Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c5635b3c-3fea-33b1-8d4a-453d23218d6d.roa
File:                     c5635b3c-3fea-33b1-8d4a-453d23218d6d.roa (raw, json)
Hash identifier:          zjtcXBORDm1hznZH/xjX4L+1OYYomqvT2cJftz219m4=
Subject key identifier:   A6:F3:82:AC:C4:B6:2B:D3:DC:F7:D5:6E:DC:25:A5:7A:5D:5E:C3:1E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848B266ED5342D076B48378A800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c5635b3c-3fea-33b1-8d4a-453d23218d6d.roa
Signing time:             Tue 28 Jan 2025 17:48:10 +0000
ROA not before:           Tue 28 Jan 2025 17:48:10 +0000
ROA not after:            Mon 28 Apr 2025 16:48:10 +0000
asID:                     33651
IP address blocks:        24.7.14.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b2:66:ed:53:42:d0:76:b4:83:78:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 28 17:48:10 2025 GMT
            Not After : Apr 28 16:48:10 2025 GMT
        Subject: CN=13f87586-a636-44e7-a5da-bdb7a702e91f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:7b:de:07:ad:2a:30:99:b6:dd:4b:34:ef:50:
                    fd:66:5a:ac:59:fe:8d:ff:0a:c2:72:42:bf:73:a2:
                    a5:07:51:d9:1d:ca:87:66:6a:a3:f6:5e:e7:be:91:
                    74:3c:88:3c:3a:06:6f:a4:6e:8f:60:db:5f:39:dc:
                    a1:b4:25:e7:96:0f:70:7f:a8:00:db:22:11:c4:cf:
                    91:39:0b:d7:65:44:59:9f:73:aa:87:12:7a:cc:21:
                    86:09:fb:0b:99:a8:ba:fc:f7:55:28:72:74:c2:b0:
                    cc:fe:39:2c:dd:cd:56:29:02:23:98:77:dd:0d:f2:
                    1b:78:84:67:c2:37:86:9b:00:b6:81:3b:6c:b1:6c:
                    54:4a:b7:58:27:b6:7a:a0:42:06:1f:34:bd:96:4a:
                    a0:c3:9b:b3:17:97:62:ba:20:f5:79:5e:e6:44:d7:
                    b2:91:5d:dc:80:92:1a:ec:10:0d:2a:15:fc:2f:42:
                    83:ef:9d:df:32:96:a5:3e:0e:dc:1d:96:25:5f:2f:
                    7e:bd:08:7a:c0:ef:ed:07:7d:cb:f5:13:d9:a9:d1:
                    76:75:5e:a2:1c:93:c8:3c:8e:3d:3f:14:4b:4b:8a:
                    47:08:21:86:f2:f0:88:5d:9c:ee:ce:dc:e9:27:79:
                    e2:44:e2:6b:9d:8b:c0:85:e5:05:b5:ea:f4:8b:cb:
                    be:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:F3:82:AC:C4:B6:2B:D3:DC:F7:D5:6E:DC:25:A5:7A:5D:5E:C3:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c5635b3c-3fea-33b1-8d4a-453d23218d6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.7.14.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:fd:8c:6f:b5:c1:61:f7:03:e3:7a:59:3b:20:8d:b3:48:6b:
         03:eb:71:e8:48:fd:49:0b:8e:cd:7c:9e:66:bf:7c:33:fb:51:
         8d:30:9d:12:e9:22:11:79:69:61:73:76:73:7a:9d:fb:22:30:
         7b:19:68:76:b6:ba:27:96:54:b3:a5:6b:f2:82:9b:4a:cb:6d:
         67:ff:c9:b5:29:df:86:7e:bf:2c:38:fe:6e:ed:2c:18:02:38:
         66:50:37:d8:87:c5:f4:66:03:28:aa:53:13:71:ad:f8:25:9d:
         3b:70:5c:21:0a:9f:93:0f:72:eb:3a:85:13:66:9c:85:5d:c4:
         9e:28:3e:a7:67:a2:ba:8b:d5:7c:88:4b:f8:28:64:e3:94:5d:
         c2:92:36:7f:37:da:31:85:b8:a5:e9:18:ce:33:9e:d7:2c:69:
         30:ca:75:c5:0b:4e:00:87:6d:3c:b3:58:e8:2f:11:c6:aa:08:
         87:72:2d:74:38:96:db:7d:b8:61:fb:eb:40:0b:6d:c4:11:7e:
         29:8f:56:ae:fc:b2:ca:72:a5:bf:c0:4e:20:90:0a:71:14:07:
         24:0d:7f:01:4b:5b:f9:ba:dd:26:c8:e0:22:dd:e7:6a:71:17:
         1c:74:c6:a0:7e:81:e4:50:38:9a:9c:da:65:e3:e4:3b:a6:8d:
         1b:61:3a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----