Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c8ef7a7-b437-3fbd-b34d-5b08719d98cb.roa
File:                     8c8ef7a7-b437-3fbd-b34d-5b08719d98cb.roa (raw, json)
Hash identifier:          weXfQObgxNPRqn7fJT3ZBB5yEhDDbZIdt+on76TMF20=
Subject key identifier:   83:C3:38:6D:65:41:21:0F:0E:6C:D6:76:08:9D:6B:93:2D:A6:9E:E6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6DCF3656BAFE2E5F204280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c8ef7a7-b437-3fbd-b34d-5b08719d98cb.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     13367
IP address blocks:        76.156.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6d:cf:36:56:ba:fe:2e:5f:20:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=67d5ef2c-62c8-421e-8f64-9419076f861d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:16:9b:b1:90:bb:51:fe:a6:46:75:0e:77:6b:
                    b2:73:0c:34:28:47:a5:b4:8f:f5:3c:20:1e:b3:15:
                    9d:41:78:22:27:13:95:46:07:b5:8f:16:dd:26:5a:
                    d9:72:4c:66:1c:9b:ab:3a:ae:20:0e:c8:fd:c2:7d:
                    df:6d:c8:ca:60:01:8c:a8:1d:d1:8c:da:11:95:81:
                    ac:26:14:44:aa:cd:e1:8b:ed:bd:12:8d:fd:0a:b9:
                    37:0f:86:49:0b:c0:f5:0b:d6:ab:e3:5b:e1:6f:8e:
                    89:ab:c5:d8:70:53:50:35:01:cc:f3:fa:08:15:ec:
                    25:0c:bc:5b:1f:34:dd:c9:a2:27:8e:19:d5:a3:1f:
                    1f:f5:49:20:bb:2d:34:31:e0:8d:cd:0c:1f:d6:9e:
                    f8:5e:1c:fa:3e:7f:5a:b2:58:1f:2c:6b:e4:ba:e8:
                    32:ed:e3:7a:ae:31:de:81:4e:e0:73:ae:95:c5:42:
                    34:22:4c:4c:7e:88:5c:1f:c4:9c:ef:fe:36:42:e2:
                    90:04:4f:8e:fe:0e:1d:32:af:90:c7:ae:ff:bb:c8:
                    c2:47:1e:12:e4:a7:f3:fd:c2:41:0c:b4:25:8d:42:
                    c3:05:1d:b4:35:9e:c0:0e:40:3f:a8:11:8a:de:b9:
                    e0:62:17:ed:80:23:f2:20:99:d7:e0:12:b0:51:1b:
                    50:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:C3:38:6D:65:41:21:0F:0E:6C:D6:76:08:9D:6B:93:2D:A6:9E:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c8ef7a7-b437-3fbd-b34d-5b08719d98cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.156.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:ec:28:e2:83:e8:f8:3a:f7:c7:72:ec:ac:0b:bd:16:ea:0c:
         c5:af:ac:16:8d:3a:88:4d:0a:7f:fb:d9:21:1c:7f:34:ab:79:
         a1:39:c7:2f:df:f5:e3:8e:b0:f5:23:14:9c:df:a6:44:be:08:
         de:fa:54:0f:e9:b4:36:6d:6c:2e:ce:9a:22:bc:9a:80:b2:74:
         40:81:cb:50:c1:0d:42:bf:00:a8:69:a2:25:01:1b:51:17:68:
         aa:cb:e9:d7:5e:9b:2c:b5:4a:f3:f2:f1:a6:9a:52:e2:38:80:
         e9:80:b9:53:08:b9:95:1f:f0:d8:c3:0b:d4:9e:18:83:6b:7b:
         ef:92:48:fe:2a:23:85:bd:46:dd:63:bf:ea:f6:4d:9e:6f:09:
         43:b7:6b:0c:03:29:94:18:10:91:cf:68:ff:69:12:b3:f8:c9:
         3f:08:2a:65:61:37:61:55:36:87:b0:bb:44:16:47:cf:95:ff:
         05:88:b7:1c:a5:6c:a3:4c:01:b3:d1:ae:3a:d2:74:3f:f4:df:
         87:69:fb:17:a9:26:0b:b2:37:ab:99:39:75:9d:ea:ff:80:1d:
         4a:b9:e9:5f:b5:7e:05:e6:13:41:d3:31:be:5b:f4:45:78:57:
         bc:d9:cd:6a:02:fb:88:ca:b8:bc:49:2a:1f:ab:40:d0:93:a1:
         dc:3d:e9:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----