Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e9d925d8-f307-3fa3-8126-d569483b8744.roa
File:                     e9d925d8-f307-3fa3-8126-d569483b8744.roa (raw, json)
Hash identifier:          CrvMtNtotTDV3kZBA8wRSM1HevgDVG0pWFsLLYISTR4=
Subject key identifier:   33:87:63:ED:1F:4E:BA:A9:FD:AB:FD:C6:4B:4F:D0:31:09:28:5C:4D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA64389384E118561BA0B80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e9d925d8-f307-3fa3-8126-d569483b8744.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     33660
IP address blocks:        24.2.96.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a6:43:89:38:4e:11:85:61:ba:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=609ed82f-fc53-4aec-8c01-cc3b423bcc39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:95:bc:7b:81:de:07:cb:3f:02:7c:bb:cb:76:
                    ef:20:91:69:bf:23:9a:98:26:cf:57:8a:05:de:1f:
                    4b:5c:dc:7c:94:c5:7e:cb:13:51:75:df:20:54:b9:
                    fd:6d:33:d8:a0:34:b7:12:a0:a0:d0:06:06:a7:54:
                    2c:8b:4e:2a:1c:e8:9c:6d:3e:44:ae:93:09:ac:d2:
                    35:4a:83:b4:ad:db:da:6a:be:ba:50:cc:f2:74:4b:
                    f9:69:ca:4b:4b:fd:73:f0:47:47:3a:94:be:3b:ff:
                    8c:5e:7b:9f:e6:a1:c2:98:42:c7:b0:75:07:b8:de:
                    a6:8f:7f:38:a6:0a:74:36:c3:02:40:37:69:32:50:
                    07:f9:59:a4:1b:a3:3d:25:0f:e0:d7:68:8d:56:6c:
                    69:8e:c6:5d:e8:53:ec:6b:1a:ff:29:dd:38:3e:46:
                    15:45:b8:01:63:2a:39:a1:9c:1d:f2:5f:cf:54:1f:
                    3e:ac:91:a2:b3:0f:e5:94:14:14:6f:3f:f5:af:71:
                    6d:30:f0:6d:20:9c:9c:a5:23:3e:a1:eb:df:c3:eb:
                    9b:98:8b:a3:73:f0:34:fd:93:3d:be:91:fe:9a:b9:
                    68:ad:3d:b7:c5:76:e8:64:05:77:28:e3:25:e2:fd:
                    40:ef:88:44:78:f7:69:4e:9d:16:3f:fd:62:4d:93:
                    92:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:87:63:ED:1F:4E:BA:A9:FD:AB:FD:C6:4B:4F:D0:31:09:28:5C:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e9d925d8-f307-3fa3-8126-d569483b8744.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.2.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:4b:9e:fb:b8:ad:e4:d1:f7:01:16:71:7c:4b:3d:1e:9b:5c:
         6c:e8:55:94:06:25:b6:1c:0d:a9:68:d5:68:d3:29:f8:8d:8e:
         b0:38:56:08:4d:ad:62:70:dc:6f:a8:93:d0:2d:47:ca:d5:75:
         7e:ee:15:5a:dd:d9:9b:62:4f:40:c4:a8:89:fb:7b:21:1e:f0:
         f5:67:c5:99:a2:d1:6f:a5:f1:e0:57:49:13:a6:8c:35:d7:c7:
         86:94:79:8a:8a:9f:76:c6:c5:ac:9a:a6:2f:b2:36:04:ae:ef:
         21:c4:8f:6f:f2:70:c9:b9:75:b8:ca:40:2e:b1:95:7b:65:12:
         5b:6b:64:ad:c6:ec:43:00:bd:f1:5e:f7:f3:02:99:34:54:3d:
         18:db:41:ac:68:eb:3f:62:00:ba:f7:cf:93:1d:b5:66:80:94:
         8c:62:33:a4:b1:ce:cb:dd:20:14:7a:1c:85:31:38:2f:d4:c9:
         7e:01:e2:d1:5e:41:d6:ce:da:be:67:54:de:06:ad:e7:f5:d5:
         f8:60:90:b9:48:66:16:23:4c:75:01:54:05:07:54:b1:78:f2:
         ab:e3:ee:38:a7:ee:ef:25:cb:88:78:dc:10:b1:25:84:14:0b:
         35:d1:25:fe:0b:e0:d4:1e:3c:fa:05:59:3d:d2:d5:4e:32:d2:
         e3:2e:e8:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----