Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d6f5f458-1a09-3091-81c3-a92d79dc9108.roa
File:                     d6f5f458-1a09-3091-81c3-a92d79dc9108.roa (raw, json)
Hash identifier:          8Dm7rArBMnAlDT+rtFjQoOjgtBSDPLuH7fEM4MZN/00=
Subject key identifier:   63:FC:69:60:2B:7B:A5:2F:62:C0:7D:51:D6:CD:FE:93:DF:BE:12:0C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA62BBE35938E62FF314780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d6f5f458-1a09-3091-81c3-a92d79dc9108.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     33651
IP address blocks:        50.175.130.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a6:2b:be:35:93:8e:62:ff:31:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=0432c698-3674-427d-b8bd-181a434ddccb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fd:6f:86:38:8f:9a:be:fe:70:0a:fb:8b:79:
                    74:3d:d4:be:29:8b:c3:b5:cc:6c:0a:ec:9c:8a:a6:
                    fc:0a:37:89:79:d9:c0:b3:d9:cc:a5:14:55:22:30:
                    51:f4:ed:97:b2:6c:4a:98:2a:a4:c5:86:be:b6:a1:
                    7d:d0:4f:dc:0c:d5:a6:d3:a1:85:9d:5e:5f:3e:83:
                    b6:ef:93:42:76:dd:71:03:af:3e:d9:74:21:1f:a6:
                    09:77:f7:fe:b1:e5:68:d7:5e:13:6d:bd:b3:11:c6:
                    b7:d6:d0:19:93:8f:d8:be:20:49:19:1f:48:82:3c:
                    8a:ee:77:be:a6:73:ce:50:e9:9a:c0:95:a6:53:7e:
                    2d:f1:24:96:d2:de:77:7e:f8:7a:89:25:b4:ee:ae:
                    35:bb:2b:4f:20:f8:97:77:af:f1:44:2d:bc:b5:59:
                    12:68:80:4e:b9:5d:20:7a:5d:04:a1:d9:11:99:42:
                    37:49:16:b4:98:7b:73:9c:11:70:8f:85:86:11:57:
                    dd:4b:d5:35:dd:79:35:3c:16:3b:a3:b3:7f:21:e4:
                    26:8f:72:0b:a2:1b:d2:e9:ea:27:c1:af:83:fe:2b:
                    67:5a:d8:6c:d5:57:df:1e:f5:80:49:3e:c6:c0:d3:
                    14:42:c8:d1:72:40:67:ce:1f:76:85:1f:b7:c2:0d:
                    9c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:FC:69:60:2B:7B:A5:2F:62:C0:7D:51:D6:CD:FE:93:DF:BE:12:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d6f5f458-1a09-3091-81c3-a92d79dc9108.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.175.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:38:fe:b5:aa:bb:6e:ae:0f:68:34:bc:3e:64:32:52:07:7b:
         a6:a7:16:d8:0a:06:32:fa:67:ee:de:d7:91:96:f8:0c:6b:4c:
         8f:00:79:03:8d:46:12:ee:19:40:bf:95:85:33:2d:ca:fc:cd:
         fc:55:d9:ed:83:6b:76:36:62:a2:80:a4:b3:74:4d:8c:a2:de:
         7e:f7:d1:b1:53:a6:49:94:5b:b3:92:ee:dd:81:a6:d1:dc:dd:
         6f:4d:47:01:a4:2c:f6:47:9e:d4:f8:12:8d:56:4f:8c:7b:ec:
         11:e4:20:8e:ae:5b:78:2e:a0:ed:b6:67:f9:45:05:a8:df:be:
         88:ee:bf:bc:70:ba:1c:76:26:6a:ce:f4:46:cb:de:10:98:16:
         5b:72:64:52:6c:72:da:30:60:8b:0c:cf:87:a6:c0:23:de:4d:
         57:32:83:99:bd:22:18:0a:76:11:27:59:d2:80:17:68:6a:0b:
         51:bd:d5:ba:71:11:b1:f7:d2:fa:6d:7d:2a:5f:32:16:58:69:
         ac:4c:79:db:9a:05:7a:51:34:4f:2e:6a:8d:8b:97:71:34:9b:
         81:1d:8d:35:ab:b6:38:0b:d6:73:4b:5b:41:2f:4c:98:7d:84:
         2a:df:54:16:d6:28:4a:96:4e:8c:8c:40:8b:dd:bb:c7:5e:c6:
         38:b5:8d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----