Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/29894f59-f7d7-38b7-9318-5512094fdcb6.roa
File:                     29894f59-f7d7-38b7-9318-5512094fdcb6.roa (raw, json)
Hash identifier:          ufqcU1lpChHD/C9mkd4HJsqNT/ulZJQf/j/hOn3DNoE=
Subject key identifier:   90:09:36:F6:4C:09:13:B0:09:8F:55:FD:F8:E6:98:C1:2F:60:FC:03
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6C0BC8274B487D3EC13680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/29894f59-f7d7-38b7-9318-5512094fdcb6.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     33652
IP address blocks:        2001:559:c30d::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6c:0b:c8:27:4b:48:7d:3e:c1:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=160df7ef-39d1-4155-aec3-71cd607eb680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:24:b4:78:67:22:4b:9e:0e:69:9b:41:61:4c:
                    ce:c1:08:ba:b6:10:7e:8c:f6:b2:d2:6e:ad:b6:84:
                    28:60:26:a1:4d:bb:f1:b8:5e:c4:bf:06:1c:69:b2:
                    ca:9b:56:20:f6:e1:5e:54:2d:bf:e1:b8:2a:25:17:
                    46:63:7a:81:e2:60:51:92:c6:cf:d7:2c:81:43:59:
                    fa:f6:fd:d2:9b:5f:86:f9:04:1b:91:5c:f9:9a:3f:
                    04:50:6e:c4:2a:4a:b7:79:92:3f:62:6a:74:f0:8f:
                    7d:6f:a9:79:b4:e4:a9:6e:83:84:6f:e9:e2:09:bb:
                    24:7c:3d:ce:65:a2:71:c4:c6:24:d3:8a:4a:c1:f0:
                    49:ee:ac:ae:4f:9f:55:d6:f8:55:b1:c0:db:51:cf:
                    8e:db:96:65:06:bb:eb:51:15:18:bc:1c:74:a4:f2:
                    f9:20:91:4e:b1:f3:bf:52:72:74:1f:87:74:e9:5b:
                    14:3b:5d:24:13:ad:f0:31:d4:dc:74:64:b0:9c:70:
                    08:e3:cd:d4:1b:97:f3:70:5b:c5:48:fd:94:e8:86:
                    f6:51:a0:50:4a:9d:d4:64:ea:75:a0:30:fa:cc:3b:
                    fb:38:0a:43:63:ee:08:25:02:04:df:28:ad:fd:b8:
                    30:69:f9:29:11:72:c8:82:fa:80:6f:de:97:56:a8:
                    ac:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:09:36:F6:4C:09:13:B0:09:8F:55:FD:F8:E6:98:C1:2F:60:FC:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/29894f59-f7d7-38b7-9318-5512094fdcb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c30d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:de:98:fa:db:ac:af:e6:1b:ea:94:ec:46:b6:b5:b0:74:1f:
         5e:50:c7:b0:7d:cd:2a:25:4e:1b:c1:10:95:1f:e2:58:e2:e4:
         80:d1:4e:6d:56:d1:f3:ba:e4:9c:6e:fc:18:98:f7:eb:06:d5:
         c8:0d:b1:13:c4:d1:33:9d:de:c3:54:f6:bb:bf:d2:7a:1a:55:
         c9:9f:d6:39:b9:9b:15:37:73:38:fc:7b:97:eb:f2:0d:c1:2a:
         84:69:da:81:f9:24:c4:35:61:46:8f:88:6b:8d:f6:f5:2c:83:
         ec:0e:f1:79:e8:8f:48:dc:13:7a:c7:11:71:5b:cf:90:59:df:
         0e:41:aa:3d:23:69:48:fd:62:dc:08:e2:ec:91:7d:ac:79:d1:
         a2:cd:d7:dc:19:d6:07:3f:b4:c1:44:79:b8:1e:65:e1:79:d2:
         7a:b7:7c:c0:47:9a:6c:45:82:8d:95:a3:0a:ab:88:e8:6e:34:
         f7:77:d1:02:9c:7a:32:fa:22:3e:2e:26:e7:b7:53:76:05:50:
         30:64:a5:45:61:36:b9:a4:54:ae:32:4d:c3:6e:61:24:f0:4b:
         73:7e:b2:d3:18:d9:84:bf:39:11:69:9c:c5:11:92:00:8d:67:
         e0:fd:72:b9:51:a6:33:76:57:2e:e7:d9:d0:46:34:6e:3c:fe:
         1a:b5:e1:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----