Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c464cb6b-64d5-3e43-a43b-12cea20db102.roa
File:                     c464cb6b-64d5-3e43-a43b-12cea20db102.roa (raw, json)
Hash identifier:          8sWixy3IicS0Io8yw6+DtYbL8/wn/muuYhqkV3iuCD8=
Subject key identifier:   CD:C3:F4:AB:56:1D:CD:EE:F7:79:98:9C:C5:50:A6:71:28:F7:A4:FE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA485F9BF36A60DB91C7FC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c464cb6b-64d5-3e43-a43b-12cea20db102.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     22909
IP address blocks:        68.85.50.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a4:85:f9:bf:36:a6:0d:b9:1c:7f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=dc69d623-ca25-4c6b-ae92-3c513d48a340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:bf:71:05:4d:12:9a:c8:17:9f:2c:08:ae:7b:
                    19:2f:ab:69:92:1f:70:06:fa:1b:03:de:82:da:5b:
                    1b:f8:74:51:77:d0:fa:a4:20:b6:db:47:38:58:24:
                    25:3d:33:31:d1:02:5c:2d:33:c8:76:36:13:2c:77:
                    04:ff:c6:ed:82:7e:b1:d2:c9:e8:f9:a8:7c:b1:c8:
                    85:ac:ef:77:ae:cb:8f:f0:1e:26:e0:53:5f:e2:2d:
                    2b:84:81:54:bb:53:1b:6c:9c:b2:66:b5:b3:56:fc:
                    ec:f0:78:7e:3d:c0:8c:e6:cf:8a:d3:18:fd:e6:f6:
                    df:3c:42:b6:f1:0f:dd:67:34:8b:5b:98:8e:cc:87:
                    20:98:f3:5a:a8:8e:5a:6e:ae:f2:06:7d:df:5e:d0:
                    82:4d:0d:a1:dc:8c:e8:fb:12:94:85:9b:76:c9:e5:
                    d3:47:98:99:7f:86:83:4b:bc:f0:04:26:6e:66:c0:
                    39:15:fc:a7:e9:d1:1a:8d:d3:50:aa:48:0a:16:fe:
                    fd:cb:1a:88:15:68:5c:25:fa:5e:5b:fa:53:7c:55:
                    6b:57:ce:9c:e5:3c:e9:44:0f:83:3e:9f:db:21:f2:
                    74:81:45:1c:36:9f:29:be:4f:fc:06:00:c8:c1:60:
                    bb:15:c1:24:cc:a3:94:26:1c:90:79:0c:ec:89:e6:
                    0f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:C3:F4:AB:56:1D:CD:EE:F7:79:98:9C:C5:50:A6:71:28:F7:A4:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c464cb6b-64d5-3e43-a43b-12cea20db102.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.85.50.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:38:fd:8e:e9:b7:ce:e6:95:b6:d3:68:c3:b5:b9:db:de:1f:
         ca:1a:39:44:1c:b7:33:15:e7:7e:8b:b6:4d:c1:8e:7c:72:d8:
         ac:b6:8d:51:4d:ca:cb:38:04:2f:f0:b8:3d:16:22:33:29:4d:
         c9:4a:12:57:af:27:81:64:39:a4:0f:57:15:58:66:90:6c:48:
         21:da:84:9e:51:ba:64:45:d3:c1:40:9c:8d:ba:17:9f:4b:b5:
         14:22:6c:3f:ea:85:11:aa:69:e2:f1:52:ae:cf:76:32:7f:9e:
         a7:79:4d:46:68:62:65:3e:e5:66:14:86:78:d3:27:1c:25:8c:
         73:1f:89:78:59:af:d5:92:be:03:7a:8a:13:61:51:da:e5:91:
         94:9e:ba:3c:c1:c5:d7:72:ba:0b:21:4f:04:60:eb:42:d7:42:
         b2:b0:b4:8d:75:91:24:2f:bd:3b:30:8d:09:5a:0c:50:27:4b:
         22:3f:ab:8d:30:bd:74:62:6a:7f:11:8a:a0:23:d0:a4:b5:29:
         57:a3:04:2c:be:68:94:e3:e5:7d:28:9b:2c:f9:ef:72:97:e9:
         53:28:2b:2e:b5:72:27:2e:dd:c0:97:3b:c5:31:e6:f2:97:66:
         ea:17:09:29:76:5d:40:64:89:94:6e:91:11:c3:62:ff:f5:73:
         9b:df:f0:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----