Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f039755c-6ad9-3c60-ace8-0088530fa793.roa
File:                     f039755c-6ad9-3c60-ace8-0088530fa793.roa (raw, json)
Hash identifier:          Q+G8/WgoJMTiWqzgUTEFWQOJc9HBFycT8ZXe8bFsS9k=
Subject key identifier:   97:75:59:D6:A5:1F:FE:D0:D1:A2:D2:A0:06:D5:83:75:04:99:A9:67
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA66FF340C2251B410FBF80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f039755c-6ad9-3c60-ace8-0088530fa793.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     7015
IP address blocks:        2001:559:c2a1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a6:6f:f3:40:c2:25:1b:41:0f:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=a37e44e1-5ce3-4392-9326-842d872fb8e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:1c:64:c0:90:14:3a:90:3e:85:ac:25:a8:3d:
                    11:66:5a:ee:b5:85:1a:37:ff:95:d7:81:14:61:91:
                    8d:a5:b7:ff:3a:08:7e:87:00:17:45:2b:a4:df:f6:
                    06:b4:d2:f3:24:28:29:8d:63:64:49:de:7c:40:69:
                    a7:0d:68:fb:b2:d3:df:9b:cd:b8:a4:07:08:3b:b6:
                    18:73:50:1d:92:52:51:b7:3a:5b:13:a3:6f:cd:69:
                    a7:66:15:96:ad:d3:21:3a:09:11:56:ae:47:e6:5d:
                    75:5a:8f:d4:f3:30:f1:28:8b:6b:00:fb:e1:21:16:
                    06:3b:79:52:ac:fc:a7:d0:f0:d9:0f:7a:44:9f:2d:
                    11:25:b1:c7:49:27:13:00:6e:69:1e:45:6f:fd:72:
                    2f:ac:81:a8:f6:33:9f:1f:67:a8:f2:68:9c:bf:dc:
                    0d:57:61:f0:3a:53:02:ed:b0:dc:37:17:17:ee:6d:
                    5e:ad:1f:da:9f:b7:60:f8:d9:b8:5b:19:d2:ca:9e:
                    ed:c7:64:a7:51:46:f4:e5:d0:db:70:76:a3:c9:47:
                    7a:aa:b0:18:4f:27:22:c5:92:64:b7:87:b6:bd:9c:
                    ec:43:a1:d9:b6:6c:db:6f:4d:2d:e7:4b:45:b7:cd:
                    b3:67:c3:ea:27:e4:c7:c3:3b:b8:dd:c7:73:c2:55:
                    99:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:75:59:D6:A5:1F:FE:D0:D1:A2:D2:A0:06:D5:83:75:04:99:A9:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f039755c-6ad9-3c60-ace8-0088530fa793.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c2a1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:ff:df:28:d2:87:9b:40:6d:1f:d0:ba:86:36:22:7d:f4:55:
         f8:7a:ff:1c:b9:5d:05:0b:8b:c3:3d:68:35:f0:84:1f:c7:da:
         94:f4:e6:61:61:79:6e:50:85:70:31:df:0a:c3:16:bc:9d:27:
         89:f6:1a:41:83:f8:3e:fb:33:32:ef:91:14:70:66:a0:76:c5:
         f6:bd:2b:14:de:97:70:46:76:b0:5a:1a:91:5b:b6:3d:ec:a9:
         e8:71:8b:33:e8:ce:5d:cf:2b:7a:d9:b1:32:9d:45:30:49:a9:
         d3:30:b2:01:3c:af:82:13:79:fb:c1:b8:57:2b:f8:4e:2f:f7:
         e4:61:21:39:13:cd:d3:7a:76:c9:5c:bd:f4:66:97:7f:87:de:
         d3:27:b4:a8:82:e1:d1:92:a5:a8:8e:8e:12:87:21:07:62:cd:
         6e:8b:ff:65:3c:59:a3:06:8c:47:0b:12:6e:40:85:fc:5b:e3:
         94:f9:f6:df:6f:67:2b:3f:0e:f4:e7:f9:be:77:87:9e:fe:09:
         73:39:04:54:2e:92:08:59:4f:36:31:5a:9f:f5:16:be:eb:72:
         7c:29:b0:7d:0c:5f:eb:21:e3:7a:f5:d7:14:6a:9d:c1:5e:23:
         c2:28:04:7f:7a:60:92:59:e4:4e:83:a0:be:63:d2:ff:4e:12:
         92:ee:65:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----