Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9b536bcb-9c12-3f2a-b7a2-a5eabfe25c06.roa
File:                     9b536bcb-9c12-3f2a-b7a2-a5eabfe25c06.roa (raw, json)
Hash identifier:          TZVyUKSiwg0PuSOGZeZFmO/tHE+k6qt1Bi7WihqYzfc=
Subject key identifier:   53:39:B3:A6:FE:A6:39:20:B9:DF:5F:08:44:05:40:93:98:86:2A:8E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6C2282869E5DA14733A280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9b536bcb-9c12-3f2a-b7a2-a5eabfe25c06.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     33667
IP address blocks:        2001:559:c352::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6c:22:82:86:9e:5d:a1:47:33:a2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=824a1505-a121-4030-9f5c-a3fb27cf9105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e3:82:f1:80:c3:cc:be:72:3d:24:4c:ee:ad:
                    1f:d4:80:26:70:5b:15:55:65:d7:f2:d5:9a:44:59:
                    c1:7c:35:15:3d:76:03:fa:84:a9:a3:17:fb:fe:f7:
                    da:d5:81:0c:c8:b9:b7:a3:52:82:fd:d2:20:df:d4:
                    53:8e:a4:d5:fe:ae:d7:3a:76:a5:fe:5c:33:38:c3:
                    5d:15:58:ff:0d:de:5d:74:0f:42:6e:7e:23:21:91:
                    de:a6:0f:37:34:e0:ea:ea:b2:b6:d3:54:6a:3a:61:
                    cf:58:b9:26:c2:af:f3:6a:57:ed:c3:f1:54:63:47:
                    61:3a:b6:8a:7b:1d:b5:7f:ca:58:00:ef:6b:86:4f:
                    bf:83:6f:72:13:c7:ca:63:7f:45:6f:66:54:c8:f4:
                    8f:6c:a7:ff:7f:0c:d3:ca:23:d1:3c:33:d0:d6:cb:
                    c2:8a:92:2e:0e:18:bc:f2:0a:49:d8:c6:05:2e:d1:
                    bf:13:71:b9:6b:0e:f9:23:35:59:c3:fd:c4:fc:a2:
                    19:1a:81:ed:39:f5:51:83:d6:c0:db:4c:63:d4:88:
                    7b:51:6f:4d:6e:bb:fd:5f:c8:a4:dc:dd:b5:fa:cf:
                    00:a3:c1:06:d9:e9:64:08:97:e4:e6:32:31:22:48:
                    90:f5:ff:40:0c:e6:de:27:8e:9a:0a:84:5a:2b:fe:
                    e9:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:39:B3:A6:FE:A6:39:20:B9:DF:5F:08:44:05:40:93:98:86:2A:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9b536bcb-9c12-3f2a-b7a2-a5eabfe25c06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c352::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cf:8d:a6:19:14:d7:9d:2b:40:89:4d:71:04:5d:3f:4e:60:fb:
         5a:a8:3e:c5:0b:d7:a7:56:bb:69:b5:71:6a:88:9a:38:2e:b6:
         31:af:c1:2d:7a:2e:b7:0c:cd:c5:d3:c2:59:dc:b4:9d:89:2e:
         b1:05:1c:63:77:e9:e1:be:02:dd:da:dd:df:6e:a1:39:0b:f9:
         b6:f4:05:09:f0:70:96:d0:5b:9b:e0:22:7a:a9:d9:d2:d3:a0:
         d6:10:df:39:03:03:ca:ec:48:ef:0d:9e:85:ae:6d:26:60:e4:
         41:a8:8b:48:4e:8a:18:9c:46:d6:66:9a:5b:81:4e:b0:aa:64:
         0f:a0:27:2e:bd:52:19:58:16:42:60:ed:34:4b:f9:e2:0e:2c:
         c9:5b:11:50:98:94:5d:87:83:cb:5f:f2:9a:9e:6f:35:bb:2b:
         bf:00:9f:88:52:00:46:61:13:89:98:d9:b7:41:54:c9:0d:cd:
         6e:21:68:bf:b4:71:96:1a:39:ea:db:1c:54:66:b2:71:8e:f3:
         91:79:69:4a:07:97:65:75:b9:bb:0c:28:ac:f5:f0:8c:9a:89:
         f5:e0:09:ba:bc:e7:06:a5:a0:97:b9:5b:fc:85:61:a0:47:83:
         d8:67:a1:79:dc:08:2f:97:b0:97:55:f6:86:2d:8c:f9:15:6a:
         5e:28:46:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----