Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a862a14f-de9d-39e2-a217-6cd0cf1b3164.roa
File:                     a862a14f-de9d-39e2-a217-6cd0cf1b3164.roa (raw, json)
Hash identifier:          d5GyeAdwpaay72mSdlWg4DcyOx/gmlUuVK/BeCWFA+0=
Subject key identifier:   68:AA:8E:E5:57:B0:1A:EC:D7:D6:9F:13:03:4B:7C:8A:6D:79:81:FB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6BB456A09702B2344C0D80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a862a14f-de9d-39e2-a217-6cd0cf1b3164.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     7016
IP address blocks:        68.85.52.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6b:b4:56:a0:97:02:b2:34:4c:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=3abdc939-0eb9-408b-a1cd-55441535ee01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ca:b6:8a:65:08:c8:c1:cd:68:79:f2:b8:3a:
                    30:b9:6f:de:20:9c:2e:da:02:7d:d2:73:ed:e3:15:
                    61:ad:32:33:af:f1:d9:08:08:89:c5:6c:45:f0:26:
                    e4:f1:d8:86:41:2f:2a:20:fb:da:91:eb:20:91:28:
                    d4:3d:ba:61:6b:7d:a2:33:4f:9d:4a:9c:45:75:a7:
                    19:b2:fa:25:cb:93:b7:00:e7:fe:81:5d:61:be:1c:
                    d4:12:3f:7a:40:49:54:cb:5a:52:98:14:73:de:2c:
                    72:c9:30:ed:3b:18:de:d5:a3:4c:3f:a5:96:0b:3e:
                    7a:d7:81:63:1a:c8:d7:b4:fb:1c:8b:08:6b:d7:db:
                    47:35:2d:39:8a:1c:7f:f5:a0:44:0d:48:b0:56:68:
                    7a:df:e0:c1:e1:9c:bd:82:35:e3:00:a8:a5:1c:94:
                    aa:67:c4:57:21:22:89:74:16:6a:ad:64:fb:23:ef:
                    63:47:7b:92:9f:3b:0d:11:4e:b2:51:39:50:e5:f4:
                    71:fc:73:30:00:35:32:e6:a1:92:a2:fc:9e:67:36:
                    da:f6:f9:65:25:6b:4e:20:5c:66:c0:02:65:76:ce:
                    77:25:e5:3f:02:41:9c:e0:f4:48:e2:a8:ca:7d:ef:
                    2d:0b:3a:8c:71:2e:ab:78:27:fa:2d:28:97:c1:e9:
                    9c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:AA:8E:E5:57:B0:1A:EC:D7:D6:9F:13:03:4B:7C:8A:6D:79:81:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a862a14f-de9d-39e2-a217-6cd0cf1b3164.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.85.52.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:e0:f9:52:21:92:60:4f:cc:6e:46:ed:ef:8b:59:fd:60:80:
         7f:3b:c6:0a:86:23:29:6a:76:25:04:4f:b8:20:3c:cb:0c:88:
         1f:01:07:93:3f:78:b4:62:27:8f:4f:1b:af:33:c9:0c:22:e2:
         d4:a7:58:5a:ce:68:15:d6:32:ae:a3:6a:54:ea:3b:8f:0b:7a:
         08:35:11:02:d0:0b:55:0c:f8:fc:4e:30:0a:ff:0b:eb:98:19:
         6a:95:d4:07:6c:a5:ff:1c:63:f6:cf:ab:df:0d:58:50:84:8c:
         2c:a2:da:8e:9d:73:18:32:f4:94:8b:3b:88:7e:08:01:0a:e9:
         c7:6f:8e:95:86:74:fd:fd:9d:7d:6b:36:7b:96:db:01:43:c5:
         ea:05:4a:f1:77:bf:64:64:4b:bd:60:ed:93:2a:51:19:0f:3e:
         3b:1d:85:ba:e0:37:e5:93:85:74:7c:62:d0:ae:a5:18:dd:5c:
         57:aa:71:db:f2:ed:2c:d6:6a:11:e7:b4:ce:3f:01:78:b0:fb:
         0d:11:d4:18:21:27:77:30:3b:5a:17:9c:fc:07:7d:04:59:07:
         45:0c:19:c6:59:24:3d:b1:86:2d:85:58:b5:ee:fc:0f:69:e1:
         be:5c:a3:14:b1:04:ca:33:21:80:e0:ed:b3:f6:d9:d6:9a:35:
         11:92:cd:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----