Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fb2109b2-259c-3b81-9a4a-ceb27c926976.roa
File:                     fb2109b2-259c-3b81-9a4a-ceb27c926976.roa (raw, json)
Hash identifier:          jYrAwkVM8UH79DMV5plP2ZOzQX45ay7YV2pAYwvbiow=
Subject key identifier:   03:E8:01:9A:79:67:07:28:DF:BA:47:79:B4:CB:D3:C4:46:EA:22:AB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA6DFD5B93ED117EAF0C900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fb2109b2-259c-3b81-9a4a-ceb27c926976.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     394547
IP address blocks:        50.224.13.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a6:df:d5:b9:3e:d1:17:ea:f0:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=2e13fabc-95e4-445d-a2ae-f43ee78df7be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:8a:77:ba:62:f6:f3:b3:4e:db:c0:56:fc:73:
                    b1:17:b6:30:7e:72:45:5d:49:f7:8a:13:a6:24:ca:
                    49:f5:a8:71:54:96:52:6a:23:cb:eb:85:9a:1b:80:
                    3d:67:59:da:5a:97:52:1a:83:a6:b4:8a:e3:2d:04:
                    96:0b:94:b8:06:34:8d:38:39:3a:69:22:5f:a0:70:
                    25:d6:8d:9c:36:41:fb:77:b6:a3:e7:51:32:34:c4:
                    9e:7f:d4:9d:7d:3e:63:ea:53:57:7f:c6:69:1d:6e:
                    e4:0f:8e:02:3a:ed:bc:49:20:14:11:e6:d2:d9:7d:
                    bf:9a:bf:13:e9:80:f6:9f:80:c2:e4:9a:6d:c4:f4:
                    78:cd:fd:5a:97:3a:43:4c:e2:8d:17:5b:7f:b5:15:
                    7b:b3:fa:99:08:4d:4f:37:33:f1:25:1c:f2:95:a9:
                    88:5a:e4:95:0f:56:55:5a:12:8c:01:2e:a9:dc:77:
                    0e:cb:d7:88:9f:c6:f8:fc:c7:5b:40:10:a9:10:ca:
                    86:da:2f:80:ff:b9:e2:bd:69:74:bf:ee:0d:fe:e0:
                    91:f6:a1:1c:17:e5:18:bd:b3:79:51:14:06:28:fb:
                    fc:58:27:c2:31:aa:3d:0a:5b:d2:8e:16:f1:3a:4b:
                    2a:3b:ad:62:a0:08:3d:bc:c7:21:94:4b:02:88:b9:
                    99:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:E8:01:9A:79:67:07:28:DF:BA:47:79:B4:CB:D3:C4:46:EA:22:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fb2109b2-259c-3b81-9a4a-ceb27c926976.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.224.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d5:d6:49:62:82:6d:6a:57:fc:b7:b4:e6:94:0d:fc:f7:0e:e6:
         b4:99:d1:8e:15:b7:1f:6a:56:af:57:34:f4:58:0a:64:fd:a4:
         28:ee:ea:0b:d4:0c:89:9c:4b:33:35:14:42:9e:cc:ed:73:f0:
         76:24:bd:d7:36:3e:b1:1a:88:c5:53:88:30:6e:a5:fd:41:ad:
         48:89:e6:10:02:a1:b7:98:15:b5:18:70:d6:4a:62:b0:ae:23:
         42:27:22:d6:53:30:7e:04:2e:6d:4c:61:e0:4f:cd:c1:b3:4a:
         d8:37:6d:8e:36:17:fb:29:86:a2:9b:3b:b9:9a:0e:4f:74:32:
         71:93:0c:e5:6a:49:21:db:6f:80:d0:36:08:6c:e7:fb:4d:b7:
         ee:23:f2:ee:c8:6d:47:62:4d:b9:84:fa:80:38:b3:0d:7f:7b:
         af:02:12:02:4a:6b:3c:cb:b6:49:68:6d:c3:f1:0a:56:e5:3b:
         56:27:27:83:ba:b8:e0:74:e2:ba:cf:46:b6:9d:f9:6c:d7:cd:
         28:28:a3:85:cf:85:d7:87:91:08:d1:ba:f1:18:a1:57:b0:1e:
         ed:cd:44:4c:df:b4:98:2f:45:4f:9a:b3:74:73:d2:57:2a:e8:
         9b:b8:2e:50:b9:ce:94:b5:81:b2:df:f6:2c:4c:b2:b0:a4:d1:
         95:a3:77:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----