Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b84a300b-3f8a-314b-a36c-3c2def73f3a2.roa
File:                     b84a300b-3f8a-314b-a36c-3c2def73f3a2.roa (raw, json)
Hash identifier:          /4fjTFVDORRSFR8GfevZ+/y8C/DDyr9zQS6jg+ggQ7o=
Subject key identifier:   D2:F9:BB:BA:89:1D:41:93:4F:9E:08:1B:24:42:53:78:8E:13:2C:95
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CAF51CD8D792F666669A100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b84a300b-3f8a-314b-a36c-3c2def73f3a2.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33491
IP address blocks:        68.57.254.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:af:51:cd:8d:79:2f:66:66:69:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=5647a101-cdf1-4fbe-9300-fd47d426b329
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:57:54:28:c8:0b:fc:06:dc:65:a5:6b:ef:91:
                    f3:98:c3:10:6b:47:18:24:26:19:37:c9:5c:1b:8d:
                    01:76:10:34:34:f5:33:f3:9d:1b:70:52:90:84:89:
                    fc:6c:2b:fe:42:72:54:f7:15:da:b3:43:7e:22:d8:
                    25:d6:55:27:0b:10:a7:9c:a5:69:84:21:89:28:6d:
                    44:c2:46:8c:94:d4:1f:7d:37:97:05:1a:00:68:4a:
                    07:9d:43:35:ef:32:ef:6b:00:95:88:e6:0e:11:3c:
                    e6:61:8b:40:43:59:e4:e5:0c:2e:e7:67:09:4b:21:
                    4b:cf:6d:42:09:ef:aa:e0:67:de:f1:2f:c7:e0:a0:
                    2b:74:c7:5a:5f:f0:c9:16:c2:cc:bc:dc:b4:b7:40:
                    ad:b0:8d:bf:ad:38:b2:d6:01:18:2a:ee:a4:2e:c8:
                    a8:d0:cd:b0:e2:ca:e4:e4:94:c1:fb:b0:f7:41:69:
                    8d:48:39:36:de:71:66:4a:00:78:d7:1b:2d:41:c6:
                    4b:9f:66:51:2c:ac:dc:cf:13:fb:be:90:82:2d:2d:
                    d2:c9:23:cc:f1:a9:1e:59:4a:47:5b:62:34:91:54:
                    92:bf:1f:3c:98:5c:78:48:21:2b:40:96:f6:be:ba:
                    6b:a3:20:f4:bf:27:1a:c3:fe:17:2a:dc:19:93:66:
                    dc:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:F9:BB:BA:89:1D:41:93:4F:9E:08:1B:24:42:53:78:8E:13:2C:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b84a300b-3f8a-314b-a36c-3c2def73f3a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.57.254.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:ea:d6:c4:1c:24:e5:67:73:f9:a8:03:48:36:55:eb:d6:29:
         da:1f:2d:93:0b:ad:c1:b7:60:d0:bb:ad:d1:8a:e0:6f:ad:d7:
         d4:9f:80:14:85:0b:74:c1:a2:75:90:d7:73:e1:4f:8f:00:79:
         53:15:ed:d6:fe:1a:69:5c:7b:98:ad:38:a5:1a:69:63:5b:da:
         f8:0a:d3:07:83:5a:ca:29:63:a8:a9:9a:f9:8a:27:9c:b3:75:
         d6:e5:0a:c8:e5:b6:ec:58:5a:4c:67:93:c8:2a:18:b1:2c:6a:
         bf:22:f1:d9:8b:b1:7a:be:4a:74:93:fe:25:61:32:19:4d:13:
         cf:75:6d:b1:40:7c:17:0d:d8:ef:37:42:00:2a:ab:96:11:e2:
         80:1a:4b:ff:9a:02:b0:8f:25:dc:e5:41:8d:92:47:88:d1:dc:
         e9:d6:c5:79:d8:be:ae:cd:81:75:7c:c6:13:e2:a5:63:9e:89:
         13:51:93:d6:2e:52:92:0e:0a:41:36:e7:a2:61:cf:82:93:84:
         83:cc:8c:e3:f7:b9:bc:7d:cc:21:38:d1:04:4b:83:d8:3a:11:
         bf:1c:9f:43:78:07:ea:50:4d:9b:aa:8e:cd:88:5b:b4:b0:a8:
         12:45:23:8a:b4:3e:a7:70:99:8d:2b:66:de:e9:9d:32:72:a9:
         f1:b9:a5:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----