Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8505c69e-6193-3b08-873c-4935ec48c662.roa
File:                     8505c69e-6193-3b08-873c-4935ec48c662.roa (raw, json)
Hash identifier:          irhNTrXARH1TUx4GAVGvi0ZnLv24qA8YB3M2YT35SDI=
Subject key identifier:   57:93:EA:F9:7D:8C:37:23:08:2B:C3:B3:80:91:BB:0B:78:20:D9:73
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858484C12751DD213A636EB3CB580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8505c69e-6193-3b08-873c-4935ec48c662.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     33491
IP address blocks:        67.167.28.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:12:75:1d:d2:13:a6:36:eb:3c:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=a1cbc2ee-2630-4d5a-8fdc-8dcc85bbd0f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:1b:06:ee:5a:d5:fa:78:2c:2b:35:b1:58:06:
                    61:95:c3:00:36:9d:e8:ae:4d:fe:66:cd:78:bf:50:
                    83:5c:8b:12:0b:50:8a:71:cd:79:76:c5:56:ff:2a:
                    81:bb:d7:86:40:a4:a0:66:ee:d4:2f:43:4c:0e:34:
                    15:73:c7:a5:c9:2d:47:4f:14:2b:89:86:ce:6f:9d:
                    6b:ef:6e:57:cc:c8:c1:3f:30:8f:8d:a4:b9:ba:b5:
                    b4:86:62:94:44:64:46:a0:80:da:6e:29:eb:a7:83:
                    0b:86:8c:bc:f5:11:9e:63:74:ac:4f:b4:84:1c:dc:
                    61:3b:7a:ce:6e:f0:95:78:61:90:c4:00:9d:a2:b7:
                    a6:3b:14:d9:2e:59:6d:49:29:95:75:e1:55:11:ec:
                    f8:79:f4:ec:ba:d4:7a:b8:0c:4d:03:bf:af:89:ee:
                    9a:a1:be:e7:f0:70:7a:90:63:66:dd:df:1c:35:a8:
                    af:06:91:ba:ef:61:7f:a6:f1:05:26:13:2d:a0:c8:
                    cb:97:9d:4b:ad:f6:9f:b5:e4:c3:9c:59:f4:fb:9b:
                    76:85:a7:af:d0:c6:3b:d2:92:de:d7:3c:c7:58:3d:
                    20:82:f2:97:4e:c1:4a:c1:2a:a8:3f:fa:a7:41:1a:
                    76:98:27:63:54:bf:80:34:40:26:c5:f3:e9:7f:6c:
                    a5:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:93:EA:F9:7D:8C:37:23:08:2B:C3:B3:80:91:BB:0B:78:20:D9:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8505c69e-6193-3b08-873c-4935ec48c662.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.167.28.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:09:d6:7e:e5:18:90:4e:48:2a:f7:a7:55:7e:c2:84:98:fa:
         f8:02:4f:c7:54:3a:92:23:f9:a8:c0:02:fe:12:c8:bd:63:4b:
         d4:c5:dc:56:eb:9a:fb:ae:56:4b:8e:55:57:9a:92:aa:c8:28:
         51:cf:60:c3:71:81:51:13:13:51:0c:74:54:5d:d8:0e:29:ee:
         ae:b5:62:09:cf:bb:dc:0e:ff:b8:42:81:d4:fe:93:10:d8:fd:
         c8:f4:cc:72:49:e2:c6:5a:6c:4a:f8:fb:16:63:49:81:36:9b:
         75:2d:2f:88:14:2e:61:33:40:fb:67:c6:71:a8:4c:87:fc:a4:
         2f:0e:40:ef:21:ed:96:43:ce:9c:e0:c1:34:e3:2a:7a:a9:6c:
         90:c3:75:c3:65:73:56:99:fa:2f:13:2c:81:d1:6f:57:c0:cf:
         f5:31:c5:75:1e:ee:a2:e4:6f:3e:39:c3:92:f9:6b:7b:92:e1:
         cb:75:82:e5:c1:14:79:26:72:e3:8e:5e:6e:fb:f4:7e:9f:1c:
         a8:0f:a4:e9:64:6e:c3:aa:f2:18:7a:8c:66:04:1d:e4:4e:ff:
         ee:00:9c:ab:45:b4:fe:08:6a:d3:b7:5b:a2:32:a4:78:47:05:
         44:33:51:bc:ae:cd:e8:14:84:1e:e9:50:84:cc:a6:2a:68:77:
         dc:13:68:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----