Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2f0e30b4-20d9-39cc-91eb-b398690ac541.roa
File:                     2f0e30b4-20d9-39cc-91eb-b398690ac541.roa (raw, json)
Hash identifier:          yzSOZQUbyMdE7cbPJsHmakSgS5UU+AKJpcLj4XoF70I=
Subject key identifier:   CA:38:2D:47:EA:2F:2B:F8:AC:1D:10:EA:B2:EC:7C:CB:BA:DB:78:DC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6D66F62996CA910123D400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2f0e30b4-20d9-39cc-91eb-b398690ac541.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     33651
IP address blocks:        98.47.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6d:66:f6:29:96:ca:91:01:23:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=8f83c233-fb7d-4e7f-97c4-6a6cbb6be1fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:48:34:d1:62:c2:08:da:6d:12:3b:fa:72:14:
                    2d:a2:28:7a:bd:a1:ca:90:5e:8c:d0:2b:f3:7d:c9:
                    9c:0f:10:7b:48:67:0c:c4:6e:27:b6:99:96:d6:07:
                    a2:ef:f2:23:9f:46:71:c7:d6:84:86:7d:ab:0f:c3:
                    3e:9f:f0:fe:f7:be:dc:92:8f:1b:b4:8a:59:63:24:
                    d7:7b:51:b1:cb:28:5e:a1:6e:68:d6:32:22:45:21:
                    0b:0c:59:6a:fd:1c:b6:4c:e7:aa:43:2d:5f:8c:ca:
                    15:11:3d:b5:65:a0:b4:35:72:b2:ed:04:1d:7b:56:
                    55:84:a9:4b:32:95:69:45:93:2f:16:05:c3:80:e2:
                    51:16:00:28:a2:6b:4b:3f:d7:83:c4:8c:92:2a:f0:
                    59:cd:60:14:e2:d5:49:94:89:fd:87:04:7b:e1:de:
                    3f:80:71:22:aa:05:b9:54:41:bb:17:3c:84:d3:17:
                    32:d0:5e:88:9b:42:73:5d:bf:43:99:62:2b:43:78:
                    a4:09:fd:96:cc:74:b1:81:2c:a2:e5:fd:99:88:4a:
                    ad:06:5b:a1:43:f2:8e:97:4f:6c:8c:60:a5:aa:09:
                    71:c7:3c:ff:9b:2a:00:59:c3:d3:db:ca:fa:53:5a:
                    e5:b8:07:c4:f4:97:31:46:8d:8e:50:d3:d7:6b:47:
                    44:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:38:2D:47:EA:2F:2B:F8:AC:1D:10:EA:B2:EC:7C:CB:BA:DB:78:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2f0e30b4-20d9-39cc-91eb-b398690ac541.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.47.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:0c:a9:a7:5a:c1:00:47:9e:91:fb:f5:dd:80:69:ec:d1:f3:
         17:8c:4e:80:70:3f:37:90:d6:5b:61:b9:f4:a6:d5:1d:68:d4:
         06:fb:3e:43:4f:1c:dd:95:da:fd:e8:01:65:9e:27:79:3b:15:
         7d:72:1c:0c:99:59:33:3f:61:5e:0c:22:dd:c0:19:9e:9f:ea:
         ae:cf:02:60:52:26:c5:3c:55:ae:11:77:84:ed:65:e7:cf:b8:
         19:63:a1:ca:1f:ae:c4:06:59:2d:f5:59:97:ed:68:6c:8a:2c:
         18:f8:79:5c:f9:af:a9:c7:f7:10:b0:28:03:e1:55:87:0b:7e:
         b9:5e:77:a9:02:c4:e3:7f:bf:ed:65:08:f2:5e:d3:6d:46:88:
         76:c2:b3:15:02:a6:c4:42:fa:a5:5a:30:77:1c:85:d1:6b:74:
         3e:a2:99:44:96:4c:24:e3:5f:2a:2b:81:88:e0:e0:76:ea:07:
         b3:50:f0:0e:be:90:97:5d:e0:21:5e:1c:d2:6a:57:0d:da:6b:
         48:76:cc:db:32:30:56:3e:6e:b4:82:da:e9:c8:d0:3a:79:b2:
         c8:8f:89:3d:1a:11:c3:87:9f:36:22:3a:7d:91:17:78:bb:16:
         d8:b5:31:22:f2:89:77:8b:89:3c:c3:fd:f5:69:ef:e7:bf:02:
         95:bf:d1:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----