Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f38c131b-4d5c-3b9c-8077-6e978f12120f.roa
File:                     f38c131b-4d5c-3b9c-8077-6e978f12120f.roa (raw, json)
Hash identifier:          vhhkvHc1Fn3vwIGmpQZvOrM6W8/uCeaidoMaA7vDDGM=
Subject key identifier:   04:64:6C:FC:6A:55:25:F8:9B:8C:52:15:C6:FF:68:93:91:16:FB:98
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F951FA8244FEB1C711C900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f38c131b-4d5c-3b9c-8077-6e978f12120f.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     33662
IP address blocks:        76.31.164.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f9:51:fa:82:44:fe:b1:c7:11:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=82c154f2-5f03-4cde-ba2c-977316306396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:5a:be:34:18:a6:1c:8c:5c:54:4c:c0:4e:80:
                    18:9f:90:9c:2f:77:f8:e6:4f:e7:e8:4c:39:d4:31:
                    91:a9:c7:9f:87:b7:a4:b2:bf:ea:22:5e:4d:d5:3d:
                    63:19:32:61:5a:ed:b3:d5:67:7d:a0:17:fe:17:91:
                    7c:d7:b0:ea:5d:bd:d7:6f:fb:00:4e:7d:a8:f0:1c:
                    05:a9:4c:1a:40:07:ba:bd:21:5e:d8:d0:98:4c:88:
                    9b:0f:fd:38:f6:7c:82:e7:dc:99:1d:4b:9b:3b:1b:
                    0b:7d:af:42:99:0c:96:51:64:1a:99:37:cd:89:1f:
                    1a:77:e5:a2:01:55:7a:27:a7:ff:0d:01:3f:75:b0:
                    71:f4:6a:67:fa:d0:59:8a:f6:40:c8:d7:ca:4c:30:
                    27:76:df:12:9a:7d:e4:bb:00:8c:ca:85:41:3f:73:
                    2d:32:ee:74:9c:71:6d:05:b4:37:d2:76:92:e2:ed:
                    87:94:d3:11:82:04:ec:a0:ef:f2:b0:b1:70:74:43:
                    f3:65:cb:2d:81:3e:29:94:7c:f7:c9:80:aa:32:e8:
                    2a:02:fb:d9:1d:c4:c1:52:0f:fb:5a:0b:b1:39:dd:
                    3d:c7:2f:14:65:0f:45:6c:96:ed:f2:5d:ce:be:29:
                    44:03:c2:64:04:03:0a:eb:a6:0b:9e:27:42:6e:0b:
                    c1:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:64:6C:FC:6A:55:25:F8:9B:8C:52:15:C6:FF:68:93:91:16:FB:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f38c131b-4d5c-3b9c-8077-6e978f12120f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.31.164.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:10:46:e5:5e:01:65:ff:e1:5a:e1:a0:f2:c5:2b:81:4e:62:
         26:d4:f9:33:b3:75:57:e3:1a:23:df:18:da:b5:ba:05:85:56:
         1c:b1:3a:94:0b:e6:64:eb:36:54:a9:90:c1:49:b2:5f:c2:61:
         cc:84:91:5e:41:f4:49:2a:b8:79:71:f5:cc:53:04:2d:6c:49:
         01:a2:75:02:99:cc:8e:d2:62:94:04:18:5b:dd:9f:26:df:73:
         45:c8:bf:22:e4:23:9d:30:ec:40:27:93:b7:0a:27:20:f7:92:
         f3:bf:ac:57:80:d3:b8:2d:ba:83:7e:94:01:b0:0f:2a:d5:35:
         db:d9:21:56:50:1a:37:48:cf:17:61:5b:26:5d:4d:be:0b:6f:
         f9:ae:c7:bb:88:22:14:bb:17:f8:a0:bd:65:e4:0c:28:50:14:
         92:ed:88:6b:57:c1:b5:f1:19:83:19:de:6d:1a:0a:53:a8:7e:
         04:17:22:aa:3d:68:fe:9f:ca:97:3e:f1:0b:f5:1f:ed:65:a0:
         43:81:4f:23:f0:29:6f:ce:b4:b9:cd:e9:94:5d:93:43:ae:1c:
         a0:43:67:1e:b2:76:dd:24:ba:a1:16:2c:57:99:37:02:11:e9:
         61:ff:83:7f:27:1a:23:9e:fc:3e:e5:2a:2c:8d:1e:f4:76:2b:
         c6:86:d2:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----