Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c5216fc9-8306-30f2-91a4-a9f71b298a46.roa
File:                     c5216fc9-8306-30f2-91a4-a9f71b298a46.roa (raw, json)
Hash identifier:          PSzkKIUofCYkhmabaL5mF/+sJ9gKlYO/iioK+XseRLw=
Subject key identifier:   ED:86:C5:AB:CF:FF:B5:A3:F4:DA:69:38:B9:20:51:48:63:F9:62:01
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA5D37B64CA04B6A0A27AD0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c5216fc9-8306-30f2-91a4-a9f71b298a46.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     22909
IP address blocks:        71.236.40.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a5:d3:7b:64:ca:04:b6:a0:a2:7a:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=17bb1d4a-c9ac-41ba-bc0a-b90f812ecdc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7f:c5:d5:50:87:da:c0:de:f2:0c:37:03:30:
                    1b:d1:54:11:f0:50:95:ed:8e:e7:07:dc:ed:aa:87:
                    74:3d:38:97:f5:40:5b:ed:d3:9a:61:98:73:fd:a9:
                    81:2b:da:1e:12:b1:cf:ff:98:38:cd:02:da:13:49:
                    7d:5e:b7:37:d6:72:85:30:cc:d5:04:1d:88:33:45:
                    ff:7a:d6:7f:22:80:b3:3e:10:94:28:a3:06:66:43:
                    7a:5b:ac:e0:c0:cf:01:21:ca:d8:c8:3f:67:00:8b:
                    ab:65:7f:28:66:88:12:fe:52:08:6a:66:cd:8b:d8:
                    ba:71:2a:d6:07:c9:62:d9:a7:ee:04:07:e0:30:a4:
                    b3:7c:8d:30:3e:29:46:14:14:6b:8f:04:71:47:d0:
                    d0:47:55:26:f8:e6:26:8a:38:83:cb:61:ae:96:df:
                    ed:78:10:e4:d2:6d:bf:3a:be:8d:ec:02:99:8c:42:
                    31:ca:78:bf:81:42:dd:58:6c:87:1b:b5:7f:30:26:
                    34:ca:f1:d1:d2:93:c9:49:81:01:18:57:23:a1:82:
                    57:59:65:2c:dd:ba:59:37:c5:05:f7:3c:d4:e7:17:
                    88:ea:22:ff:1f:59:b3:d6:cf:7f:ba:bb:07:12:aa:
                    3e:25:93:f2:25:41:7d:db:c1:62:18:88:cf:d0:bc:
                    aa:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:86:C5:AB:CF:FF:B5:A3:F4:DA:69:38:B9:20:51:48:63:F9:62:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c5216fc9-8306-30f2-91a4-a9f71b298a46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.236.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:d5:06:8d:83:87:b4:1a:58:94:24:43:3c:bf:cb:45:4a:b0:
         2e:e1:32:5e:ab:57:85:19:24:6d:de:88:51:eb:b1:c9:f7:50:
         a5:10:ae:ec:85:16:27:23:b0:f0:dc:dc:93:16:11:cc:aa:cf:
         3b:e0:90:00:73:e9:fd:e4:4f:db:73:77:fd:64:f5:c7:1c:54:
         24:25:a2:a1:82:f2:fb:6d:11:bd:e1:fe:4d:6a:b4:cc:c2:bb:
         a3:db:95:a8:ea:5d:c9:d2:13:96:1d:0b:bb:b0:94:49:6e:ac:
         bd:78:08:1c:b1:25:aa:35:1e:76:e6:2c:20:46:0c:68:22:d6:
         e6:9f:f0:d7:90:30:94:ee:c6:39:8f:f8:cd:4b:c0:43:a5:3c:
         20:dc:79:bd:ec:41:e3:28:5f:95:d5:64:ab:79:2b:4f:69:bc:
         ef:3b:ef:ba:ab:db:38:37:33:20:1c:6a:ef:ef:94:d8:6e:b4:
         aa:c6:ee:42:61:63:b4:43:87:a6:a1:0d:94:1e:9b:b2:7d:2d:
         aa:b8:fc:1c:57:ab:38:ed:d4:0f:a8:b5:ea:d7:de:e6:43:73:
         66:6e:d4:d9:35:65:2f:09:18:02:e4:d2:c1:e8:aa:57:e1:0d:
         89:f6:b0:57:b8:e0:e7:07:53:e4:66:6d:a3:8d:5f:ff:87:1a:
         57:2f:63:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----