Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/57bbc446-5b2e-3aae-adf9-e952ee034196.roa
File:                     57bbc446-5b2e-3aae-adf9-e952ee034196.roa (raw, json)
Hash identifier:          IibmJ+LJpJot4/NeDa8p/C0ejhms1EW9mbqL8xzQgeY=
Subject key identifier:   E4:7E:75:CB:B8:FD:44:64:5A:8B:BF:93:DC:08:A8:7F:1E:47:83:01
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F8E34D0679CDEA4A49A2A0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/57bbc446-5b2e-3aae-adf9-e952ee034196.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     33668
IP address blocks:        68.41.254.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f8:e3:4d:06:79:cd:ea:4a:49:a2:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=8dee5139-ca54-4d46-9792-9fd67cb300c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:db:80:cd:b8:66:45:ef:b7:d9:df:d2:47:28:
                    43:2a:11:ec:04:df:43:46:41:2d:95:4f:52:51:67:
                    8f:63:b6:7d:1f:17:4f:eb:20:fb:26:f7:2a:96:1d:
                    a5:cd:8f:f5:d0:ca:79:74:af:fa:6d:a1:9c:21:3b:
                    97:85:a5:3a:aa:82:e6:d9:80:0d:9d:a3:24:b7:07:
                    be:4c:f1:0c:8e:c2:cf:18:d7:92:4c:0a:68:20:53:
                    91:d4:48:11:b7:36:a8:ed:7b:d2:a8:c0:0f:25:fd:
                    50:bc:3a:17:83:03:52:a1:c3:9d:cc:43:d4:ae:2b:
                    5f:aa:5a:87:70:f3:30:ea:0e:97:0a:c2:3a:6e:72:
                    81:b3:61:a5:ab:71:6e:ec:4d:3b:9f:49:90:53:90:
                    c4:d7:e8:7d:2c:c1:70:a8:e2:40:f9:04:64:12:e1:
                    8d:15:09:94:5d:d8:71:07:58:67:a4:72:78:86:77:
                    80:6f:24:2f:c8:98:79:7d:6a:78:44:48:26:d1:f4:
                    c9:d7:1e:0d:ca:e1:25:90:ce:4e:1b:f5:28:5e:3d:
                    25:41:78:4d:60:66:ee:a8:73:26:00:0f:ff:87:47:
                    80:9f:23:cc:fc:8e:79:4e:d0:7a:fd:dd:ff:24:49:
                    5b:46:ca:15:85:a3:69:9a:c0:61:b5:0d:fd:86:3c:
                    65:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:7E:75:CB:B8:FD:44:64:5A:8B:BF:93:DC:08:A8:7F:1E:47:83:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/57bbc446-5b2e-3aae-adf9-e952ee034196.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.41.254.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:78:f9:74:18:e1:99:1b:6e:d2:5a:4b:4b:f7:7e:e0:5c:90:
         dc:ba:ff:ba:c8:f3:e5:f3:7f:a3:aa:d5:1b:57:01:74:47:b4:
         77:f6:c4:9f:21:c2:30:43:11:93:32:3e:92:59:7a:2b:eb:74:
         33:a7:c6:70:ca:a3:4e:46:aa:2a:9b:fc:09:6b:62:c5:66:33:
         b8:ff:1d:8a:97:ee:00:ee:72:87:60:83:00:51:4a:fc:29:96:
         f4:f2:50:60:82:70:03:e9:f6:14:00:be:eb:8d:a6:6a:f1:6c:
         ef:b8:f0:33:eb:11:bc:cb:52:23:eb:18:2a:7d:a0:dd:af:aa:
         39:44:6e:14:7a:c4:6d:65:82:05:79:67:0d:8d:dd:d1:5f:c1:
         43:72:d8:a3:67:2a:de:09:57:27:f4:6b:b5:24:08:5e:36:86:
         86:6b:91:4e:7e:52:75:19:81:bd:25:bd:9f:59:ec:d9:4d:eb:
         87:9e:a9:41:34:bd:ee:cc:0c:d7:16:a3:3f:1c:85:df:57:ca:
         fe:e8:65:f7:56:d9:f9:e4:94:1c:84:03:ae:5a:61:b9:71:e7:
         82:df:6f:a1:a8:39:d6:a4:65:53:bc:3e:81:5d:e5:98:54:6b:
         02:30:01:47:46:6d:6d:0e:de:8d:f1:5f:b9:ee:f4:55:3b:bc:
         89:1c:9e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----