Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e82f0c03-5d22-3699-a7cc-14385b039316.roa
File:                     e82f0c03-5d22-3699-a7cc-14385b039316.roa (raw, json)
Hash identifier:          yMPQlu/g8dUI/CJ2KmVl6LCB62pJt9+7tWGA7u2OXOI=
Subject key identifier:   D9:01:78:7D:29:59:C7:D9:D0:09:B8:27:D7:F8:78:D2:15:E6:04:55
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA5E8700629495E83720180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e82f0c03-5d22-3699-a7cc-14385b039316.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     22909
IP address blocks:        98.193.180.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a5:e8:70:06:29:49:5e:83:72:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=2b57338e-1eb4-4dcb-bb9b-2c62250d2ca6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:23:34:1b:dd:0a:fa:53:29:5c:80:33:6f:34:
                    8f:60:3c:05:d0:e2:a0:ad:b3:26:c3:00:eb:98:ce:
                    6b:b4:2c:90:d7:b9:63:86:bf:de:9b:14:0d:87:89:
                    69:f7:36:7e:41:7b:5f:a9:b8:96:f5:e4:5a:be:e2:
                    ef:4f:90:b1:22:f9:ee:c4:e0:f5:6f:ae:c5:7b:08:
                    94:9a:8c:e4:26:b1:cd:53:5a:9f:58:99:95:94:5e:
                    e0:77:62:bb:f0:62:c7:59:98:dd:b1:df:19:bc:9f:
                    71:a2:1a:1f:a1:ef:ba:85:dc:fc:94:56:6d:f2:0b:
                    77:77:de:c6:a8:fd:8e:59:55:67:4b:0c:74:73:c2:
                    3d:d7:68:e1:30:ed:bd:d5:e0:98:57:5d:23:21:d8:
                    46:d5:12:27:3e:79:96:20:c5:6d:4b:3a:7a:b6:2f:
                    11:8f:e7:81:38:1d:63:1c:15:fa:c5:7d:e5:02:1e:
                    00:9a:69:b8:a7:5e:96:be:45:a9:11:d8:ce:db:c6:
                    13:19:41:32:ac:61:5d:58:68:cb:ab:38:98:8c:ce:
                    7f:0d:92:bb:f8:1d:47:bb:0f:47:72:37:35:9a:21:
                    0a:30:6f:a1:cb:5a:6f:57:23:e5:d9:43:c0:8d:b6:
                    e4:4c:d3:94:ff:b0:73:5c:b6:d4:0a:92:ee:6f:37:
                    05:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:01:78:7D:29:59:C7:D9:D0:09:B8:27:D7:F8:78:D2:15:E6:04:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e82f0c03-5d22-3699-a7cc-14385b039316.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.193.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d1:bb:47:f7:99:85:bd:9b:f1:9e:79:70:58:d9:b5:9e:09:41:
         03:04:05:d1:bf:e9:6e:fb:c3:41:45:86:7a:ab:e1:35:f7:93:
         44:a5:3a:a7:ad:ce:fe:17:95:f4:54:91:45:2f:b5:89:b2:f8:
         f2:97:c8:fc:3a:59:a0:a8:e2:3c:3f:37:59:1f:81:3f:1b:19:
         20:4c:53:14:21:cb:9a:25:b6:8c:26:88:1f:28:74:3b:1e:07:
         0c:ca:2c:9e:20:95:c0:26:ef:9b:b4:ca:a2:0d:0b:28:69:7b:
         89:9c:44:31:be:9a:ea:52:27:21:e9:8e:5d:4a:79:f4:4b:39:
         50:df:0e:f6:de:fa:df:ce:30:7c:51:aa:95:58:ee:5d:6a:91:
         6f:f6:dc:9e:67:56:8d:d6:3c:68:8e:97:d2:d8:38:6b:3f:2b:
         e9:0c:c0:6c:45:53:f9:8a:29:b8:17:1c:9c:03:be:89:c6:93:
         11:4e:2a:81:10:6f:7b:18:c8:c3:58:bb:18:5a:7e:29:4b:6d:
         ff:c0:31:04:f5:2b:56:08:e9:c3:c1:69:2e:58:6c:26:01:0d:
         3a:c3:3e:3e:71:e2:f3:fe:0e:88:3e:0b:60:2b:71:66:f3:6f:
         55:a4:19:f2:58:86:3a:bb:df:48:30:63:a7:dc:46:13:9d:09:
         92:bf:35:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----