Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fc9f9c95-4860-389a-90be-dbd470b4588b.roa
File:                     fc9f9c95-4860-389a-90be-dbd470b4588b.roa (raw, json)
Hash identifier:          4B2rMXLpTDSx1G9kC+qGER1fdR2jnTBjHDDWYhrrQbo=
Subject key identifier:   02:5E:93:96:33:22:0B:1C:6D:A1:47:2B:F1:1C:2C:C8:7A:11:BE:CE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA5FB77EE80D89EA293FE80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fc9f9c95-4860-389a-90be-dbd470b4588b.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     7016
IP address blocks:        68.87.75.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a5:fb:77:ee:80:d8:9e:a2:93:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=09a10c7f-f4cb-4ee4-8ab8-6bf65257d9a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:58:e2:95:ed:36:c5:b0:31:cf:5a:93:b5:5e:
                    22:68:4f:43:a9:68:9f:48:c9:37:b4:33:1e:61:88:
                    86:28:71:1a:76:78:87:ed:02:f2:d9:c4:ed:ae:f2:
                    d4:9f:b9:d6:5a:18:d6:e5:aa:ae:2b:fe:7e:8b:6e:
                    d9:0a:9d:3d:8b:0b:16:90:fa:d4:8b:61:54:3f:fa:
                    1a:15:fc:c2:04:6e:43:dc:1d:63:3c:80:af:94:5a:
                    b9:0f:16:4e:58:98:87:70:f5:a6:a4:2d:fe:d3:56:
                    98:97:42:9f:95:51:f8:7f:27:cc:a4:1f:7d:52:02:
                    ee:68:fe:0b:a2:c1:0c:7b:f9:a2:49:36:65:aa:23:
                    39:ab:a6:4e:35:32:93:5a:b6:fc:e0:e7:01:1e:53:
                    89:ce:77:94:38:45:ba:bb:3e:9b:57:51:d3:e8:97:
                    94:46:9e:bf:30:74:58:64:73:3a:5b:97:21:15:f6:
                    3f:ec:b4:0f:60:55:12:b0:40:8b:22:ef:72:3c:58:
                    45:ed:a6:fb:c0:ba:b8:7c:2a:34:63:ad:02:91:98:
                    1f:c7:d9:29:32:25:71:c6:31:01:ec:e0:56:fb:26:
                    4f:2f:5a:1e:e0:26:7c:6a:73:de:c8:02:55:b1:24:
                    3c:21:ab:fb:d4:29:00:fc:bc:ef:85:c0:e8:6f:c8:
                    c3:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:5E:93:96:33:22:0B:1C:6D:A1:47:2B:F1:1C:2C:C8:7A:11:BE:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fc9f9c95-4860-389a-90be-dbd470b4588b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.87.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:85:4f:38:8c:37:d2:72:82:02:8a:5c:a2:78:01:df:87:79:
         06:4b:eb:aa:0f:8a:3b:43:ec:b8:d6:5f:99:3b:c8:30:e4:22:
         9f:20:9f:ae:6f:ba:a4:47:bc:ad:be:03:b3:b8:e4:68:ad:3b:
         4c:bf:63:3f:03:5f:60:5c:b7:62:3d:29:1c:02:9d:49:80:a1:
         1f:74:ea:47:08:77:dc:bb:15:6b:46:dd:c5:85:97:4e:3a:ff:
         86:c1:9f:92:cb:9e:0c:c9:89:78:e3:f1:40:be:61:10:51:87:
         0c:1a:1b:5e:49:d8:c1:35:1a:2f:bd:92:c1:46:83:32:73:7b:
         5a:34:bf:12:95:ee:00:d3:54:87:60:67:c3:90:bf:38:85:d7:
         17:ba:a9:1d:e5:18:9b:90:30:70:f4:6c:5c:3d:24:17:ab:11:
         c6:4d:06:68:78:72:92:26:1e:31:9e:62:21:d9:4b:c3:9d:50:
         9a:97:a6:0f:f7:af:b4:26:65:c4:c0:78:cc:bf:8a:82:92:fa:
         88:1e:66:87:3c:79:f8:2f:4f:53:fe:63:59:12:a1:9e:1c:c5:
         ea:a8:21:5a:84:fd:18:91:f9:1b:6d:44:95:61:10:a4:df:5c:
         fe:34:64:06:ef:f8:c5:38:81:fb:b6:96:46:93:5b:0a:58:b2:
         30:ec:0f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----