Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3caaa418-e48e-39e8-848c-5d09ca23c99f.roa
File:                     3caaa418-e48e-39e8-848c-5d09ca23c99f.roa (raw, json)
Hash identifier:          DuGy1w3aTzyZuCNmE1t7524CP0dUA1svE/jhA/jaR6I=
Subject key identifier:   48:9D:86:8E:9A:35:C8:40:5D:F1:E5:B3:D3:A4:B7:2E:8F:F5:0E:7E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6E102AB887D937B29ADA80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3caaa418-e48e-39e8-848c-5d09ca23c99f.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     33491
IP address blocks:        2001:559:8742::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6e:10:2a:b8:87:d9:37:b2:9a:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=5e8e81e3-47f9-4fff-a942-c6fda85f3e23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:6b:05:a9:b3:31:df:d4:0e:0d:d2:d6:84:29:
                    d5:97:9d:ed:7f:4f:a1:83:46:ff:d9:63:c2:64:33:
                    6e:79:90:1e:86:68:e3:00:6e:eb:e5:09:3d:a6:9d:
                    6e:4d:94:88:0f:93:c4:4d:8c:30:cb:0a:2d:fc:47:
                    72:55:f8:07:c5:3f:52:ab:9d:61:f1:b7:73:8d:04:
                    64:be:9d:71:f1:11:35:a7:8c:2c:b3:06:88:15:b3:
                    4d:3b:55:04:e3:e5:5a:5f:22:b7:81:aa:1c:22:e2:
                    74:f8:95:87:7f:14:29:41:74:c4:2a:c8:9d:24:a3:
                    d9:20:3a:b9:75:a5:90:70:a8:80:73:1c:8e:46:ce:
                    e3:10:27:9d:43:6b:7b:26:de:c3:8c:39:00:8f:66:
                    9d:8e:50:9b:7f:e6:86:94:aa:bb:04:23:26:60:ac:
                    62:33:e3:97:ac:4a:39:4e:a0:01:e8:17:bc:ee:94:
                    0b:dd:40:e3:87:37:f9:4b:22:c1:2c:48:a8:da:c3:
                    5f:a6:9b:0a:56:fb:1b:46:c8:22:c8:01:b7:bc:16:
                    46:98:cd:3f:9c:a0:03:5f:a8:f3:02:7c:84:b5:88:
                    1a:67:b2:91:1b:16:6c:f3:7f:07:2c:c5:38:44:8b:
                    3b:5a:f9:18:22:3a:2e:fc:ef:93:87:06:8b:27:4f:
                    b5:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:9D:86:8E:9A:35:C8:40:5D:F1:E5:B3:D3:A4:B7:2E:8F:F5:0E:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3caaa418-e48e-39e8-848c-5d09ca23c99f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:8742::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:50:7f:f6:b8:e3:9c:af:7a:60:25:d4:8a:f5:39:a3:2b:b5:
         17:50:68:4d:76:d8:39:cd:84:d7:9d:fc:e1:f6:d9:50:43:33:
         70:c9:b9:53:6e:07:bc:a3:6c:d7:b5:c7:4f:21:90:e6:c2:66:
         0b:e4:7b:6c:6d:46:93:08:1f:9e:e7:e6:bc:bc:a0:48:90:fb:
         65:9a:f7:aa:95:a6:e9:4f:aa:c9:f8:2b:64:3b:ed:93:bf:40:
         87:d6:d7:8c:5f:4a:28:33:ac:31:ed:94:0a:d5:68:e7:cc:23:
         d1:20:4b:54:e7:69:6b:e5:db:03:79:63:12:5a:b5:bb:bd:56:
         0b:95:f3:f7:37:9b:98:56:c3:48:dd:45:10:b2:87:e2:52:8a:
         b0:44:6b:9f:d7:ee:18:97:ed:b3:99:14:4e:a4:95:73:de:81:
         17:8e:5f:7f:c7:ff:5b:6e:ef:06:67:56:b5:41:ce:8a:10:93:
         a4:21:ee:7e:db:de:83:b2:03:61:6a:87:26:a2:7f:ee:db:9e:
         42:15:b3:d6:79:b8:2e:04:bb:03:a1:d5:4e:ea:f9:b2:1f:27:
         fc:07:18:2a:f1:40:8c:c7:fb:d9:cf:fa:c4:58:84:00:c3:2f:
         19:07:f1:6b:fc:77:2f:5a:bc:74:e8:46:79:5d:f0:8f:8d:fd:
         2a:0a:f5:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----