Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/01b8cba2-39bc-35d9-b296-bd2f66623b2b.roa
File:                     01b8cba2-39bc-35d9-b296-bd2f66623b2b.roa (raw, json)
Hash identifier:          zQLKCvskCF4VLXISqP51UINQv9EO9oXs8ebNiU8nSDY=
Subject key identifier:   7A:47:29:97:DF:73:BF:DF:9B:5D:CB:FB:EC:03:5F:A4:4F:3C:5C:E2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6BE6EC4F7683170CB38740
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/01b8cba2-39bc-35d9-b296-bd2f66623b2b.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     33490
IP address blocks:        69.252.236.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6b:e6:ec:4f:76:83:17:0c:b3:87:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=5b33c153-45fb-4be7-8fc6-00d75ed649f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:18:f7:02:60:e9:5a:10:73:77:69:d9:23:84:
                    c2:dd:d7:45:40:d4:74:29:fd:b0:45:39:23:ea:33:
                    3b:e4:20:de:9b:b1:0b:41:8c:29:32:63:19:30:ae:
                    73:16:85:2b:0e:6d:25:e7:b3:b7:8f:59:74:4a:38:
                    7c:f9:02:c7:2e:f4:6e:bc:33:6f:a7:96:f5:2d:55:
                    f1:48:62:f4:f2:46:68:86:8c:77:4d:3e:d8:09:b0:
                    90:d2:de:c6:42:9b:94:5d:de:55:6f:aa:6f:ad:b7:
                    ed:46:8a:53:b1:45:e3:ea:0f:7a:98:3c:15:d6:39:
                    e4:18:66:11:a0:09:98:fd:3b:4a:bb:73:25:3b:46:
                    75:61:73:b4:72:ab:5a:aa:a2:0d:ce:33:60:79:9f:
                    c0:cb:fe:50:c0:60:7c:c0:41:af:bf:5a:59:59:cf:
                    2e:7f:b5:95:99:d6:2f:48:70:be:cd:a1:2f:de:fc:
                    37:5f:aa:17:3c:fb:0a:df:91:b9:c7:ea:ba:59:65:
                    5d:99:b1:21:09:e6:56:6c:66:62:72:4a:04:35:0c:
                    ac:83:94:0a:ce:9c:42:e9:62:e7:f4:e5:d0:c7:35:
                    52:5a:ec:09:ef:4b:b1:00:0d:eb:f8:5b:96:7d:5b:
                    11:b8:87:72:48:62:7c:74:3a:25:04:5d:af:15:39:
                    97:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:47:29:97:DF:73:BF:DF:9B:5D:CB:FB:EC:03:5F:A4:4F:3C:5C:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/01b8cba2-39bc-35d9-b296-bd2f66623b2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.252.236.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:f1:0f:e5:a2:a4:b3:5e:16:d0:06:e8:65:14:1a:2c:43:41:
         4b:db:44:57:d3:26:11:ee:31:99:95:f7:8f:08:27:76:82:0a:
         01:b4:de:82:41:85:3a:d9:12:c5:11:0c:36:f9:1b:e9:8f:95:
         64:79:3b:af:71:41:f8:46:51:19:41:92:8b:1b:d1:0a:d9:ca:
         16:c9:d6:90:08:0e:30:f5:2e:2f:ec:85:b9:1c:3d:55:c4:64:
         18:9e:5b:5b:53:1c:a6:72:33:eb:75:24:07:6a:68:55:f0:eb:
         5a:e8:3b:8d:69:66:2b:6f:70:c5:7f:5a:9c:9e:b5:6b:bc:31:
         e9:58:92:64:7b:08:df:d8:b9:c3:dc:ad:41:c1:93:0e:5c:8d:
         02:7c:3d:7b:9c:f4:6d:7b:1c:6e:c1:c4:66:19:f9:92:a9:1f:
         9d:2f:b5:13:bf:44:e0:5a:d3:53:9c:9f:53:23:20:85:41:e2:
         df:1b:bd:e9:00:6c:39:f4:95:d0:88:70:3d:5b:4e:50:29:41:
         9b:c9:51:92:a0:1f:20:29:e9:9d:50:8f:97:6f:51:88:cb:d3:
         c2:e5:1f:1f:af:64:2c:c2:d0:6b:7b:34:bb:a5:a5:ff:03:a3:
         30:aa:fa:ab:9e:a5:af:3c:65:88:4b:19:a0:78:23:d2:aa:4b:
         72:3e:88:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----