Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f6fd1672-c4d1-35d0-b731-c6f488372613.roa
File:                     f6fd1672-c4d1-35d0-b731-c6f488372613.roa (raw, json)
Hash identifier:          3lBVKaW0rAKzoIcxiKjwDNDB75H9rlM6vweLP9YDuH8=
Subject key identifier:   07:FC:79:C9:DC:42:D4:AE:BF:7E:15:51:8E:9E:D0:B7:D6:58:2C:70
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA478E86E12C9F4B360A900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f6fd1672-c4d1-35d0-b731-c6f488372613.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     22909
IP address blocks:        67.187.72.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a4:78:e8:6e:12:c9:f4:b3:60:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=7121785b-6a6e-4d04-92d6-11c7ad49a4d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3b:00:4f:18:2d:db:8e:77:2e:47:0a:1b:ee:
                    8c:cf:e8:e2:24:52:3f:d8:d8:0e:74:b4:66:2c:e6:
                    8e:09:c5:e7:22:6d:0c:a1:d8:32:5b:a1:01:77:36:
                    97:ca:d7:50:db:19:90:70:05:ea:9c:0c:64:59:ad:
                    9b:9b:eb:e4:f4:b8:ee:53:9f:b9:14:d0:9e:be:23:
                    3b:b1:77:21:58:2c:c9:bd:7a:82:b8:27:51:b2:18:
                    92:0d:6d:d7:f9:ba:ae:c8:ed:0c:ec:05:47:2f:b5:
                    75:a9:0f:23:2e:ac:f1:ca:4c:d1:04:4e:8c:e7:1c:
                    97:49:ab:f7:98:c8:17:13:04:49:e8:11:8c:2e:00:
                    3f:71:50:8a:19:e8:56:9d:32:a6:c9:a2:e5:f8:df:
                    14:bf:51:dd:9a:cb:96:f3:08:e7:f4:88:13:64:40:
                    5b:ac:c1:df:e8:64:37:4e:4a:bb:5f:82:4e:22:70:
                    83:de:0d:19:93:71:92:26:43:82:f9:2e:53:24:91:
                    80:ce:40:d2:48:6c:2c:e5:7e:7d:c2:41:22:7e:d1:
                    d3:4b:43:bb:3b:a5:d3:e3:43:d6:d9:85:37:d0:d7:
                    ec:81:81:9e:6d:ce:1d:8a:24:c4:c4:1d:67:d6:01:
                    7f:dd:e4:66:18:b2:75:66:5e:2c:89:64:31:6b:c9:
                    a7:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:FC:79:C9:DC:42:D4:AE:BF:7E:15:51:8E:9E:D0:B7:D6:58:2C:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f6fd1672-c4d1-35d0-b731-c6f488372613.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.187.72.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:6e:14:f6:ce:34:ee:6a:27:0a:7f:43:d7:89:c8:09:b6:b6:
         fb:0d:c9:2f:08:04:a2:38:ae:82:ca:c2:ef:55:74:db:3d:a9:
         17:e8:d4:5f:78:6e:48:c9:f2:18:ce:27:98:29:fb:b4:65:f2:
         f9:6e:1c:0d:31:7a:40:94:0b:aa:0a:42:85:da:86:93:f0:21:
         fc:38:51:75:6b:de:16:72:5e:d7:89:d1:93:4f:c9:83:cd:5c:
         45:ab:98:71:10:52:1f:d6:69:e0:64:bb:4f:c2:49:3e:64:30:
         52:02:a9:58:0b:64:13:94:60:f0:c3:b7:22:55:d1:6d:b9:74:
         0c:f8:a1:71:f4:d7:32:64:09:d5:aa:30:88:a4:21:75:50:f9:
         d3:8f:d0:ee:25:f6:a5:df:6b:59:5d:76:0e:0c:36:31:86:2f:
         0c:df:9e:79:b6:90:bb:ef:91:8e:4a:00:d5:f0:64:1e:fd:30:
         bc:ff:a0:e1:3e:ef:72:aa:8b:c9:44:01:8f:58:bc:89:6a:43:
         45:b5:85:e2:37:d1:02:ed:a1:f4:e8:3e:d3:6b:bb:2b:fb:3f:
         85:0b:aa:79:f0:80:63:90:44:1d:7b:10:1d:f2:46:07:93:a0:
         9a:88:03:b8:4c:09:7a:3c:16:9f:17:3f:f0:86:9f:6d:47:81:
         d3:d5:d3:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----