Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2e2af829-8947-3558-88d6-22fc7fa2583b.roa
File:                     2e2af829-8947-3558-88d6-22fc7fa2583b.roa (raw, json)
Hash identifier:          1YXWRR4WoBr0EkCNw2NxOIsyBXD6pp8Bx/GuQ8TympM=
Subject key identifier:   61:C5:DC:F9:84:49:75:83:1B:36:D7:20:41:7B:E8:B6:A4:AB:0C:E4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6D46AC2F2F03525EEBFD00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2e2af829-8947-3558-88d6-22fc7fa2583b.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     21508
IP address blocks:        2001:559:c0::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6d:46:ac:2f:2f:03:52:5e:eb:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=5e144acc-82f7-4b8a-b0a3-ce5f2fe7321d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a0:0d:3f:c1:1d:3a:95:7d:ea:ca:96:63:65:
                    57:2f:2a:9c:ae:ca:9a:24:af:f3:9f:ab:3b:c3:bf:
                    ea:52:a5:0e:15:48:ca:fa:45:1f:95:78:f2:97:f5:
                    34:91:f3:88:81:5c:84:5f:90:db:95:5e:29:a8:4f:
                    90:56:91:2a:c5:2f:84:e1:80:63:28:61:49:32:ff:
                    a5:e2:4c:85:a3:65:4f:5e:54:e9:49:c0:f8:40:b7:
                    a1:e4:3d:04:f6:13:e9:39:87:29:f5:3b:58:9f:7e:
                    77:aa:a9:58:64:de:86:99:37:a1:f8:46:00:67:fd:
                    e6:f6:b7:3f:3a:6a:6c:9f:64:8d:df:3e:55:2c:1b:
                    1d:9c:6d:87:7f:95:64:88:55:0e:85:e1:4d:60:fe:
                    32:24:c9:dd:db:04:23:ff:2e:e5:7e:81:2e:e8:e2:
                    e0:ee:11:9d:f0:d8:df:5e:bf:75:3f:90:85:d9:5a:
                    9e:3d:db:70:64:5b:0c:c2:80:04:cf:bd:b8:a7:45:
                    94:89:f6:4e:b3:e8:75:04:b6:95:a8:f9:d3:35:b1:
                    2f:58:2c:9c:74:9d:cb:f8:3e:21:64:4f:bb:68:74:
                    a5:af:c2:f0:2e:fd:20:13:1a:8e:41:b6:e0:31:16:
                    16:38:c7:bd:33:b7:e9:e9:57:66:fc:b7:19:3a:57:
                    eb:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:C5:DC:F9:84:49:75:83:1B:36:D7:20:41:7B:E8:B6:A4:AB:0C:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2e2af829-8947-3558-88d6-22fc7fa2583b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:6a:4c:99:ca:c1:89:08:2a:16:f0:f5:c7:5e:be:87:34:75:
         db:77:79:32:20:c2:4e:b6:fc:27:be:58:66:81:22:f6:57:50:
         a9:de:7a:91:dd:73:9f:18:78:c2:6b:6c:c5:70:90:fb:6e:be:
         82:ed:59:35:d1:2d:94:85:2f:d6:2b:fa:42:fd:de:0b:2d:f0:
         76:fb:e5:31:32:c5:08:cd:df:11:81:b4:68:a0:37:2f:79:c2:
         ce:cb:21:37:4e:e4:09:3e:0d:71:8f:da:81:42:22:30:bb:ee:
         e4:1a:87:72:c0:91:0e:fb:2b:8b:f5:09:97:db:48:6e:42:35:
         b7:26:2e:f1:05:36:ae:cf:33:99:e5:0b:7e:d8:52:2f:8d:45:
         5e:7b:5d:cc:c1:73:20:0b:39:9a:14:27:5a:db:57:b5:5a:e7:
         9d:38:af:24:c2:88:a4:69:44:9e:86:03:04:2f:d5:86:f9:53:
         7a:fe:25:7e:6a:a4:12:7c:ae:d2:6a:e3:04:c7:dc:ab:d6:21:
         48:d8:d9:c0:0a:ed:13:72:5d:41:0c:54:ab:dc:6e:d5:6a:73:
         39:96:97:61:96:99:75:77:4d:27:b8:3e:72:45:f2:d0:61:5c:
         85:0d:fe:56:fb:9f:94:bc:21:8a:cf:0d:79:4a:a4:40:44:ce:
         72:58:53:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----