Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4ab46a89-eb74-3051-9b8b-943f2b603862.roa
File:                     4ab46a89-eb74-3051-9b8b-943f2b603862.roa (raw, json)
Hash identifier:          drKxqMX3zppL7qJcQ4kYaF/DIDrn+D9aPwm6efLKs1c=
Subject key identifier:   20:62:8A:0F:0F:10:76:88:71:91:A0:13:25:4E:CF:85:08:7E:03:FB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F94CBCD18F87BCB8E99B00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4ab46a89-eb74-3051-9b8b-943f2b603862.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     33662
IP address blocks:        76.142.96.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f9:4c:bc:d1:8f:87:bc:b8:e9:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=c126da3c-1734-494b-b505-0bf3ced45286
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a5:7c:ca:e8:f3:47:00:53:20:9f:90:2f:e8:
                    8b:76:ae:77:c1:fa:a5:60:57:c9:8e:d8:b8:cb:a4:
                    ba:c0:b8:62:33:05:48:14:4b:22:cb:2e:8c:b8:98:
                    e2:a5:08:5f:ab:c3:4a:f7:16:0e:3f:ba:f6:b4:3b:
                    19:32:f5:e7:8c:0f:29:63:c3:3c:ca:2f:2b:24:1f:
                    a3:73:8e:b8:b1:85:aa:d7:05:36:d9:8f:8b:b2:d8:
                    e5:64:c7:c4:14:ec:0b:23:f6:aa:5b:43:2a:5a:3a:
                    0d:d5:12:05:47:89:17:a3:ab:eb:ea:76:f1:16:f5:
                    51:0d:9e:38:16:0c:09:73:1b:df:e0:f5:a0:01:a9:
                    83:07:6c:05:30:1d:a4:ca:09:c7:3f:8f:ad:4d:f7:
                    6f:42:1e:d0:b4:34:2c:e8:a5:95:90:85:09:1b:54:
                    5b:9c:ca:5b:5c:41:84:96:49:b9:f3:b7:67:05:82:
                    ae:09:1a:78:07:42:2f:d1:6b:61:a2:ed:a1:c1:94:
                    f9:8e:5d:7e:99:35:5d:68:ea:08:27:8c:a8:10:23:
                    c3:f0:71:c9:e2:69:9b:c8:bb:66:35:06:f6:8b:e7:
                    a2:24:d8:09:89:1c:8f:10:ab:99:ff:3d:28:fe:81:
                    6f:d7:fc:d8:59:96:e5:7b:57:4d:40:f0:b5:26:5a:
                    a1:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:62:8A:0F:0F:10:76:88:71:91:A0:13:25:4E:CF:85:08:7E:03:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4ab46a89-eb74-3051-9b8b-943f2b603862.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.142.96.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:f1:d2:3d:c7:4e:2d:12:e7:fb:ce:38:11:95:f6:81:d0:e1:
         73:d8:14:d5:a5:8d:ff:39:c8:a3:75:2b:46:ed:ca:37:b0:f1:
         11:16:68:a1:59:27:b8:81:08:c6:b7:e0:e8:54:f7:d1:d8:1e:
         cb:a7:7b:44:64:9c:9c:c3:77:4f:58:57:bb:74:43:e2:58:31:
         8a:12:8f:ff:2a:d9:c6:11:8f:4c:6d:39:0d:68:27:7a:31:6f:
         00:ed:e1:b9:9f:1f:4c:11:88:71:bb:68:00:dd:9c:51:bb:15:
         3c:a8:db:de:00:a0:f2:41:57:52:85:ad:d0:c1:2a:ad:85:24:
         d1:19:05:39:9e:78:67:ce:41:f6:96:fc:d4:2a:4f:85:33:0d:
         8b:6b:6b:49:6a:e5:14:f1:3d:9e:ec:73:b2:73:eb:66:f3:d2:
         32:f5:0d:f3:53:66:47:c2:b4:80:9a:ff:94:b8:4c:46:da:a2:
         f3:12:2b:87:95:c3:b5:14:60:b4:fc:e8:b7:6b:37:80:e6:b7:
         b0:3b:69:f7:e7:54:5f:ed:a3:96:82:a8:a7:d8:aa:b7:ab:4f:
         65:4b:de:bb:b1:c4:99:31:53:30:94:55:c0:76:53:94:d4:6f:
         69:e3:86:61:3e:2d:30:82:41:26:96:eb:b7:dd:40:d3:6d:6a:
         5c:ea:86:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----