Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6025ad91-410b-33c5-90c2-936a8a3ebfcb.roa
File:                     6025ad91-410b-33c5-90c2-936a8a3ebfcb.roa (raw, json)
Hash identifier:          hgAAZBoWyACoMA99KRrmuzd2auSJ+euOiLUbHcVp5Jo=
Subject key identifier:   3D:53:80:B8:E3:57:C3:0D:8D:33:EC:B4:B5:A2:38:03:EA:8D:A5:7F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6DBA67A6D103B8F49A6900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6025ad91-410b-33c5-90c2-936a8a3ebfcb.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     13367
IP address blocks:        66.41.174.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6d:ba:67:a6:d1:03:b8:f4:9a:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=9bf93ff5-a8fd-4744-846f-d55feadce759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:68:95:fe:c5:6e:be:a6:36:6d:42:1d:02:18:
                    aa:99:0c:9b:bf:9a:87:40:33:d0:a3:83:66:5a:36:
                    0f:3f:2b:46:e7:ec:fa:88:8b:d9:2f:6f:da:77:8b:
                    1a:96:5d:09:42:8b:10:8d:60:88:e4:fd:bb:3a:58:
                    50:af:35:cd:5d:31:28:fa:4c:3a:6e:ad:b9:de:c2:
                    cf:6f:9c:ee:27:1c:ee:75:a5:a4:a8:ed:1f:57:df:
                    52:7b:62:86:d7:a2:c8:60:56:1f:9b:30:0e:08:b4:
                    a1:da:9d:77:b3:84:01:c0:95:75:c9:07:ba:6d:27:
                    11:63:31:05:77:63:0b:ee:26:98:5e:8e:a1:d5:13:
                    a0:d7:b3:2f:12:66:a1:fd:5c:e1:23:31:7e:01:56:
                    21:f1:53:fe:42:df:50:65:a0:2e:21:e3:bc:02:89:
                    f6:42:34:21:57:eb:bf:38:8d:6d:ec:6a:c3:a8:64:
                    d3:33:36:00:fb:aa:77:18:9d:ad:73:fb:cd:28:12:
                    00:50:cf:54:8d:9b:66:28:f7:d1:99:b4:8c:5c:81:
                    f8:3c:df:ca:ad:30:3d:de:ca:4a:79:0f:87:77:56:
                    9e:14:a0:10:1e:57:d3:a0:ef:12:08:4c:88:c6:30:
                    e0:a1:9e:bb:8d:7e:58:03:cb:0a:51:d2:7c:96:72:
                    2c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:53:80:B8:E3:57:C3:0D:8D:33:EC:B4:B5:A2:38:03:EA:8D:A5:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6025ad91-410b-33c5-90c2-936a8a3ebfcb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.41.174.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:51:45:25:ce:0e:fd:1e:cd:7d:76:fa:59:26:ef:6a:7b:5f:
         70:a7:70:6d:55:64:19:4a:a7:fe:20:f5:d7:eb:5d:45:3d:15:
         b0:2f:e7:47:80:cc:cc:20:f7:9d:0f:1e:5b:d3:a8:26:ca:da:
         20:ab:6e:04:40:d1:84:3a:48:12:ff:2b:32:5f:4a:f7:0d:d0:
         94:d2:cb:2c:1b:a6:d5:37:aa:a8:dc:3d:87:7a:95:11:21:fa:
         96:63:3f:73:23:ef:52:c5:fd:8a:45:ea:f3:0f:1e:e2:72:f2:
         c0:14:fe:bc:5e:3f:ab:46:91:7d:0e:a3:05:c1:2e:de:73:14:
         1e:61:b5:15:f1:97:27:fb:f6:b1:28:72:14:b5:d4:a2:8c:98:
         ae:72:6c:38:a2:fa:68:f0:f6:50:b6:cb:73:4f:a5:87:f4:29:
         98:42:cd:e7:a7:64:cf:07:13:66:cc:1c:6d:4c:05:60:d5:13:
         01:5a:12:12:e6:bb:2e:18:dd:c3:9f:47:3c:08:8f:22:27:cb:
         fb:23:4f:b2:3e:10:ae:f7:a6:4f:0b:08:a8:71:e7:78:2f:38:
         22:9a:b0:67:f9:4b:50:e3:51:d9:90:a8:af:a2:e4:4a:f1:96:
         ba:2f:fe:28:67:f6:31:07:38:72:04:6b:2a:44:a1:d6:b9:c8:
         cb:16:2e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----