Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e87219ed-965f-365e-bb9d-58ea56ee02fe.roa
File:                     e87219ed-965f-365e-bb9d-58ea56ee02fe.roa (raw, json)
Hash identifier:          wA11u7tciN9QdtQgfqVGkzyPaGX3JNVpWrf7qpTlXuw=
Subject key identifier:   CF:BF:D6:96:B2:46:87:14:3C:F6:4B:06:09:3B:58:95:93:F2:AD:61
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA4F61970211364E0D9D840
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e87219ed-965f-365e-bb9d-58ea56ee02fe.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     33660
IP address blocks:        69.139.142.128/25 maxlen: 25

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a4:f6:19:70:21:13:64:e0:d9:d8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=ce540af8-ecad-415b-b811-ea6a3e420967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:1d:d0:20:f9:f3:1c:12:bf:b9:7f:cf:11:75:
                    20:6e:da:27:0d:6e:0e:17:89:b4:db:1b:69:af:e7:
                    3e:d4:54:93:c8:f4:07:5f:65:82:7d:6b:a0:0e:90:
                    31:c6:77:55:c2:71:d4:6f:8c:67:8c:5a:56:27:10:
                    db:40:73:8e:0d:32:c1:03:d0:0d:e3:6d:ac:08:85:
                    30:99:4f:4f:ae:37:5e:7a:6b:6c:58:5e:a5:6c:67:
                    c8:08:d4:f4:1e:73:91:78:1f:0d:6c:4d:d8:fa:17:
                    3b:c3:6d:dc:0a:d3:d7:b6:40:80:3c:94:ce:12:62:
                    e7:ae:e7:07:00:b3:bd:0f:6d:54:3a:35:ab:fd:36:
                    bb:fb:da:9b:f0:cd:30:31:5d:a3:06:6e:56:2e:a8:
                    c3:f1:6b:1b:34:47:e8:4b:32:15:81:05:0f:3d:c2:
                    6c:4e:e7:c0:20:9a:af:3d:04:72:9f:a8:1d:8c:2b:
                    f8:a0:b6:4d:f2:30:1f:da:a2:52:b4:94:ae:65:bb:
                    f9:c3:32:58:42:67:81:21:a6:04:3e:98:5a:c4:b4:
                    64:d9:a4:55:29:f7:86:6b:b1:72:47:0f:21:4b:a9:
                    9d:ac:86:d6:04:f2:ff:04:36:92:87:20:78:9a:c2:
                    fe:c8:74:79:6e:a6:cd:ff:0a:ce:86:bd:5a:69:02:
                    9e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:BF:D6:96:B2:46:87:14:3C:F6:4B:06:09:3B:58:95:93:F2:AD:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e87219ed-965f-365e-bb9d-58ea56ee02fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.139.142.128/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:86:78:17:bd:39:06:ea:cf:c9:fe:9f:23:95:b1:84:e7:10:
         2e:2f:fa:4f:df:78:3f:4d:c4:df:74:82:60:7d:4c:21:20:ff:
         5f:e1:bc:21:7b:d0:10:af:93:b5:e3:d8:11:0a:f1:d4:c2:c7:
         8f:ad:b3:ec:0e:87:c0:c2:ef:63:68:c5:b6:7a:9b:b6:44:c2:
         1f:8f:bd:47:f1:87:a6:0c:de:7c:5b:6d:90:86:a9:0c:8c:64:
         e1:1b:dc:1c:40:8f:10:ae:40:a2:e3:54:1b:70:77:9d:ed:ac:
         89:ca:f2:02:3c:71:5a:4c:52:e1:49:6a:ce:38:aa:73:f1:2b:
         51:8a:18:8b:5f:9b:fd:4a:ae:93:bf:af:eb:fa:05:32:f1:44:
         3b:07:5b:ef:08:f1:63:06:ea:e3:53:2f:ed:0a:9d:33:5a:85:
         2f:10:a6:08:0d:b9:91:6b:7e:e3:08:1c:3f:0d:a6:45:44:23:
         46:26:bb:b3:90:d5:24:1b:43:c4:6a:6c:95:fa:f1:43:0f:f2:
         cd:42:e6:c6:87:81:1e:d4:64:fb:6f:67:3e:65:4d:35:fb:56:
         06:0c:cb:76:4c:e7:d7:4d:e1:1c:bf:10:6c:ff:04:7c:7f:db:
         72:0a:e6:91:e9:cc:db:42:d8:02:8f:d2:44:74:e1:7f:3b:dd:
         7c:f8:ef:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----