Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f93015f3-a96c-38f8-9c9a-f8cbf7a43e66.roa
File:                     f93015f3-a96c-38f8-9c9a-f8cbf7a43e66.roa (raw, json)
Hash identifier:          z5Fe0iOj6EKo7QniAziGvKVpVckO6Kdp/ds9Gq/vKCQ=
Subject key identifier:   E5:5F:05:9B:4E:36:6E:F2:98:DC:A4:92:38:87:57:C1:08:7F:C1:1F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA4ABDAD2B2051009A0FBB4
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f93015f3-a96c-38f8-9c9a-f8cbf7a43e66.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     22909
IP address blocks:        2603:2841::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a4:ab:da:d2:b2:05:10:09:a0:fb:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=ad256592-1a06-4262-a187-0edde8ce5a6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:7e:70:85:02:b5:38:3a:1b:59:f6:91:0c:df:
                    13:20:21:5c:8f:e4:f6:02:89:f1:b9:44:06:43:2d:
                    14:d1:24:76:85:c3:57:4c:9e:c7:95:fb:ce:00:0c:
                    86:12:2d:74:f8:33:24:20:ba:ef:3e:c5:ea:fd:b8:
                    65:b5:2f:10:ac:87:06:8a:df:94:bb:33:5f:8f:68:
                    d6:69:fe:66:a7:69:c6:40:03:cd:f5:41:f0:84:0a:
                    f3:43:eb:bf:20:4e:4a:7c:73:64:cc:87:ca:64:a1:
                    02:71:fa:0b:ff:54:7a:45:14:10:d1:fa:50:1d:eb:
                    fd:aa:77:d5:72:d4:b0:41:fd:93:d5:15:49:98:fe:
                    cc:ee:e2:b0:ce:ef:f0:64:cc:37:ce:d2:94:10:60:
                    dd:00:a7:4c:50:27:2f:a1:cb:3f:3a:14:cd:7a:07:
                    06:42:a2:ad:1a:c9:03:de:a9:c6:ee:7a:4d:23:9a:
                    58:a9:ae:e2:23:83:41:be:c0:a1:8f:90:c2:4f:4c:
                    88:c0:85:b1:0a:af:02:5e:7d:cf:7e:b1:27:db:7a:
                    3e:09:35:43:42:22:03:7a:e0:4b:2d:3a:72:85:81:
                    5b:59:32:58:1a:64:8a:4c:07:05:3a:0c:a5:07:45:
                    eb:b2:c9:c9:95:66:b5:9d:c1:cd:2e:3b:da:fb:49:
                    e6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:5F:05:9B:4E:36:6E:F2:98:DC:A4:92:38:87:57:C1:08:7F:C1:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f93015f3-a96c-38f8-9c9a-f8cbf7a43e66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:2841::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:47:b7:17:60:ff:b4:cb:6e:9d:ac:73:93:d0:8f:63:dd:df:
         36:f5:b1:80:5c:58:f2:cd:04:4d:a1:bb:6a:e8:d1:8d:86:aa:
         98:01:c7:79:3e:b1:9c:38:84:a6:7c:64:29:7e:be:21:2e:00:
         a3:f5:71:97:b7:50:be:57:49:34:f9:0d:6c:69:86:eb:fd:88:
         df:a7:dc:3c:28:46:1c:70:04:9b:c9:d3:5c:2b:61:e6:11:db:
         ee:b7:c7:e6:0f:e0:68:69:3a:a7:28:6f:65:ba:d8:88:66:c2:
         43:50:c5:58:47:98:76:e7:53:0b:14:1c:af:bf:b0:16:fe:8b:
         2b:38:17:39:63:c4:53:e1:9f:b9:48:77:d2:14:d5:b7:69:b8:
         13:fe:9d:ce:f0:d3:26:ad:df:02:4c:38:82:9d:dc:e9:3b:fb:
         60:94:c4:7d:a3:61:5d:09:76:c0:c3:b4:bf:71:f6:a9:49:34:
         7e:12:71:1a:94:b5:24:0a:c1:b7:13:d4:98:4b:e3:10:16:59:
         04:8a:36:2d:b9:a8:84:0a:8d:87:dd:2d:af:b8:2a:4e:ea:59:
         f4:c6:44:4d:3d:d5:0c:ff:5f:c6:bb:d5:7c:eb:a4:4f:5c:ac:
         9c:f4:16:6a:84:91:de:f4:a5:79:87:3a:1a:14:b4:a0:9f:34:
         b0:41:6a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----