Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fd7b85e4-a691-3f87-9457-9bbe058da2b6.roa
File:                     fd7b85e4-a691-3f87-9457-9bbe058da2b6.roa (raw, json)
Hash identifier:          i4Ay2JXimmp4EfYA2/SaATbDU12YLSKAPfnP5LqRCwc=
Subject key identifier:   16:F7:49:8B:81:EF:1C:EF:EF:46:54:29:93:DB:F1:70:03:74:A4:AC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA6C60352CB79C0299828A0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fd7b85e4-a691-3f87-9457-9bbe058da2b6.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     33659
IP address blocks:        96.110.60.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a6:c6:03:52:cb:79:c0:29:98:28:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=54a9acb4-feca-47e2-9074-7e6674114c23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:8f:30:f6:ba:e6:f2:a6:38:e7:99:0f:e9:9e:
                    ac:da:cc:f7:9f:a2:f0:c9:5a:f5:a1:2f:2c:7c:54:
                    29:9b:17:dd:69:fd:80:7c:1f:40:c8:7c:36:2f:f6:
                    71:5a:eb:68:30:8c:14:d9:6b:98:98:40:22:1a:79:
                    f8:f6:d4:30:2c:26:0d:1a:f1:87:c2:ed:c0:18:82:
                    95:86:5f:e4:67:ff:c9:6b:8b:a1:01:e6:d8:d9:bc:
                    03:6c:91:fe:0a:6b:5f:94:37:5e:23:ac:cc:d0:56:
                    37:0d:97:4d:59:a9:b3:92:b9:d4:88:84:7a:3e:16:
                    ef:51:c8:1b:9f:bc:e1:da:de:fc:70:28:85:c3:ff:
                    47:7b:de:fa:6c:01:45:e5:6c:63:fd:c7:4f:5e:1b:
                    1b:17:1a:ae:11:da:6a:05:6b:8f:b7:42:cd:64:60:
                    40:21:19:3e:d6:c0:9d:b1:1b:4c:bd:f8:6e:38:b8:
                    d7:d2:d3:3a:93:97:63:d8:a6:bd:29:f6:24:0c:ae:
                    96:19:b3:67:68:ef:9b:68:b8:fe:64:76:b9:a7:71:
                    33:1b:5b:eb:5e:3d:d6:8b:cc:d2:04:aa:37:a3:76:
                    e8:fa:01:97:eb:33:df:15:11:e3:4d:03:94:b6:39:
                    76:23:a9:e6:c1:40:72:93:30:96:8e:83:d8:5e:0d:
                    7d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:F7:49:8B:81:EF:1C:EF:EF:46:54:29:93:DB:F1:70:03:74:A4:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fd7b85e4-a691-3f87-9457-9bbe058da2b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.110.60.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:b5:28:15:7d:0e:6a:56:10:a6:94:41:f7:60:be:bc:e3:1d:
         4a:f5:eb:0c:12:96:1d:e8:b2:7f:d1:1f:9f:23:b5:b3:57:6d:
         30:fb:9b:2f:7d:a5:f0:df:c2:24:13:49:2f:ac:b1:c7:b9:43:
         cf:ca:08:36:7b:db:10:68:5c:41:d8:81:39:62:2a:dc:ab:b1:
         41:a0:7c:73:3b:3c:1e:79:9c:1b:a5:8e:eb:cb:29:92:c3:16:
         a4:f4:96:a8:f8:75:bb:f3:1a:0c:e9:e4:e7:b0:c5:96:ec:96:
         ad:30:e7:a8:d5:2b:81:13:f6:47:9a:1d:97:79:96:f0:1e:72:
         af:25:33:b5:67:b0:59:c1:16:b1:0c:59:47:82:8f:7d:d4:9f:
         2d:76:13:32:9c:72:b0:ff:d8:88:6f:5a:19:9c:88:65:04:29:
         3c:dc:af:44:8a:2d:8f:f6:e4:09:9a:fd:5e:f5:f4:af:5c:a3:
         14:94:db:f3:38:70:6d:fe:d2:5d:28:71:70:a9:e8:28:45:b4:
         37:1d:30:6e:9a:96:34:9e:63:d4:d3:e1:9f:f6:e5:5c:df:94:
         d3:da:39:a1:cc:c7:2c:ba:2f:89:b4:13:db:aa:0a:de:5f:ed:
         ee:e4:02:80:35:fb:67:d4:f4:4e:f5:bf:88:ea:71:5a:b9:22:
         cf:0c:30:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----