Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c12ac1cc-43dd-3010-a3a4-c6ce7a87b6d7.roa
File:                     c12ac1cc-43dd-3010-a3a4-c6ce7a87b6d7.roa (raw, json)
Hash identifier:          pHBieicAuNbWu+Pi+KSdI3vNAoocw3SS+KgT9s1KItA=
Subject key identifier:   2B:C6:92:67:C9:71:35:66:DD:A0:67:27:1C:FD:C5:E8:8A:32:ED:3D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA5FDD56DEB0FCD2A9E1600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c12ac1cc-43dd-3010-a3a4-c6ce7a87b6d7.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     7016
IP address blocks:        96.108.232.0/26 maxlen: 26

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a5:fd:d5:6d:eb:0f:cd:2a:9e:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=7a715edd-d270-4a3c-81ab-e9a4cbe73746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:db:91:4a:e6:a3:54:1f:a8:71:37:3e:fd:e5:
                    17:1f:15:dd:d1:eb:45:cf:58:7a:29:90:00:7c:2a:
                    e1:60:5a:6c:39:ae:bb:40:69:f7:13:2e:a6:c5:ae:
                    19:93:3c:34:8c:59:0f:f3:d8:5b:9c:16:cc:98:88:
                    37:cf:2d:f9:81:fc:b5:99:e5:f3:26:bb:8e:e5:c7:
                    a5:90:be:d5:61:50:db:22:70:07:85:76:16:8a:ee:
                    b7:58:da:16:cf:6a:5f:bb:7c:f5:af:20:a3:c6:c6:
                    9e:4e:43:8c:5c:e8:0e:92:48:75:fa:1d:d5:67:06:
                    f4:a1:91:66:d5:92:14:5e:37:53:b1:f7:b0:fc:11:
                    fd:2e:f1:b7:a4:4f:00:b6:4a:1b:93:4c:87:40:f3:
                    8e:6b:d9:75:43:5e:81:19:4b:e9:f2:c1:18:75:4f:
                    23:13:56:98:b6:51:87:43:f0:ae:18:f7:a1:d6:fa:
                    f7:df:87:f3:63:4a:42:28:77:77:66:ec:61:5b:be:
                    6d:4e:b7:be:7b:24:f2:ea:78:c5:27:2e:82:63:9f:
                    e4:e6:96:51:02:75:e6:6e:ec:57:e7:bb:08:4c:9e:
                    41:77:8c:ff:e7:57:9d:8d:37:4b:11:d7:d0:18:49:
                    17:db:41:56:1a:6c:24:e2:5a:a1:c0:cb:0a:d8:68:
                    c6:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:C6:92:67:C9:71:35:66:DD:A0:67:27:1C:FD:C5:E8:8A:32:ED:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c12ac1cc-43dd-3010-a3a4-c6ce7a87b6d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.108.232.0/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:f5:7f:7f:4d:cf:da:ea:3a:72:b2:6c:9d:8a:dd:57:b9:c3:
         12:53:82:31:2e:e3:8c:64:bf:71:d3:b3:8f:03:72:1d:c9:a3:
         27:3c:9e:ba:14:b5:3a:3e:52:49:dd:c2:c2:88:d5:58:37:03:
         1d:f2:68:83:89:fb:5d:11:9f:64:47:e8:1e:60:47:e3:28:2b:
         83:97:23:b5:09:8f:3e:93:db:57:5c:8e:32:f8:c0:65:8c:78:
         c9:e8:72:57:20:63:e8:da:ec:a2:a7:16:ca:6d:3d:c8:57:4c:
         1a:4f:50:cd:fa:f1:58:ca:24:ea:59:3d:1e:cd:33:53:15:8e:
         24:cb:6b:7d:75:36:e7:34:c8:c9:f6:a3:08:53:e6:60:38:5b:
         cf:3d:cc:d6:34:40:83:ad:ec:59:85:00:41:58:95:a6:a9:87:
         1f:c8:29:8b:35:48:3e:fa:ba:67:c2:25:49:e6:1f:37:35:36:
         4b:5a:3d:0a:90:9e:dd:b6:89:ac:b5:4b:a4:ca:84:43:a4:7b:
         4e:09:35:e5:ca:d7:48:57:84:72:84:f3:bd:bc:fd:05:e2:7e:
         d1:1f:fd:3c:a4:68:55:9d:5e:a3:2f:48:24:01:c7:20:9a:7c:
         c0:52:75:41:15:3a:25:a7:31:e1:8f:e3:42:19:78:a7:ca:fc:
         6d:d2:a1:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----