Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/42c934a7-9bb5-3743-a146-cf8c60d8a839.roa
File:                     42c934a7-9bb5-3743-a146-cf8c60d8a839.roa (raw, json)
Hash identifier:          h4MypMMhz2AqYwNVOeHIkXPM6AKHFkeMtYndcQebygA=
Subject key identifier:   65:AA:99:49:76:16:11:29:38:E1:7E:CD:1D:5A:B2:E5:71:D2:BF:F1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F22C11DD77C842BA6D994080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/42c934a7-9bb5-3743-a146-cf8c60d8a839.roa
Signing time:             Thu 20 Feb 2025 14:00:52 +0000
ROA not before:           Thu 20 Feb 2025 14:00:52 +0000
ROA not after:            Wed 21 May 2025 13:00:52 +0000
asID:                     22258
IP address blocks:        75.65.212.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f2:2c:11:dd:77:c8:42:ba:6d:99:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 20 14:00:52 2025 GMT
            Not After : May 21 13:00:52 2025 GMT
        Subject: CN=b426d0fd-f8d9-4804-93e4-0913ba32890e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:5a:46:0e:ab:14:64:3b:d9:3d:4d:ca:e7:85:
                    5b:e9:c9:77:97:10:1a:42:f9:28:1a:6c:b1:ec:36:
                    a2:68:94:05:30:b5:29:c2:87:eb:06:b2:59:c1:e3:
                    07:06:97:f1:d8:52:36:c4:51:f2:b2:1a:f8:63:3a:
                    f7:1e:77:19:eb:ba:b5:76:dd:95:54:41:f5:f7:42:
                    13:52:9a:c4:92:79:d3:3d:7b:ea:a9:56:f2:a8:c9:
                    26:51:d2:bb:68:30:12:52:30:34:3d:93:ea:02:26:
                    dc:4e:f0:b3:68:ff:9a:13:5e:f1:da:a9:d2:dd:5d:
                    3f:86:a0:ae:d3:ec:52:9b:49:ad:45:d6:2c:cc:e7:
                    32:e7:6f:04:10:ed:66:48:31:3e:40:07:b6:14:85:
                    8a:02:0c:ab:e0:28:d0:64:e1:7c:bf:57:82:4c:61:
                    5b:7d:1c:56:7f:96:02:d4:6b:fc:b8:8e:43:d4:41:
                    16:91:f4:f6:25:93:99:e1:6d:30:30:cc:51:37:d6:
                    08:49:3a:5e:2c:75:87:b5:f8:a3:ed:57:3b:43:6b:
                    c8:9d:61:82:cd:70:b1:2f:7c:d2:c7:3d:c2:2d:44:
                    3a:b0:b3:57:27:fa:bc:39:1a:d8:41:99:ba:ce:c6:
                    a0:e5:04:f0:51:87:25:4b:b2:1a:46:0d:b5:3d:e2:
                    45:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:AA:99:49:76:16:11:29:38:E1:7E:CD:1D:5A:B2:E5:71:D2:BF:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/42c934a7-9bb5-3743-a146-cf8c60d8a839.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.65.212.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dc:2e:e0:ba:d9:e7:ae:67:da:f4:28:c7:6e:be:29:9d:04:69:
         ee:6f:ec:61:4d:30:85:75:05:9e:9e:6e:c5:41:96:be:fa:e8:
         ed:40:1a:7c:15:79:44:c6:fd:be:7d:71:44:3c:ac:61:55:ee:
         62:07:50:50:a5:6d:2f:39:7b:49:f9:c2:24:42:59:d0:b8:57:
         0d:51:5a:ba:51:0d:49:ee:e3:bb:42:ec:e0:d1:b7:ed:49:5e:
         b5:ea:af:05:eb:84:74:87:a1:b2:71:f4:14:9a:f4:ba:dd:d4:
         5f:4b:8c:65:ca:9c:e3:96:1e:91:65:f0:5e:f8:7c:22:d7:fe:
         a0:7d:d8:25:bb:d3:30:56:a0:60:7b:04:a6:2e:30:8c:95:ee:
         ab:1e:9c:f2:59:4c:aa:83:f3:af:3c:83:2d:44:00:be:d9:3d:
         5a:c4:91:f0:14:e3:e8:1b:88:23:9c:5b:46:fe:70:4b:46:7c:
         8d:85:bf:5b:9e:c3:88:42:db:55:2f:02:46:d5:26:16:6d:e6:
         67:36:1b:ab:57:ee:57:a2:dc:b9:44:02:c8:6d:b7:4a:25:17:
         c0:cd:77:68:65:19:14:3d:d6:0c:f6:ef:d0:3d:10:43:7f:93:
         6f:52:32:5e:25:50:a6:53:36:65:6c:48:82:01:ed:14:93:3d:
         93:4c:09:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----