Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d77dd5e7-1cae-379c-b165-c477ba0c2d53.roa
File:                     d77dd5e7-1cae-379c-b165-c477ba0c2d53.roa (raw, json)
Hash identifier:          V2G7n0o2OwEaJIrncbuyqmcqq+OrPZ1gZBIbW3q41gg=
Subject key identifier:   9B:86:0D:29:62:70:25:DA:44:61:F3:37:AD:BA:AF:EB:9E:51:B9:BA
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA5CE8F8B875F41A688EF50
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d77dd5e7-1cae-379c-b165-c477ba0c2d53.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     22909
IP address blocks:        69.244.202.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a5:ce:8f:8b:87:5f:41:a6:88:ef:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=caff3f07-796e-4877-b75b-1ffbdc6d0156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:36:32:00:ab:f1:aa:d6:dc:67:2a:60:66:09:
                    dc:3a:5b:cf:f1:85:8e:d6:30:cb:d3:38:44:d9:1a:
                    5b:b2:ff:bf:36:83:dd:b4:9a:54:e0:90:b8:fe:eb:
                    86:ab:e2:d3:e1:09:77:1a:9c:53:eb:4d:5c:e7:ec:
                    d1:0d:b0:8d:c0:34:64:fb:6a:07:2a:bb:fa:40:12:
                    ae:3f:70:13:49:63:5b:b7:d8:7c:b0:52:f0:a7:6f:
                    9d:8d:a0:6c:aa:68:cd:30:90:1f:66:ab:2e:ef:ed:
                    07:27:54:7f:2c:f4:6c:e0:c1:a5:2f:71:ee:c1:22:
                    8f:e7:8d:f2:22:c8:82:b0:f0:98:53:6c:19:7d:36:
                    a8:4a:48:f9:45:ca:cc:33:85:d9:8a:0e:c3:55:73:
                    53:a6:23:dc:72:ee:2f:d8:8b:24:29:42:c5:11:4c:
                    db:14:53:ad:f2:34:89:04:7d:87:72:52:55:c8:10:
                    90:34:d4:c1:96:74:70:ee:d6:bb:38:64:99:46:87:
                    53:3b:59:23:2a:4e:63:3f:00:fc:b5:31:43:f5:46:
                    17:5d:3f:3b:a4:e1:7e:f2:58:92:2a:d6:ed:d3:f9:
                    5a:9f:08:a0:12:56:7d:6a:c8:45:1b:f4:25:f9:3c:
                    73:a6:4f:c6:63:cb:29:5a:30:c2:f7:dc:98:68:f5:
                    72:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:86:0D:29:62:70:25:DA:44:61:F3:37:AD:BA:AF:EB:9E:51:B9:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d77dd5e7-1cae-379c-b165-c477ba0c2d53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.244.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:f8:8c:0c:5b:0b:d2:76:4e:2b:9c:26:68:10:68:7d:b3:e0:
         d2:2e:ef:4f:2c:40:b0:cd:fc:76:0e:d6:ed:ee:da:b9:6c:66:
         ee:3e:e6:99:f9:0f:f5:47:32:4e:2f:1a:6c:7d:64:ee:3f:0b:
         03:2b:7f:b7:03:3b:c0:44:fe:64:4f:47:fc:5e:5b:0f:f6:b6:
         b5:c9:ea:92:8a:3c:17:b4:bd:d7:09:07:49:5b:01:b8:d9:64:
         33:3d:c3:bf:26:73:15:f9:72:86:c8:67:66:0d:11:03:f8:1d:
         44:20:cc:69:2e:d1:8e:87:15:96:88:e0:bf:d5:77:ce:e2:bd:
         91:7f:48:28:8b:1d:6c:3a:80:9c:c6:34:fa:36:77:4e:65:cf:
         d1:bf:cc:74:7a:09:36:98:78:0c:2e:f3:3f:61:6d:1e:e3:20:
         52:1f:77:48:8f:40:46:b7:eb:0e:39:bf:3c:fe:84:eb:f7:d6:
         56:d4:ac:81:3a:e2:09:bf:eb:d3:ae:db:be:c9:93:d9:ef:37:
         44:01:25:78:61:aa:d0:3d:04:9b:09:55:cd:5e:a7:c7:1c:04:
         fa:54:a0:99:db:fd:6e:67:44:54:d4:95:9f:95:5c:62:81:8d:
         2d:85:55:ac:c0:a0:42:1e:57:f5:54:9f:5b:01:60:a1:ca:ba:
         04:07:e1:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----