Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6349e693-77e5-3d40-b633-c2d34d7f5c1d.roa
File:                     6349e693-77e5-3d40-b633-c2d34d7f5c1d.roa (raw, json)
Hash identifier:          CtKEe0V7edCBbaZlekqYQI7h3KXOqGPzIhQqmyZ3pXI=
Subject key identifier:   4D:A8:42:E6:0D:A8:89:4B:BC:B7:57:B6:84:CF:80:5E:A0:14:BC:FF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CB01B8EC12235709FA51100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6349e693-77e5-3d40-b633-c2d34d7f5c1d.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33651
IP address blocks:        76.126.74.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b0:1b:8e:c1:22:35:70:9f:a5:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=70aa7f4e-ac2b-46a4-9cb4-724c1066b5d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:76:86:15:27:19:41:c8:a7:66:6e:9b:20:d7:
                    46:6e:75:a3:72:94:34:96:e5:3b:50:91:90:90:9e:
                    e9:a9:fb:d1:fd:07:0a:3a:dc:20:b9:98:00:1d:fa:
                    5d:71:29:ec:12:80:d7:8b:0a:86:e5:49:b4:78:af:
                    79:9a:c2:97:cc:37:45:fa:17:6d:bb:c2:88:e7:76:
                    e8:3c:3f:cf:5b:98:a3:cf:0f:39:f7:f1:6e:28:a8:
                    fc:60:59:e9:64:fe:4f:5e:94:42:e2:29:e6:89:5b:
                    02:e3:37:4d:35:c1:4e:69:b2:0d:05:7c:da:08:be:
                    f6:03:86:77:79:e0:f0:fb:c9:c1:48:f5:fc:c3:fe:
                    91:40:8c:a6:ed:4c:25:d3:8a:a6:a2:62:e6:25:19:
                    4a:2e:a1:db:f3:d9:b5:bc:64:6f:0a:ea:15:a5:50:
                    57:44:76:61:69:3a:67:12:14:c9:2f:d7:c1:5e:45:
                    a3:ec:17:c1:ac:8d:62:f5:7d:61:6c:a3:7c:4e:07:
                    f7:ec:53:99:ab:bb:5b:c4:1f:75:fe:58:b3:7f:88:
                    46:a3:0f:2c:ff:bf:1d:0e:4d:45:d7:d5:36:27:24:
                    22:6f:67:b7:8d:66:e4:d5:b0:eb:cb:bd:9a:09:64:
                    9d:55:53:4a:53:7a:ec:0e:26:72:8b:44:51:4f:0a:
                    bc:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:A8:42:E6:0D:A8:89:4B:BC:B7:57:B6:84:CF:80:5E:A0:14:BC:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6349e693-77e5-3d40-b633-c2d34d7f5c1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.126.74.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:8d:b8:4a:19:17:2c:60:76:94:70:93:26:4c:13:e3:60:84:
         14:08:3c:87:fd:98:48:30:2e:72:86:67:00:ea:5c:89:eb:ab:
         5b:67:a8:e6:22:3c:9d:0d:1f:d5:f4:f6:1c:86:c9:64:a2:78:
         a2:69:54:7c:04:9f:4c:9a:cd:e6:b2:1e:ec:aa:fa:dd:c1:82:
         24:18:d9:8e:89:3c:d8:a6:1b:7c:2f:db:b3:e8:bf:22:5a:d3:
         95:1b:cd:ec:34:8a:ee:1b:8f:6f:8b:19:ee:7f:5d:8e:85:3c:
         3b:02:b8:04:b9:11:f2:dd:f2:68:ea:57:b5:b7:01:fd:0a:d4:
         2e:84:53:eb:ee:47:17:18:ed:9a:c8:10:83:68:fc:bb:a1:ff:
         9c:28:59:0e:1a:41:0e:72:34:4c:89:74:a9:92:4b:3e:8b:a3:
         aa:9e:74:95:7e:56:da:cb:d3:ac:6c:29:4d:fe:9b:c6:0d:d8:
         7f:fe:a0:9a:05:f1:25:e0:b3:7a:0b:e6:5e:f9:61:bb:e8:80:
         85:f4:30:4c:a6:14:b9:c6:b7:54:de:48:8a:cb:b7:be:01:dc:
         2e:d1:f8:7b:05:33:c5:81:88:b0:b6:76:27:e7:73:e1:a4:3d:
         94:57:96:87:8c:55:89:61:cc:8f:a3:72:48:5f:6a:4c:36:92:
         a2:dc:d2:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----