Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dbadadd6-9402-3429-9848-5112721c2a74.roa
File:                     dbadadd6-9402-3429-9848-5112721c2a74.roa (raw, json)
Hash identifier:          dQ0bsdacU3krptwqQVJfJM7m8A889vxhvwvxKddeLu0=
Subject key identifier:   E1:41:0B:40:C0:3B:C1:5C:C2:30:B7:B0:0F:81:26:A7:2F:9E:B1:77
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CB0C83103699686DE450C80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dbadadd6-9402-3429-9848-5112721c2a74.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33491
IP address blocks:        67.163.48.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b0:c8:31:03:69:96:86:de:45:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=b2397fb8-f6d6-40dd-80f5-847351f344aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:34:ef:8d:58:1e:8c:d1:fd:f4:fc:3e:d5:14:
                    1a:cc:5d:fb:c6:2a:41:19:a5:40:f2:1e:07:4c:86:
                    5d:d9:6b:45:a9:58:c1:d3:28:08:bf:9f:74:07:53:
                    7d:d7:97:d8:13:c1:2d:16:9f:55:13:c6:cf:44:e7:
                    ee:97:e1:88:89:19:88:8c:79:60:7b:f8:87:64:84:
                    d6:c1:0c:19:6f:1d:10:58:a6:47:f1:18:80:df:db:
                    2e:25:bc:57:ea:8c:cd:5d:53:36:7a:93:45:e6:b8:
                    55:ac:d5:f8:02:fc:6f:37:20:28:58:81:7f:a3:49:
                    3a:e2:c6:63:d8:b4:35:d7:1d:75:82:66:53:02:5c:
                    b8:33:f6:46:54:92:64:e1:f0:92:6a:5c:cd:11:5c:
                    e0:21:4a:41:98:dd:a5:6c:cf:da:ef:f1:80:b1:38:
                    79:ac:bf:55:67:f6:17:cb:22:ee:a0:d2:53:5a:94:
                    96:ec:9c:62:a4:1e:09:44:21:70:83:a5:bc:40:cb:
                    61:ce:ee:1a:25:ff:5c:1d:5a:a9:3b:d0:8c:ba:fa:
                    ef:0c:2a:f9:cf:b5:1f:ab:fa:3a:81:d9:3c:ba:3b:
                    ae:d7:7e:35:e8:75:de:14:07:e4:62:ab:34:f6:19:
                    32:14:1c:e6:12:39:8b:ba:db:3c:48:59:31:24:12:
                    ce:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:41:0B:40:C0:3B:C1:5C:C2:30:B7:B0:0F:81:26:A7:2F:9E:B1:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dbadadd6-9402-3429-9848-5112721c2a74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.163.48.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:55:cc:14:ab:24:d0:f6:99:66:f1:2d:d9:08:89:b4:69:84:
         bc:f9:f7:05:6c:64:48:4a:39:96:7e:26:81:69:ca:59:f1:09:
         2e:4f:23:f3:51:92:11:43:ee:0e:27:1a:c5:2b:e6:db:c6:1c:
         9a:52:cc:38:b5:e2:e8:91:f6:e5:bc:9e:cd:9a:34:48:53:82:
         b8:39:20:73:42:ff:e6:03:ae:85:07:55:45:ce:b4:8f:cd:f5:
         46:e9:bb:ac:c3:34:97:8e:fc:57:50:d7:d2:7b:b0:b7:46:f4:
         57:86:9f:8c:e1:36:89:d7:4a:90:f1:a8:57:1c:e6:59:ee:96:
         0c:04:6d:9e:6f:2e:9e:eb:c2:ea:c4:74:f8:46:4e:b6:20:bc:
         23:e9:c1:53:57:70:d3:1d:95:0e:a7:7e:a1:47:65:cf:3e:07:
         a1:0b:4e:98:2e:b0:a1:95:bc:ea:16:39:2c:a1:e8:de:d8:a6:
         63:8f:dd:3c:f2:4a:c7:d4:2e:15:cc:79:3f:92:85:63:5d:7d:
         dc:2f:ee:53:8b:c8:0a:4e:32:db:b0:77:17:f8:32:09:47:22:
         4d:e3:0b:0c:ee:ca:dd:52:68:f1:6c:4c:75:d0:91:c7:ee:15:
         55:83:7c:df:f6:6d:3f:b5:f7:74:a6:6a:16:58:64:34:7e:cc:
         a8:6c:a2:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----