Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/944e67d7-51ea-3d30-80dd-da84ae9c82e7.roa
File:                     944e67d7-51ea-3d30-80dd-da84ae9c82e7.roa (raw, json)
Hash identifier:          FYmNTvOrMEOBJ6PobuBpxnRFFdy7LqDYHQhsAtVaFTg=
Subject key identifier:   58:76:33:57:AD:CA:5A:6E:33:4C:18:AE:C8:77:20:FF:0F:32:F4:23
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CB1C97E19B21FEE5A130D80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/944e67d7-51ea-3d30-80dd-da84ae9c82e7.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33651
IP address blocks:        76.133.246.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b1:c9:7e:19:b2:1f:ee:5a:13:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=a5065161-1d4a-4593-80bf-2475c6f52a8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:da:e3:94:96:17:2b:f7:64:65:0e:e2:93:0b:
                    3f:73:9a:e6:82:e9:08:7a:22:eb:a4:d0:c4:01:56:
                    8b:97:a3:a8:21:8d:23:76:c2:d8:6a:19:ec:01:bd:
                    47:ab:a1:08:66:5b:8e:1c:32:9c:11:41:67:0e:26:
                    75:6b:20:f2:c3:cc:41:c4:06:5f:91:05:9b:ff:df:
                    34:9e:59:11:09:4f:bd:05:c4:6e:ce:95:44:ab:9c:
                    e9:d3:82:10:14:fd:a4:95:30:eb:47:d4:90:60:a7:
                    58:5e:0d:aa:e4:6c:aa:28:dc:34:73:e2:30:af:b6:
                    f0:7c:e2:82:12:f0:e3:a4:99:c8:1b:c0:27:8c:8f:
                    f7:ac:94:fe:37:3f:fb:48:d4:55:b4:07:0a:31:b6:
                    99:f3:47:45:9d:5a:e4:d6:81:13:88:ff:68:21:0e:
                    52:6c:e2:04:3e:3c:07:fa:e2:77:99:9c:43:f2:c0:
                    65:20:79:28:54:0e:dd:75:f6:7c:31:af:c5:3e:54:
                    8e:0e:69:a2:a1:b6:01:d1:6b:e1:8b:41:c6:68:23:
                    98:2b:eb:76:13:52:2f:a8:14:b5:ec:63:25:72:67:
                    b6:c5:8c:b9:69:e0:32:25:cc:81:d9:54:c7:10:8d:
                    11:2a:a9:de:3f:72:8d:09:47:88:86:69:cd:f9:29:
                    ca:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:76:33:57:AD:CA:5A:6E:33:4C:18:AE:C8:77:20:FF:0F:32:F4:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/944e67d7-51ea-3d30-80dd-da84ae9c82e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.133.246.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:9d:4f:8f:de:5b:a3:77:f7:5f:3a:12:28:65:2b:0c:cc:5c:
         0f:98:e5:7d:dc:b9:5c:80:8a:d3:9e:4d:bf:5d:0f:cc:11:55:
         82:fd:8c:3f:ef:8f:b9:e2:10:4d:dd:1c:20:62:cd:5b:c1:97:
         f7:b8:cc:6a:17:c3:58:b2:fa:3b:27:1e:69:65:d1:d1:7f:5b:
         72:d5:f6:39:42:80:a6:1f:1c:b7:e2:b8:1b:b6:01:7b:81:be:
         2e:eb:6a:65:84:e2:3f:8d:3a:92:75:d2:87:9e:5f:5c:24:03:
         02:03:8e:4a:31:ab:7d:10:fd:0a:4e:95:e8:46:ef:d5:e3:3b:
         a9:08:82:33:2a:d3:cd:b7:bc:a4:16:62:13:c5:ec:be:c4:b8:
         7d:74:58:bf:97:cc:2f:1f:d5:b9:fc:6b:f6:76:99:7b:18:47:
         05:c7:20:3b:75:59:78:c1:a4:b0:0f:45:12:cc:3b:60:f6:4b:
         e1:eb:44:b4:2d:24:d4:39:3d:08:90:07:5c:81:d0:f3:a6:5b:
         69:02:c8:30:06:c0:99:87:a5:a2:da:e0:30:02:f0:55:7b:49:
         25:36:85:ce:c6:45:50:72:ac:8e:10:67:cb:30:3a:74:fd:e0:
         14:3a:2c:05:e4:08:11:6f:17:17:39:64:1a:88:8b:a3:6e:9e:
         d7:55:14:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----