Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a841e701-e8b9-3695-a177-d6246992d00a.roa
File:                     a841e701-e8b9-3695-a177-d6246992d00a.roa (raw, json)
Hash identifier:          sbI46qiHM3tUbcCrx3QryoKx0NAu72B2wTnb8dR3tnk=
Subject key identifier:   53:96:F6:A4:D2:73:1D:96:6E:CE:F8:43:AA:C0:E5:D4:4D:8E:90:43
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CAFD4786C9CA5FCED16C0C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a841e701-e8b9-3695-a177-d6246992d00a.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33491
IP address blocks:        98.63.164.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:af:d4:78:6c:9c:a5:fc:ed:16:c0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=4256d915-aae5-4aa9-8950-177052f0567d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f0:94:bf:8b:e3:aa:8a:7d:26:da:13:80:83:
                    ba:cf:d4:bb:36:89:4c:61:83:c9:d2:dc:16:70:18:
                    8b:a1:39:7c:c2:f8:74:a3:8e:cd:e6:41:62:7d:fc:
                    43:60:b1:38:8c:d9:e8:ce:07:04:57:4e:1f:18:ca:
                    5e:98:f6:8a:bf:86:3d:6a:84:c6:69:c6:d0:87:ba:
                    cd:b6:67:d2:3e:ef:e8:6b:56:62:60:67:f1:07:63:
                    fd:08:54:5c:9a:5d:70:85:08:e9:4e:44:e8:5f:c6:
                    88:b7:70:91:57:9f:bd:7a:90:22:16:78:ad:c8:ca:
                    10:bd:7b:18:27:ce:58:2f:db:52:b1:97:41:ef:d6:
                    2a:7c:09:ac:08:f5:f4:12:f6:dd:3f:61:0b:98:8c:
                    c7:f6:a8:6b:f4:27:23:24:03:6f:f4:8e:41:22:14:
                    b1:02:14:23:0c:cf:d8:26:cc:0c:40:31:be:77:31:
                    5c:20:2d:cf:70:6c:df:b0:1f:a1:ec:00:cb:97:65:
                    d3:5e:86:bb:8b:01:8c:55:5d:ee:c7:ed:cd:c4:d0:
                    35:fd:3d:3b:fe:31:ec:ac:4f:cf:bf:67:ac:5a:4b:
                    6c:d3:99:fa:80:ed:70:e3:5e:88:36:98:87:74:3e:
                    9d:1c:be:a5:b9:62:00:15:84:ca:44:e6:a7:83:ec:
                    a7:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:96:F6:A4:D2:73:1D:96:6E:CE:F8:43:AA:C0:E5:D4:4D:8E:90:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a841e701-e8b9-3695-a177-d6246992d00a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.63.164.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:e2:e5:a2:ff:6b:94:1e:40:01:0a:a4:18:56:81:68:d3:57:
         cb:2f:a5:e8:9d:48:b9:29:02:d6:98:be:e7:73:09:3d:f0:e0:
         eb:4c:86:61:79:87:d4:0c:8f:b0:b4:9c:c9:b9:e9:ff:9e:bd:
         3b:1e:ed:7a:4e:d7:a1:f2:3c:a5:89:bf:3a:76:ec:a7:55:27:
         0d:2a:3a:21:49:45:c2:f5:84:fc:b7:89:03:22:74:1a:99:22:
         4e:b4:56:63:98:b4:60:7a:e4:4f:fd:a9:d8:01:60:c9:e7:10:
         9f:d9:16:84:cf:1b:37:ea:b0:19:75:e0:b1:4e:95:bb:0e:5d:
         8a:2b:31:38:1f:65:e6:0a:a6:95:f8:c6:86:bc:22:b2:e3:48:
         9d:6b:0b:42:67:71:03:ba:c5:0b:1d:c9:a4:28:16:bf:37:54:
         af:60:a4:20:b8:94:ed:17:06:25:9b:01:78:21:33:36:72:41:
         7e:a3:bf:d6:a3:1c:01:a2:1e:e6:00:db:16:ae:24:ed:ee:b9:
         5a:5a:59:db:97:bd:e5:5a:4f:45:23:40:ba:5a:ed:0c:ad:8e:
         3c:db:a8:b3:a7:d5:9e:fe:7a:cf:30:30:d9:5f:ec:dc:77:ff:
         f9:bc:45:d6:ff:b5:c9:9f:d0:90:b8:24:2a:0c:52:cb:68:7e:
         eb:2e:38:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----