Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/530af413-da80-3783-ae56-442dcc38f2af.roa
File:                     530af413-da80-3783-ae56-442dcc38f2af.roa (raw, json)
Hash identifier:          dYN6vNtCBt69ECv8hd6CKvE4eX9NclXp5f9853aEroc=
Subject key identifier:   B2:02:07:0E:47:85:AE:25:6F:FD:95:8A:1B:75:57:9F:64:45:1F:D4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6D17E75919CAAC4B3E3E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/530af413-da80-3783-ae56-442dcc38f2af.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     33656
IP address blocks:        162.151.130.128/25 maxlen: 25
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6d:17:e7:59:19:ca:ac:4b:3e:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=d74aa63b-64fd-43c2-94c7-080309b9dc4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ed:7b:a4:9c:ee:ca:3a:2c:69:96:c2:25:e0:
                    06:fc:a4:01:cc:71:a0:ac:4a:40:b0:ad:2c:6b:09:
                    bf:19:bf:f7:ca:15:19:6b:14:11:70:6f:bb:47:75:
                    83:2a:dd:a5:c5:84:c6:99:b6:d9:60:34:5c:cf:02:
                    06:4d:f5:a9:e5:aa:ce:1b:06:bb:1b:1f:15:b3:5b:
                    c6:fb:6d:0e:e2:4f:b0:1a:97:78:de:9a:af:91:4a:
                    e2:57:3b:e0:ae:b5:ff:c8:21:42:de:18:2e:02:bd:
                    58:d5:7f:1b:4a:f4:28:ef:de:49:7a:68:5e:7c:3e:
                    da:60:3c:ac:c1:e2:83:bd:72:1e:4b:00:32:36:49:
                    a0:9b:ac:de:3b:46:62:25:5e:39:30:ee:8f:c7:30:
                    c8:36:7f:9a:56:0d:d0:42:4c:30:4e:32:9f:c3:3e:
                    96:36:75:4d:e7:aa:6f:67:d6:b3:0f:03:4b:79:59:
                    07:be:b2:a2:a5:72:a7:8c:88:7f:c0:f8:f8:8a:06:
                    a2:a2:97:5f:bf:30:b7:97:7a:5e:3b:6f:ef:53:82:
                    0d:10:ad:e8:55:cd:1a:8d:58:5c:02:e2:df:c3:76:
                    ed:8a:4e:18:83:08:2c:f0:4f:6e:35:7e:87:ac:07:
                    5e:ef:a1:c3:85:4a:f0:33:32:ac:cb:15:90:34:a1:
                    91:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:02:07:0E:47:85:AE:25:6F:FD:95:8A:1B:75:57:9F:64:45:1F:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/530af413-da80-3783-ae56-442dcc38f2af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.151.130.128/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:51:90:dc:4c:88:6e:9e:e7:9b:ef:e4:f8:d5:41:69:d1:08:
         5d:f2:37:b1:bc:66:e9:e6:18:55:6f:e1:1c:1f:62:db:be:38:
         37:74:94:69:48:63:8f:74:19:55:5e:49:2b:a8:2c:c3:b9:c5:
         02:52:4c:06:e6:0d:17:71:b2:16:08:8d:45:cb:9c:fd:de:e3:
         7e:87:f1:b0:5e:39:d0:cf:be:aa:11:9d:fa:59:fe:eb:9d:c0:
         1c:e2:a7:93:60:ba:a6:96:91:d3:be:14:9d:e6:ee:e6:e7:6d:
         55:f7:54:3a:13:37:16:9a:58:ca:dc:e8:19:bb:d6:6c:9a:66:
         c9:e9:74:7e:e0:c0:9e:24:32:86:4d:cb:e3:9c:6c:80:22:c5:
         e4:85:bd:eb:82:0b:c3:3d:87:5b:8f:1e:e4:20:95:4b:fb:5f:
         97:1b:ed:c4:dd:3d:bd:4b:e7:9f:ce:24:65:d7:d2:b7:39:dc:
         9b:b3:ec:eb:99:5d:c1:02:76:86:9a:66:ed:b6:2e:b3:d5:74:
         23:ae:60:75:28:36:19:9e:8f:d3:34:2f:ae:6e:35:25:9b:1e:
         b5:6c:e9:63:56:50:75:a9:aa:03:f4:bd:ab:33:05:af:c2:26:
         10:42:dc:69:75:e0:f2:14:e7:4e:61:26:5a:77:0e:c3:90:43:
         d5:9f:96:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----