Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e7059da2-80f0-3efa-8d22-c7a01ff8d29a.roa
File:                     e7059da2-80f0-3efa-8d22-c7a01ff8d29a.roa (raw, json)
Hash identifier:          lNORm+w1UcmjFXANHAGObXkBMrbs/N+SzvC5YrDepKQ=
Subject key identifier:   25:60:02:29:00:1C:D3:DA:BC:1A:29:07:AF:42:C5:CD:A2:A0:C3:FA
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F6DE8D371F87A5AA8BC680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e7059da2-80f0-3efa-8d22-c7a01ff8d29a.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     33490
IP address blocks:        76.115.246.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f6:de:8d:37:1f:87:a5:aa:8b:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=becf09d7-08d2-4a05-95df-367295ec0538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:44:89:b4:ac:0e:44:eb:2f:1f:57:9f:a0:57:
                    a7:21:32:b4:d2:a3:22:32:a3:ac:4f:8e:e5:b8:b3:
                    10:74:89:0d:75:91:d5:d4:f6:38:c0:a4:39:40:a4:
                    2d:ef:9f:1d:64:36:18:64:ba:37:e4:a0:21:37:50:
                    b0:b2:61:17:58:00:df:1e:40:b3:a6:bc:86:ef:7e:
                    52:f2:50:13:4b:0f:85:34:b4:52:4c:3c:b2:7d:c6:
                    b0:38:21:6c:c7:f2:4e:1b:aa:a9:3d:52:c2:40:30:
                    7e:6b:a7:16:94:00:db:20:8e:17:ec:32:4f:f8:99:
                    30:ff:bb:09:8f:8f:77:7d:ae:f3:de:bb:5b:b4:ca:
                    1c:43:0a:7b:3a:f5:55:e7:f7:bd:fe:b1:ae:eb:4f:
                    b9:88:0d:fa:ab:32:65:a4:a0:f3:53:e0:a5:5f:52:
                    f3:4d:41:d4:6e:79:80:7a:74:53:20:65:fc:28:38:
                    30:7c:b8:21:d0:7d:0e:6c:30:f6:ef:33:45:3e:36:
                    73:ae:c7:5f:bc:14:8c:25:86:f5:8d:d5:fa:9a:3e:
                    2e:58:94:50:36:3d:c0:ca:0c:91:5f:27:bd:a4:0f:
                    5d:26:f8:aa:3d:39:d5:8c:f9:46:86:b9:15:0b:df:
                    42:0d:a5:8e:a8:7c:9e:8d:12:3c:4b:bc:95:42:67:
                    7d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:60:02:29:00:1C:D3:DA:BC:1A:29:07:AF:42:C5:CD:A2:A0:C3:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e7059da2-80f0-3efa-8d22-c7a01ff8d29a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.115.246.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:9c:d0:97:a7:80:8e:5f:95:6c:05:0b:c0:e1:17:85:bc:2b:
         e8:3f:6c:55:06:0c:04:5a:da:4d:a0:31:41:ec:aa:ad:96:e3:
         7c:30:02:6b:a9:1c:dd:9f:89:f4:c3:83:80:02:8e:56:2f:aa:
         25:60:7a:05:43:40:8a:d5:32:a4:20:81:ea:39:43:42:80:eb:
         d8:83:8a:73:a4:6b:7c:9c:00:8b:7e:6a:c1:66:fa:ca:d4:0d:
         84:ae:c8:90:c7:65:5b:d7:7d:45:53:c2:f7:46:49:c0:58:d9:
         1b:a6:d2:e1:9a:71:ea:d5:2e:19:5e:e9:da:fb:93:6b:01:53:
         db:ce:45:8d:e5:2a:4a:e5:e1:e1:e3:c5:11:9f:03:f8:3c:52:
         4b:af:a4:6e:54:76:5a:02:09:3e:db:c0:18:8a:95:fa:ec:e9:
         4b:15:e7:c9:ed:6d:f3:26:8e:6b:5e:d9:a2:d5:58:1b:fb:30:
         25:ca:0a:b7:e2:54:f9:50:01:8f:e7:02:0c:a4:43:92:44:4d:
         6c:90:fa:d3:b4:4b:94:f8:6c:f9:0e:02:21:b5:86:0b:4f:37:
         bf:02:4a:bf:d0:92:bf:b9:26:bd:55:4a:d4:0b:49:64:a4:3c:
         86:7d:8e:14:d7:d6:d5:31:8d:6c:ba:78:7b:17:ad:05:90:54:
         4f:7e:4b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----