Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8ba4faa3-5baf-35a1-94de-932f02397511.roa
File:                     8ba4faa3-5baf-35a1-94de-932f02397511.roa (raw, json)
Hash identifier:          X4LzE4hGdetag+ImeChD0aHrjH0Z7+Q0VQkjFrezDUc=
Subject key identifier:   CA:C2:BF:DD:C6:33:CD:07:66:81:76:B1:30:F1:92:48:05:55:DA:70
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F7C8364773090344BBE480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8ba4faa3-5baf-35a1-94de-932f02397511.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     33668
IP address blocks:        76.139.246.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f7:c8:36:47:73:09:03:44:bb:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=09a1150a-83dc-424b-a11d-33a25c660488
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c8:e6:e6:d3:3e:17:c1:fe:e3:6e:2d:c6:16:
                    43:f7:e2:51:d3:8c:1c:59:8d:29:45:90:80:7e:b3:
                    7c:bd:ff:80:81:d2:fc:c5:16:c5:1d:2e:f0:8f:d9:
                    a3:2f:10:33:d9:dd:5b:51:97:a8:e5:00:12:12:4a:
                    d9:da:df:69:96:03:c7:fc:26:fe:23:7b:47:69:07:
                    52:16:af:8a:79:e3:67:17:28:3b:c8:e6:22:42:62:
                    b3:aa:c7:f1:40:e1:b3:80:4c:d7:80:8c:81:a6:e4:
                    70:90:e9:4e:35:cf:93:4b:c0:6f:ee:3f:cd:01:45:
                    bb:f0:95:9b:a1:5b:ba:26:31:7c:f9:a8:f8:42:93:
                    85:1a:5d:6c:41:53:c0:b4:d9:55:9a:ad:98:6b:78:
                    41:81:bb:13:17:d3:51:c8:6a:1d:24:c5:29:48:3b:
                    07:ee:e8:5c:64:bd:2c:88:a1:9b:6a:1c:d1:c7:02:
                    f6:e3:00:35:2b:3f:41:98:80:05:76:38:42:6a:f4:
                    4d:a1:c1:f2:06:f6:0d:b3:46:d1:b9:75:19:70:f8:
                    bd:58:2d:17:d3:3a:a5:43:8e:1c:a7:71:13:46:e2:
                    1b:a3:14:11:97:dc:54:9f:ce:2b:31:29:19:cc:9c:
                    46:bd:01:cb:fe:39:8e:75:4b:bb:d2:6d:42:c4:52:
                    5a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:C2:BF:DD:C6:33:CD:07:66:81:76:B1:30:F1:92:48:05:55:DA:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8ba4faa3-5baf-35a1-94de-932f02397511.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.139.246.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:cd:46:eb:e4:77:3b:77:a2:76:ba:1c:2f:69:5b:5c:21:2d:
         b6:5f:dc:eb:0a:d6:32:64:36:bb:07:1b:f9:e4:7f:27:fc:2c:
         fe:0c:5b:90:ce:e4:c4:52:8b:38:b5:19:f4:1a:a1:43:ff:2f:
         73:9e:59:58:2b:ad:21:1c:5e:57:6a:ec:13:a8:c9:75:a1:25:
         ba:ef:97:96:21:b8:0e:9b:3f:dd:c3:c1:a1:dd:ac:2d:97:ee:
         7e:24:4d:6f:66:26:d3:74:9b:bb:f7:07:c1:63:da:30:fa:2a:
         85:aa:8f:a5:44:3e:84:4e:5f:c4:d6:2f:32:2d:f1:ea:34:66:
         25:21:a5:cc:34:3f:7c:5d:08:76:3d:2a:68:e3:d9:5c:b2:c5:
         3f:df:aa:71:ef:bb:8b:d9:13:4d:dc:7b:3e:ec:49:5e:f9:90:
         f8:e2:6d:99:ab:ba:8f:e6:00:b5:95:31:e6:09:b4:92:8a:70:
         38:fa:de:2e:8a:22:ea:d4:31:bc:08:d5:03:ae:c1:4f:ff:e0:
         06:4c:64:a7:06:b9:75:f7:37:d6:39:a6:e9:94:04:39:46:cb:
         d1:4f:f7:f4:64:54:a9:11:e5:4b:01:f5:0b:33:d2:6c:eb:12:
         60:2e:56:7e:dc:bb:ca:17:e2:99:d3:bd:94:02:bb:ff:03:7e:
         d2:fb:49:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----