Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/01d5008d-d13d-3a29-bd5f-b7b21baeb1c4.roa
File:                     01d5008d-d13d-3a29-bd5f-b7b21baeb1c4.roa (raw, json)
Hash identifier:          2hTD+ld3a1NkiBvVwXeKjlKcnTL31uJU1o6PEp4qeR4=
Subject key identifier:   D1:21:B2:06:57:53:7C:99:E0:C7:BA:D7:1F:DA:B6:47:54:82:13:6B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F7C5DFCD44A791EC454F80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/01d5008d-d13d-3a29-bd5f-b7b21baeb1c4.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     33668
IP address blocks:        76.112.30.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f7:c5:df:cd:44:a7:91:ec:45:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=2b6da067-e5aa-40b7-a509-0908d395bbac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:7e:39:a8:12:5b:96:15:ae:de:14:f5:5c:a8:
                    e3:68:6f:3c:6a:6b:cf:84:18:4a:b2:55:0b:1f:b0:
                    69:56:58:8b:fc:9d:67:55:e2:cd:8f:20:40:ab:52:
                    8f:75:bd:78:bb:67:52:eb:03:b4:42:b3:44:4f:5c:
                    98:9c:4f:fe:fb:be:1f:5f:a8:78:7e:83:a6:5f:24:
                    12:97:fd:ac:00:38:ec:c8:e8:26:64:3b:35:05:6b:
                    84:51:98:2d:b1:10:54:31:91:52:4b:5b:33:e5:60:
                    c2:2c:0d:fe:13:50:73:36:9d:69:37:07:17:56:7e:
                    be:9c:42:9b:f0:78:33:70:4c:36:12:da:d3:4f:f5:
                    d6:27:2c:ad:8f:7f:bb:2a:87:f2:a5:69:cb:02:29:
                    ec:1a:28:3b:2f:28:46:93:66:e6:3a:05:57:14:89:
                    2c:b2:89:17:fa:7a:45:8a:01:1b:a0:4e:5a:66:67:
                    ac:3e:17:9f:63:f3:e8:f4:2e:a5:6f:c2:be:cd:33:
                    3a:2b:c6:09:2e:b1:f7:2a:17:a6:95:55:4d:6e:76:
                    8c:31:fc:cd:0b:7e:0f:b3:b5:0a:5a:15:2c:eb:ed:
                    35:51:11:20:9e:fe:54:7a:cd:5b:91:61:1b:0c:22:
                    0c:e8:e2:d0:e7:0e:78:82:13:75:8d:06:73:3d:2b:
                    1f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:21:B2:06:57:53:7C:99:E0:C7:BA:D7:1F:DA:B6:47:54:82:13:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/01d5008d-d13d-3a29-bd5f-b7b21baeb1c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.112.30.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:1c:79:d9:a1:c4:88:cf:72:46:29:af:0e:80:08:78:c6:71:
         03:0c:20:04:79:fc:47:3a:a8:82:84:09:44:f4:c4:2b:8b:7b:
         5e:22:64:78:8a:18:93:68:25:df:2c:4c:f7:b6:61:5f:40:ce:
         c1:d2:9c:83:d1:df:04:94:49:bd:16:60:4e:0a:5c:0c:3c:95:
         fc:06:72:74:f8:ed:45:5f:63:ae:16:31:db:db:75:a8:cb:db:
         88:b9:d1:93:83:f1:e4:16:ae:4c:5b:0c:a9:c4:ba:1b:e1:e2:
         7a:4c:a3:9e:89:78:85:6f:1a:72:f7:4b:ba:e6:44:b3:bb:14:
         da:71:75:c7:a8:cf:24:75:3f:12:c7:48:05:5f:38:67:27:f9:
         d3:4d:33:d8:a2:2b:8d:54:61:6e:02:82:3c:ad:fe:e7:4d:5b:
         b9:f4:d4:3d:38:39:a1:85:77:20:89:02:11:9a:6f:0a:f8:49:
         5c:4a:f7:0b:f5:20:34:fa:ab:17:b2:44:8c:69:8b:49:72:97:
         97:81:53:df:f0:79:0e:1c:55:48:14:52:2b:dc:79:91:47:9e:
         ef:09:b4:31:09:11:29:e2:b7:b9:27:ea:d3:5c:85:da:9e:5e:
         11:d0:8c:aa:81:64:eb:bb:90:55:db:b1:19:2f:75:dc:74:55:
         0c:73:c7:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----