Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1ad40a61-799d-37a4-960b-aab1b167bf7e.roa
File:                     1ad40a61-799d-37a4-960b-aab1b167bf7e.roa (raw, json)
Hash identifier:          IkAJVZM6VhTtS4qpA0ZFpGrmCkS0BdQ9Kuz/xbHCNiI=
Subject key identifier:   09:C5:37:5F:F2:A9:D8:67:7F:0F:DD:CE:F4:D2:64:A3:B8:70:B4:5E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584840E6196121516B10C95BCEC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1ad40a61-799d-37a4-960b-aab1b167bf7e.roa
Signing time:             Thu 19 Dec 2024 02:00:39 +0000
ROA not before:           Thu 19 Dec 2024 02:00:39 +0000
ROA not after:            Wed 19 Mar 2025 01:00:39 +0000
asID:                     33659
IP address blocks:        76.116.184.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:40:e6:19:61:21:51:6b:10:c9:5b:ce:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 19 02:00:39 2024 GMT
            Not After : Mar 19 01:00:39 2025 GMT
        Subject: CN=b49b72f9-aecc-4aa5-88b5-c6c5c07d57e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:73:75:4f:d0:c9:7e:cc:84:45:f2:01:35:59:
                    db:69:9d:3d:04:8b:35:e3:54:33:67:01:be:84:db:
                    9b:87:e8:64:df:cc:68:c5:4f:d7:23:7b:42:c3:66:
                    dd:a1:0d:db:38:b2:9a:29:0c:68:17:6a:36:43:11:
                    ab:59:0e:13:d0:5b:4e:8c:e3:88:b3:52:34:ee:16:
                    7c:7b:2a:59:97:e2:f7:5b:da:48:46:df:32:34:5e:
                    16:04:18:ff:78:44:40:0b:9d:d7:74:4d:f2:a0:f8:
                    58:95:51:45:3a:c6:48:3c:df:b5:17:47:16:65:44:
                    f7:b2:43:2a:fe:ab:dc:85:47:5e:ed:0a:aa:5d:67:
                    93:8e:e7:9c:27:ee:92:62:8f:20:25:76:56:8d:44:
                    fd:df:cc:1f:ef:67:5d:35:48:c0:e7:ee:46:d4:38:
                    78:66:e8:bf:ce:91:ca:55:eb:79:0a:7d:2a:ed:5f:
                    24:38:ba:91:cf:08:ae:34:41:7d:02:55:25:07:1c:
                    34:a2:81:11:b8:ae:a4:91:57:06:71:f7:c4:37:78:
                    62:54:4b:17:3d:54:6f:cc:d4:7a:40:97:37:da:0f:
                    45:bc:48:3f:e6:b0:45:74:e9:e5:f3:e6:cb:84:ac:
                    a9:cb:e0:d4:7d:e5:76:38:7a:2f:13:d6:00:0e:80:
                    44:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:C5:37:5F:F2:A9:D8:67:7F:0F:DD:CE:F4:D2:64:A3:B8:70:B4:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1ad40a61-799d-37a4-960b-aab1b167bf7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.116.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:69:71:ab:0b:31:34:e7:58:44:de:9d:21:79:91:16:bc:b9:
         c8:f8:d5:e5:35:0e:72:6f:7e:5d:79:d4:25:64:11:10:01:a0:
         f3:e8:e5:e8:64:98:1c:30:f4:cd:a6:7e:8c:b4:19:71:69:c6:
         bc:06:7a:5c:4e:c4:68:4b:85:a8:f7:7d:9b:31:b9:04:c0:a1:
         be:24:e0:30:61:ca:e7:9a:72:28:d5:79:74:90:65:12:c0:36:
         aa:ab:32:1e:97:08:74:65:0d:0d:3e:4f:15:a5:8e:db:f2:d3:
         23:86:bb:c4:52:65:44:70:52:3b:08:76:63:5a:7f:6d:b5:7a:
         bb:59:5e:29:c3:b8:09:4c:ea:93:e9:76:0a:eb:ad:9e:ef:7d:
         84:02:be:93:70:6c:da:20:3e:29:ad:88:78:d8:40:ef:47:6f:
         e7:0b:09:69:4e:7b:87:65:32:29:a6:96:dd:a3:00:a6:33:79:
         a8:f2:0f:bf:de:b0:92:ab:b1:55:71:ed:4e:4e:3a:96:4b:82:
         df:4a:95:45:f5:a9:8a:7c:10:51:e1:1f:64:b9:5b:56:b9:66:
         e5:9b:33:08:4c:51:4b:67:a1:67:09:ec:8c:45:87:df:5d:06:
         85:9f:7e:e8:d5:c5:83:69:b2:81:29:2b:c6:39:b6:b7:7e:43:
         8b:b1:f3:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----