DA:91:E6:0C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F9588E45835AAB30ACA380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c0189c3c-d3d6-30db-a8fc-f21a5ccd650f.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     33662
IP address blocks:        98.196.107.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f9:58:8e:45:83:5a:ab:30:ac:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=f5df5b33-4335-43c3-89a7-d6f1c6706524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d2:7c:16:21:a3:7a:9e:b9:df:42:88:3a:a9:
                    87:8a:10:b0:51:61:e7:00:61:7a:06:33:e0:1b:65:
                    a0:da:24:4f:8b:ff:f5:0e:f5:f8:3e:0a:65:bb:aa:
                    ab:33:3f:2d:50:87:40:94:b6:52:f6:ec:2c:cc:9e:
                    9a:e3:6e:4c:f9:41:95:f2:a6:5a:ac:66:79:fa:0e:
                    fd:d2:d8:47:16:61:39:bb:e8:55:f9:0d:b0:9a:ac:
                    70:f6:90:71:de:e3:ba:e4:4f:87:b9:80:7d:ea:1e:
                    08:37:0f:c7:4f:ac:54:01:55:86:14:4f:20:13:5a:
                    c0:10:7b:ae:51:98:e6:95:7e:58:7a:d9:9f:3a:d1:
                    f7:b9:5b:30:6b:2b:4c:1b:50:37:60:f5:17:8b:99:
                    dd:4e:78:44:a0:5c:bd:20:77:d0:77:94:48:fd:15:
                    c6:f9:d1:34:47:01:d0:0e:b7:ff:cd:a5:f0:47:0d:
                    1a:f5:5c:cf:8c:2a:d4:95:6a:e8:01:50:ca:3d:db:
                    84:bf:a8:9b:70:b7:3e:a3:c3:6f:05:0e:c0:e7:2b:
                    b0:a4:0d:9d:c9:97:78:ee:43:33:ca:ac:68:e7:b9:
                    b8:e1:ce:ac:aa:e6:32:36:65:95:eb:bd:15:8e:25:
                    58:84:a5:de:74:0c:e2:3d:43:0b:9e:dd:90:9f:44:
                    64:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:A4:2B:43:60:FD:41:78:DC:2C:A0:D0:79:B3:80:33:DA:91:E6:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c0189c3c-d3d6-30db-a8fc-f21a5ccd650f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.196.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:19:46:5e:0e:43:4d:47:24:a6:4e:15:fa:5e:17:67:ef:cd:
         36:b2:62:54:47:dc:b0:0e:f2:77:0e:8b:41:1c:65:f3:af:e1:
         c0:99:7a:84:53:87:c4:9d:35:77:27:48:35:91:f0:6a:66:94:
         78:eb:ea:a6:24:60:2e:75:e6:fd:ef:a8:7a:a5:47:66:e5:45:
         e4:a1:e3:0b:9c:59:41:dd:63:c0:7a:ff:bf:15:b8:36:fc:f0:
         3e:05:82:e2:6e:31:0d:d7:d0:dd:4f:35:63:51:e3:f7:24:7f:
         d6:e0:5f:6f:20:e7:81:88:df:d5:4c:6b:7d:e4:92:4a:c0:29:
         cc:ea:86:84:a6:ef:e9:d6:2e:2d:ac:31:5f:9e:6b:d9:38:0e:
         63:f7:b1:84:6d:c0:eb:0d:f0:16:ce:ed:25:08:df:3e:49:33:
         c7:c4:80:1f:b1:d4:ef:b8:8c:88:08:22:a9:22:bf:67:aa:d4:
         00:e5:9a:fd:9b:b9:8f:3e:7a:06:87:0f:df:b7:a0:6b:32:1f:
         52:d2:94:56:09:02:b6:b6:1a:a5:03:1d:21:48:79:a2:21:e4:
         90:99:a4:0b:d6:e9:47:71:e4:31:ed:f9:56:e6:e3:3f:be:ee:
         b0:f6:af:94:e1:c1:5c:81:ff:3f:3a:a6:a0:96:bc:87:89:a0:
         00:7b:22:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----