Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/63590936-9c5d-313b-83a4-c70f791d37af.roa
File:                     63590936-9c5d-313b-83a4-c70f791d37af.roa (raw, json)
Hash identifier:          PoGl5httv6W58bI4m3NXsdzzo62efCpueAbMB6Xqu3M=
Subject key identifier:   04:77:AA:2A:2F:2F:8F:4C:DC:6A:90:50:BA:B1:EB:8C:47:FB:07:3B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6E1AC9E5D038DCD29CB5A0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/63590936-9c5d-313b-83a4-c70f791d37af.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     33657
IP address blocks:        2001:559:814f::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6e:1a:c9:e5:d0:38:dc:d2:9c:b5:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=c270c50f-7ef7-46a9-ab14-5863ee2aa1f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:18:0c:3d:d6:a6:8f:3b:c4:7f:ff:54:39:69:
                    23:3d:1a:4e:7c:42:fa:86:b5:46:94:a6:8d:db:9c:
                    d0:d7:d4:ae:21:9f:ec:96:a1:8d:e4:05:21:eb:c0:
                    b0:eb:a5:36:93:31:0d:5e:45:e8:eb:92:8d:17:3b:
                    83:bf:51:6f:97:f3:e4:ab:a8:fe:c1:1d:c7:7c:ea:
                    6c:33:ac:25:c4:98:5b:5e:67:19:7f:9d:17:0e:2b:
                    3f:8c:d1:0e:5d:56:a3:5f:fc:a6:1e:50:dc:06:09:
                    3d:b8:6d:6f:79:38:9e:47:9c:5d:ff:26:c0:78:1b:
                    3b:08:36:85:57:32:98:a4:9d:38:6f:93:6b:b1:b9:
                    fc:6c:18:a0:68:3b:26:3b:f7:41:fd:9c:b3:f9:d4:
                    f2:0e:f4:b0:b9:c2:72:51:52:49:df:2d:3f:2f:76:
                    a0:2d:24:00:50:e8:1b:ab:c4:0f:94:a4:79:65:71:
                    30:6b:5e:35:d3:d5:fd:f1:31:24:75:30:bf:fc:b5:
                    d2:a1:05:ca:f4:89:2e:ba:88:8c:6a:fb:02:a1:fe:
                    c8:ef:7d:56:da:1c:24:5e:28:cd:ab:f5:d7:29:88:
                    d6:6e:65:ed:38:66:8e:77:45:7b:9e:7d:24:c2:db:
                    8e:26:a9:c0:34:2b:e2:c1:fc:48:d7:7c:13:c5:83:
                    80:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:77:AA:2A:2F:2F:8F:4C:DC:6A:90:50:BA:B1:EB:8C:47:FB:07:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/63590936-9c5d-313b-83a4-c70f791d37af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:814f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:e2:a4:21:30:72:b8:59:20:7b:66:9b:64:20:55:be:fb:dd:
         90:82:5a:18:7b:fc:ab:82:06:60:b4:ef:72:fc:3c:5e:5c:e8:
         01:82:a0:bb:b5:ed:ab:1a:fe:78:25:3c:ba:c1:a0:aa:02:43:
         1e:a4:72:16:33:c9:76:a7:19:c9:16:b8:d9:6c:8d:f1:a8:f8:
         e1:f8:7b:20:f7:9a:d7:9a:e2:c7:fa:65:02:b5:a8:59:22:36:
         17:12:cf:7a:59:de:8d:03:0e:00:15:48:96:fe:c1:79:dd:5b:
         12:f1:85:17:a4:cd:68:5c:c2:f3:d7:07:96:50:08:f9:84:d3:
         12:25:f6:c9:28:cc:93:ab:1e:e3:4c:0c:98:0e:f6:98:15:ed:
         6a:a3:04:75:5a:05:60:b1:b9:fd:55:26:68:36:59:1e:90:48:
         10:b1:01:6e:c6:23:e0:cd:08:24:2b:aa:00:ff:c0:a2:8f:70:
         00:96:96:57:9f:99:a7:7e:0e:76:13:dc:b7:37:f0:6a:c6:77:
         b8:10:7c:09:85:82:80:18:05:cb:ec:65:1c:b8:4e:6d:6c:3d:
         c3:56:29:9a:a4:07:a9:cb:51:2f:e5:7e:87:0c:63:0a:db:bd:
         6c:19:84:61:38:08:da:af:5e:8e:83:0c:9b:42:cd:e8:5b:0f:
         51:94:da:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----