Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/82f918b5-ab52-38da-a0ef-cfce61a6534b.roa
File:                     82f918b5-ab52-38da-a0ef-cfce61a6534b.roa (raw, json)
Hash identifier:          ZbVzaeGkRxHhXNMnNlTV6hp1vLDk+uHgGE7g2ehEclM=
Subject key identifier:   F3:F7:12:BA:07:38:4F:9C:D2:A4:69:C5:95:8E:D8:2D:AD:7C:77:9E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F81A8BB0E38595863AFD40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/82f918b5-ab52-38da-a0ef-cfce61a6534b.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     33662
IP address blocks:        98.57.108.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f8:1a:8b:b0:e3:85:95:86:3a:fd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=8c149d4d-eae0-42a6-a626-42439862718c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:89:37:4a:ef:bd:26:c1:da:59:e8:66:a9:bf:
                    11:ba:ca:2f:a7:9b:71:9c:24:6b:d4:7f:56:a1:7c:
                    fd:27:d4:39:a7:58:2b:10:54:d5:a3:8d:de:bb:64:
                    f4:5c:93:42:da:86:2d:64:b0:c6:db:ce:45:1d:ba:
                    db:f3:b1:70:b8:4b:ec:98:7b:a6:8d:72:78:cb:7a:
                    9f:5e:86:83:b8:1f:0d:b8:b9:c4:95:ea:6f:0e:d2:
                    97:b2:5f:2d:78:b6:ca:62:a6:6e:04:a1:8a:55:a1:
                    16:68:b5:27:06:94:08:38:92:51:d6:62:8e:b5:3f:
                    52:ea:38:e6:88:48:7b:9e:e5:a1:be:b8:ef:0c:99:
                    c2:b7:5d:85:a9:c4:98:23:50:d8:d9:5a:c6:13:86:
                    81:a4:cf:87:df:3f:bc:69:06:14:a1:99:70:bd:6d:
                    80:40:ac:17:aa:1c:ba:10:29:90:7e:93:53:ea:e3:
                    b0:c5:c4:f9:f3:b8:47:94:99:c5:f3:08:0c:c0:00:
                    7b:be:49:83:8a:da:fd:d0:65:76:0d:2e:11:f6:cb:
                    a5:d3:d4:89:c9:17:72:f9:dd:dc:fd:35:0f:53:11:
                    cc:c1:ca:82:83:93:84:c1:43:91:f8:e9:79:fc:d4:
                    a5:28:36:a1:d1:08:a0:fb:66:6d:5d:da:7a:f8:46:
                    df:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:F7:12:BA:07:38:4F:9C:D2:A4:69:C5:95:8E:D8:2D:AD:7C:77:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/82f918b5-ab52-38da-a0ef-cfce61a6534b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.57.108.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:21:00:24:b0:e3:df:8d:2c:20:cf:0e:b2:b6:e5:3c:a4:4a:
         c7:22:14:33:75:19:81:b5:3f:27:47:f7:fc:a4:c0:d4:c5:4a:
         98:d3:8b:e1:56:c7:de:3c:af:8d:52:12:6e:94:37:20:6c:00:
         6e:c6:87:9c:63:30:a3:fa:ed:49:4e:52:74:ea:6c:df:c5:16:
         65:db:e5:14:9e:00:87:71:12:a9:6a:c2:14:61:88:c0:01:95:
         8c:9e:79:7b:bf:2d:69:51:c9:eb:bd:5e:5b:1a:d0:10:08:6f:
         69:09:92:66:94:8d:de:8e:3b:f6:6f:54:0b:3d:e3:42:24:72:
         df:33:76:e4:55:16:0e:35:57:3e:01:31:d1:a1:24:28:d7:99:
         b4:0a:86:61:b0:12:d7:6a:5b:0c:ed:d6:ac:80:48:f9:f6:d7:
         b0:d4:ed:29:b3:8e:98:46:5d:23:5e:27:ed:5b:b5:2e:14:62:
         32:87:59:ff:6a:0b:59:3f:ec:28:d3:a1:5a:dd:54:e7:fd:4e:
         05:b5:f8:34:ba:58:bb:0a:ae:ab:0b:49:e7:15:a5:df:3e:f1:
         f5:3b:24:8d:a9:aa:16:9c:b3:34:36:04:42:c0:9d:77:ac:0b:
         3e:38:88:af:26:85:37:d2:23:d1:62:bf:35:64:1c:b4:2c:8b:
         87:2b:29:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----