Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d2bdab58-e9a3-39d9-8f7d-22f96ee2a0c8.roa
File:                     d2bdab58-e9a3-39d9-8f7d-22f96ee2a0c8.roa (raw, json)
Hash identifier:          7KXXDz1I7bzzjbC85ZjYwRh9WHurl5xJBfODcpL11a0=
Subject key identifier:   D7:D4:87:04:81:A7:89:E7:72:25:D8:58:3E:8C:84:45:A0:8A:34:3B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848B265935324B764AC2A7E8B65
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d2bdab58-e9a3-39d9-8f7d-22f96ee2a0c8.roa
Signing time:             Tue 28 Jan 2025 17:45:26 +0000
ROA not before:           Tue 28 Jan 2025 17:45:26 +0000
ROA not after:            Mon 28 Apr 2025 16:45:26 +0000
asID:                     33491
IP address blocks:        98.222.56.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b2:65:93:53:24:b7:64:ac:2a:7e:8b:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 28 17:45:26 2025 GMT
            Not After : Apr 28 16:45:26 2025 GMT
        Subject: CN=1ed52fc7-8d59-41e8-8b9a-21d062765019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:0f:d7:20:7b:e5:64:be:94:c3:d1:ed:d4:2d:
                    f4:8b:a4:e5:00:65:a7:a8:c2:34:7f:7f:18:e2:ee:
                    09:4c:89:0d:e0:fd:9b:19:f4:21:9c:40:37:b2:40:
                    af:62:4b:bf:d6:b8:57:61:8b:84:5c:8b:28:02:0b:
                    32:b1:59:6b:50:11:28:f4:85:cb:f4:28:66:27:22:
                    0a:fc:cc:f5:ec:6f:eb:b4:c5:27:85:a3:ba:2e:fd:
                    b3:f2:c8:45:46:10:84:6e:97:59:e7:c5:c8:f3:85:
                    fe:e3:9c:15:ba:6f:79:50:2a:ca:b2:84:15:47:4c:
                    99:5d:2d:78:ca:33:15:2d:fa:b2:5f:a6:08:65:a4:
                    58:ca:da:21:2e:45:5c:a9:26:5f:4a:71:64:1e:59:
                    7a:bb:d6:0e:e3:75:a5:98:0e:47:88:e4:9b:d4:e5:
                    8f:9c:bf:e3:9b:d7:10:79:53:82:9e:53:c9:6f:ec:
                    f8:b9:b4:a5:a4:a7:f3:94:29:27:6d:61:59:87:05:
                    3f:2f:e0:b2:72:36:48:21:74:0d:8b:b6:c3:48:8c:
                    09:df:a7:32:f2:87:ae:63:de:1a:38:1e:9c:f0:55:
                    b7:6a:7b:eb:f1:85:da:51:6f:59:db:b0:f6:05:3a:
                    e6:52:9b:5d:54:82:79:f7:74:34:53:7c:d7:2e:dd:
                    56:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:D4:87:04:81:A7:89:E7:72:25:D8:58:3E:8C:84:45:A0:8A:34:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d2bdab58-e9a3-39d9-8f7d-22f96ee2a0c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.222.56.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:77:40:f3:3c:47:e8:6b:7c:25:1c:0f:ba:e1:f6:60:af:17:
         5a:d2:06:8d:7f:45:de:b7:05:c0:fd:82:4d:63:f5:7b:1e:17:
         2b:62:e8:96:94:5d:cc:9b:81:f6:2d:a7:95:29:5d:7a:22:bc:
         6b:dc:b0:77:f6:20:7e:7c:a3:6e:be:14:84:7a:58:b9:ea:97:
         68:25:d4:76:97:8a:a4:7f:98:3d:47:5f:1a:81:f6:e7:eb:ae:
         b5:52:1c:56:b2:7d:1c:4b:9a:bb:03:83:2c:25:2c:4d:58:d0:
         05:9a:50:33:fa:09:55:d9:78:e2:f8:33:68:fb:7e:4c:73:75:
         c3:8b:5e:44:9e:eb:ff:1e:e8:09:4a:ae:51:f9:dd:07:29:db:
         dc:ef:f0:b8:42:b9:11:25:a2:94:af:03:59:fe:d7:3a:48:c5:
         90:b3:bc:e1:d7:6b:9f:e5:b2:c0:99:ae:3e:ad:9c:a7:80:40:
         4b:fc:3c:02:2b:6c:c1:e2:b5:20:1c:ba:89:a3:80:3a:d3:ab:
         73:88:bd:f8:f2:cb:4b:f9:dd:9d:1a:36:e6:34:83:a4:0e:e5:
         98:05:f3:e1:21:46:3a:27:0d:99:cc:b5:6c:43:d6:22:50:fe:
         46:e8:4e:c0:e7:e0:e0:c8:9a:25:d6:06:25:ed:a0:15:64:1f:
         00:af:2e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----