Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ee75383a-d3ae-3ccf-ac6e-5ec9ca821d9e.roa
File:                     ee75383a-d3ae-3ccf-ac6e-5ec9ca821d9e.roa (raw, json)
Hash identifier:          umPzF4zLSamz9RBRW8TcHbl+oAYMOWbMHF9SDcPRU8g=
Subject key identifier:   C9:89:FD:02:68:0A:6E:F1:5B:15:5A:D9:8A:B4:1B:A3:67:1A:23:AD
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6C9B11F766389F9D2AA700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ee75383a-d3ae-3ccf-ac6e-5ec9ca821d9e.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     33491
IP address blocks:        70.89.216.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6c:9b:11:f7:66:38:9f:9d:2a:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=bbd40bc9-274c-4c17-8063-4957f82ba0a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:45:e0:ea:0b:0a:fa:b3:06:5e:e0:1e:0f:9b:
                    42:b2:5d:8e:09:4c:9b:a3:54:8a:68:32:22:d9:80:
                    8b:7e:26:4e:3d:bd:40:d8:9c:12:30:7f:09:4f:3f:
                    ea:5f:87:52:07:11:92:db:7f:52:66:f0:d3:d4:9a:
                    31:4b:4e:11:32:ad:ad:06:4e:44:44:96:8a:6e:d8:
                    6d:ef:af:0d:bf:2c:91:ec:65:3e:c8:69:91:4e:5f:
                    50:5a:8d:2b:06:0b:69:ff:37:c7:27:44:ce:c2:89:
                    ca:4d:12:91:40:de:f0:75:cf:c9:84:82:8c:57:b2:
                    f8:bc:6f:ce:86:a1:ae:bf:1e:c8:e4:ad:ca:4a:51:
                    ac:f5:c7:c6:a0:05:d7:f0:e7:6b:d7:35:bf:3d:e4:
                    3c:7e:1d:b7:cc:4c:a9:c6:64:ed:67:4a:9c:31:10:
                    cd:c9:a8:6f:c3:f2:4e:16:e5:ec:bc:0b:49:fd:04:
                    b3:8a:7f:79:fa:46:9f:f2:e5:9f:98:cc:c5:17:2f:
                    81:78:ae:ae:c2:f6:96:5e:98:96:de:ac:2b:1e:39:
                    56:1b:03:dc:6c:4c:a5:72:fe:44:a1:00:50:b5:b8:
                    ba:6b:c0:04:87:6f:99:76:27:4f:29:64:49:27:04:
                    da:b2:85:08:5e:a0:fa:3d:c6:ab:08:6c:2c:af:42:
                    a7:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:89:FD:02:68:0A:6E:F1:5B:15:5A:D9:8A:B4:1B:A3:67:1A:23:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ee75383a-d3ae-3ccf-ac6e-5ec9ca821d9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.89.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:ef:2f:11:e6:37:95:a6:fb:30:ee:8b:56:dd:56:12:11:72:
         f1:5c:59:c7:7c:5b:d4:e4:dd:13:9b:fc:8d:de:d1:c0:85:6f:
         52:aa:88:d5:5b:9d:31:bc:4f:cf:17:09:e9:f2:0d:63:a9:97:
         2e:6a:91:d0:8a:e1:88:ae:50:88:de:d4:3a:54:d2:99:5d:69:
         10:c9:21:75:cc:0e:fb:dd:e9:10:32:fa:c5:08:12:ba:7f:d5:
         1c:f5:2a:6d:f3:c3:d5:b2:c1:ef:a3:f9:87:56:9d:69:d3:7f:
         f8:63:c7:a9:ba:0a:1c:e3:24:0d:4b:6b:a0:86:12:09:ac:55:
         af:d4:29:56:00:53:78:af:d6:46:e5:46:7d:ac:57:ff:4b:99:
         7f:63:76:75:20:17:35:d7:f3:d7:88:5c:2c:00:a0:f7:e2:53:
         63:c1:ee:30:9c:9d:48:25:96:3f:3b:58:5e:55:9f:ec:5b:80:
         31:0d:9a:dd:9a:42:61:62:59:30:b1:6b:1b:2b:1a:63:58:fc:
         76:f3:dd:51:a4:62:ad:95:da:a5:af:f3:2f:4f:a4:02:38:1b:
         bc:7b:fd:c1:a0:de:bb:ce:2d:f0:7e:40:0d:56:ba:d9:ca:79:
         12:7d:35:b5:fb:4c:d0:35:8a:36:0f:1a:10:b1:09:2c:01:6e:
         b7:d4:0e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----