Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/30fcb8e8-96e0-3bc3-87ae-e77b4b7f1c66.roa
File:                     30fcb8e8-96e0-3bc3-87ae-e77b4b7f1c66.roa (raw, json)
Hash identifier:          Q3C79lFRf+WOwcnuPrf4BSczEvxU6yAvGCW8X0MyfA0=
Subject key identifier:   DB:74:0E:64:A1:28:F0:84:22:65:CA:E4:C1:4C:D2:44:72:3B:45:2E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F22C1F9F7B4129D77B36A140
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/30fcb8e8-96e0-3bc3-87ae-e77b4b7f1c66.roa
Signing time:             Thu 20 Feb 2025 14:00:52 +0000
ROA not before:           Thu 20 Feb 2025 14:00:52 +0000
ROA not after:            Wed 21 May 2025 13:00:52 +0000
asID:                     22258
IP address blocks:        98.251.242.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f2:2c:1f:9f:7b:41:29:d7:7b:36:a1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 20 14:00:52 2025 GMT
            Not After : May 21 13:00:52 2025 GMT
        Subject: CN=0b7f0b4a-56b0-4fcd-bfc6-c5f8ca05af31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:fe:89:12:f3:3b:1a:98:ad:b6:cf:18:65:16:
                    7e:73:c9:f1:24:0f:c0:7b:80:a3:13:f4:49:30:61:
                    05:87:05:84:2f:70:66:bc:5f:60:86:81:da:e4:d0:
                    e8:b0:5a:0d:f9:59:72:0c:c8:23:c7:41:6f:b5:76:
                    ef:29:1f:87:54:07:bc:6e:22:94:67:45:91:02:38:
                    6d:a3:e3:0b:7b:9b:1a:d0:6c:fb:33:49:26:ba:1d:
                    34:b9:54:c7:12:05:24:ef:18:00:74:25:01:53:4c:
                    dd:09:07:13:76:d4:77:5d:8c:b9:c7:da:b6:45:7f:
                    9a:27:d6:7c:45:d8:4a:e6:e1:de:c3:91:f2:62:7f:
                    0f:78:ce:81:b7:7f:f2:2c:40:87:a4:d7:d0:4d:3c:
                    6d:4f:31:2b:94:39:72:4e:05:95:b5:c4:3b:51:92:
                    98:f9:5d:3d:8b:3c:4a:67:68:2b:9b:39:95:0c:f6:
                    e5:3f:29:c1:8f:ef:2f:67:1e:4d:ef:56:9f:74:7f:
                    ef:f3:b7:54:9c:85:21:a8:2e:38:1c:3b:da:b8:3d:
                    07:1c:ce:1d:e0:54:5d:8c:7a:a8:a5:4c:06:03:0f:
                    8b:e5:e9:af:b1:b5:43:83:16:08:05:cd:35:6b:bd:
                    9c:23:2a:b3:30:0e:27:11:33:01:f3:09:c7:a7:59:
                    91:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:74:0E:64:A1:28:F0:84:22:65:CA:E4:C1:4C:D2:44:72:3B:45:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/30fcb8e8-96e0-3bc3-87ae-e77b4b7f1c66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.251.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:f8:cf:34:8e:1c:2e:10:0f:16:e9:0b:61:b5:7c:1e:c5:2f:
         28:22:58:ae:09:3d:b0:30:27:d0:8c:e7:8d:3a:fd:11:d4:22:
         91:a2:32:ac:97:40:b0:92:52:60:4a:fe:2e:8f:c6:ae:f8:e2:
         05:c7:4c:a1:87:15:8f:e1:ba:bc:d5:00:e2:45:7d:a7:29:34:
         36:7f:d3:94:66:6b:ce:60:dd:4f:f1:80:21:e9:23:77:24:c1:
         20:b6:85:10:67:94:ed:3a:51:b2:ee:95:5a:15:71:37:cd:e3:
         84:e8:a3:54:3e:82:2e:f1:10:4a:76:38:bc:48:a4:b5:d5:b8:
         86:9e:da:56:bf:05:0a:90:18:45:71:57:45:26:a6:a1:24:06:
         47:90:3e:45:bf:b7:c6:26:f7:87:c8:6a:20:a2:be:51:ab:7d:
         54:ac:0c:24:06:f5:60:58:55:2f:bb:3a:6c:fa:40:ab:3d:9d:
         07:3a:5d:7f:ed:f5:e9:16:42:21:21:0b:e3:0d:fe:58:55:fa:
         59:2b:4f:e2:83:ad:7c:8a:7b:2e:3b:9f:a9:c9:02:46:84:71:
         94:e1:61:f7:fd:2e:8b:d1:59:b1:a3:29:a3:f8:b4:55:97:16:
         0e:73:2d:15:8c:1a:c3:a2:22:96:90:1e:82:3a:51:ca:46:2a:
         cd:cd:b2:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----