Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eb53fe97-6c9b-39f5-a4c5-6bfda3f52adf.roa
File:                     eb53fe97-6c9b-39f5-a4c5-6bfda3f52adf.roa (raw, json)
Hash identifier:          OVcZybU72O2rjYM5HCIN90gmWoSzRpF15SXGLIqt8Io=
Subject key identifier:   67:5F:F6:40:C1:E5:63:7E:ED:1D:08:90:BD:DD:31:2D:9E:66:BA:0C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA610FE645C79BA940E3480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eb53fe97-6c9b-39f5-a4c5-6bfda3f52adf.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     20214
IP address blocks:        96.69.0.0/18 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a6:10:fe:64:5c:79:ba:94:0e:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=a8da237f-5d67-420c-b910-926b672dfda7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d1:b1:50:dd:e4:1b:cc:01:33:57:1f:ba:fc:
                    76:cd:60:5b:49:48:6f:18:21:10:48:f9:a9:8f:b1:
                    93:39:24:75:11:e5:06:02:ab:a5:07:2c:72:71:76:
                    5a:13:28:51:55:bb:f2:32:67:f7:bb:a4:44:d8:ac:
                    76:0f:bc:89:e4:11:c4:6b:3e:85:9b:89:b1:7a:a2:
                    cf:0e:3b:da:11:5a:70:df:7c:53:87:fb:fa:79:6a:
                    55:c7:65:da:1b:3b:64:4e:b1:7b:0f:74:2e:02:e9:
                    38:ba:e8:2b:99:fc:a2:74:fb:39:25:5f:b2:88:d3:
                    99:66:49:72:cf:df:07:b9:d6:8f:f4:82:c8:51:0e:
                    70:a3:4c:a7:60:9e:aa:dd:2a:9f:d9:04:74:0e:ee:
                    f7:5a:13:f0:ce:e9:fd:16:4c:d5:28:16:f6:0e:68:
                    54:ad:7b:e6:32:56:db:97:50:ed:83:8d:4f:52:62:
                    ee:f2:65:16:bd:87:7d:6f:01:d7:6f:6e:9d:56:ca:
                    b3:ef:75:0e:1a:70:d7:fb:12:b5:e1:ed:0c:74:ac:
                    e9:c8:e3:4d:1f:32:95:fb:b0:ce:cd:a8:07:8f:1b:
                    37:03:a8:f9:74:cb:6c:03:66:16:cc:34:24:2a:9f:
                    c7:8a:ff:19:53:62:23:51:13:d2:28:08:1d:d9:c5:
                    6a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:5F:F6:40:C1:E5:63:7E:ED:1D:08:90:BD:DD:31:2D:9E:66:BA:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eb53fe97-6c9b-39f5-a4c5-6bfda3f52adf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.69.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:bb:0c:cf:32:4d:85:5f:78:aa:bf:2b:b0:0b:ef:5c:6a:6a:
         2c:5d:08:84:23:a1:4c:0f:77:b5:a5:74:f7:79:68:19:08:78:
         03:55:d2:41:98:bd:39:2d:30:78:d2:bb:31:03:d4:dd:bb:37:
         3d:1c:95:39:9b:86:3f:c2:db:b8:62:1e:ca:f9:53:29:6a:d7:
         f7:77:ef:ea:03:80:f0:dc:23:7f:a4:4c:78:bc:75:a4:69:26:
         61:d4:0c:cf:d4:a2:09:05:6e:ee:88:92:5e:66:ed:e3:69:64:
         4d:06:64:17:3a:9b:0f:c3:7a:b3:0e:ef:df:12:2e:b2:e4:63:
         8d:1e:d2:9e:f6:0f:ac:56:57:c8:c0:bc:03:e2:30:25:84:5f:
         8b:14:78:29:aa:36:7e:57:d4:6d:ad:da:8a:f5:06:3b:c2:62:
         7d:1a:69:c8:39:28:12:c6:ee:3f:2d:45:e2:67:55:76:17:16:
         a2:0e:c9:18:ea:33:e3:0e:b1:01:df:8a:3b:78:85:6c:9c:e4:
         b1:92:69:35:0a:59:a7:63:32:22:aa:26:09:9a:22:e3:e0:99:
         37:09:96:cc:eb:5b:02:4d:af:d4:15:23:6f:fe:18:4d:6a:0a:
         00:11:de:68:a0:b4:c4:2c:a0:22:54:a5:d8:ad:e7:d2:30:5b:
         1f:4f:42:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----