Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/74101e21-6dff-3f45-aa54-2c3f6ca1d436.roa
File:                     74101e21-6dff-3f45-aa54-2c3f6ca1d436.roa (raw, json)
Hash identifier:          pHI3C3B+nEshU1u7BAQwy4KbDRK+KkP8tNL51uRMQDI=
Subject key identifier:   3C:F3:EE:1D:5F:C6:A1:1F:AD:6B:81:DE:D7:01:2E:C7:95:13:73:A5
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CB030ADAB1A29E037487200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/74101e21-6dff-3f45-aa54-2c3f6ca1d436.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33651
IP address blocks:        98.51.214.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b0:30:ad:ab:1a:29:e0:37:48:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=9ef68426-7998-4c10-8f33-67ee5dc1daeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:8f:c1:2a:60:e4:3b:d1:4c:6a:49:2a:85:66:
                    78:01:5e:69:92:25:d9:aa:e4:3a:e9:13:cf:8e:3d:
                    25:0a:ef:91:7b:c1:67:ce:de:70:92:2d:16:9b:e5:
                    47:11:1f:6b:f1:a7:aa:c5:86:20:8b:b5:32:21:bf:
                    37:20:42:05:4b:db:23:7f:47:f0:e4:85:c9:d6:0d:
                    f8:27:68:33:07:4d:e7:82:c3:e8:05:75:86:11:b1:
                    3b:41:41:e8:29:02:4c:bf:10:d9:be:36:bc:16:12:
                    a6:bd:db:97:ad:d9:a1:65:1d:5f:a3:b0:62:c5:10:
                    85:7e:72:9e:9d:98:7c:11:8b:de:55:e0:a7:aa:66:
                    dd:ae:b8:33:4e:eb:66:71:f9:77:de:c1:56:37:25:
                    08:6a:fa:b0:41:fe:c6:1b:72:95:63:79:d4:2e:43:
                    ea:4c:02:e7:ad:70:da:ea:6a:ae:28:da:16:2a:3e:
                    16:e6:3a:2c:ec:db:c3:89:48:ad:05:e0:ba:32:20:
                    23:10:5f:40:ea:46:2d:ff:18:f5:54:8a:fb:4b:01:
                    b3:75:f7:d6:cb:62:89:74:33:b0:b7:d8:ad:13:14:
                    c3:b9:68:0c:29:b6:42:09:a3:5c:6e:1a:ee:ed:a0:
                    e2:f4:14:5f:5d:30:ca:2d:92:8e:ff:e9:2e:1d:95:
                    f6:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:F3:EE:1D:5F:C6:A1:1F:AD:6B:81:DE:D7:01:2E:C7:95:13:73:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/74101e21-6dff-3f45-aa54-2c3f6ca1d436.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.51.214.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:10:62:13:76:da:6d:58:fd:07:34:6c:a0:af:2e:f0:84:2a:
         b6:b3:d9:36:15:3b:90:5a:0c:16:8b:1a:18:a1:2e:e0:50:b8:
         1c:e3:aa:74:21:d4:fa:13:5d:34:3a:5e:ee:c3:b2:28:79:f3:
         8e:0a:fa:95:fa:5c:6d:06:ae:d8:70:b0:bb:0d:40:8d:7b:e9:
         3b:4d:22:53:78:fa:df:15:a0:2f:e5:67:37:0f:14:04:e2:7a:
         95:89:28:d1:a9:b2:9a:8f:0e:7a:d1:bb:d0:6f:6b:4d:53:17:
         ad:44:38:10:93:b5:d4:c1:a7:7b:4f:23:51:9b:b1:25:b6:5c:
         25:87:f3:9a:f4:72:2f:a2:ab:ff:d8:a7:8d:16:1a:f1:2f:92:
         a3:04:f7:9f:36:6b:69:53:7a:8a:94:7b:31:72:62:07:34:0d:
         c4:78:48:c8:96:ab:f6:f2:0d:26:b4:cb:70:c5:6f:c9:cf:fd:
         2d:42:49:ca:f8:90:e0:e5:26:fb:19:d6:7f:3f:c2:4a:80:ae:
         ae:62:64:9f:23:77:12:21:e2:40:82:bc:21:ce:32:8a:0b:15:
         d7:cf:72:8f:db:f8:0e:02:df:bd:49:f8:dd:9f:97:43:39:de:
         d9:80:54:7c:28:ab:cf:19:03:ff:19:00:18:d0:30:c2:7f:f4:
         cf:3c:0f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----