Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c491655c-364c-36ab-9ae7-23f25e71b346.roa
File:                     c491655c-364c-36ab-9ae7-23f25e71b346.roa (raw, json)
Hash identifier:          wCPnV949HKQCHEXAIvTJxgeWuqb6bv2F4EidwbkDkXw=
Subject key identifier:   17:C8:85:8F:C0:42:A6:EA:2B:1D:2E:FA:1C:CC:08:FF:BA:AE:A4:B0
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858484C1239DA94CE95D20BE00E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c491655c-364c-36ab-9ae7-23f25e71b346.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     33287
IP address blocks:        69.253.232.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:12:39:da:94:ce:95:d2:0b:e0:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=b6f76def-2c99-4369-88c5-ebf73e1621d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:29:7c:fd:b1:76:d0:2c:7d:5b:88:17:aa:15:
                    26:37:da:19:c0:76:ce:50:36:7a:46:d5:93:a6:0b:
                    a9:67:7c:cb:60:8a:3d:c3:a2:b0:42:df:f6:e2:7b:
                    d8:28:38:fe:69:ff:81:82:a6:e3:86:2a:d7:1d:43:
                    ac:e8:62:18:3b:67:15:7f:e4:38:ee:84:b4:c2:68:
                    e9:48:e1:e9:15:9d:22:17:10:cd:38:8e:28:d4:6d:
                    23:47:e5:fb:69:e6:78:11:07:4e:7a:de:04:86:ac:
                    fb:56:60:f1:78:c9:4f:a6:37:32:a8:bc:d0:0c:4f:
                    a1:a7:20:6c:ff:a8:65:45:ed:9a:6a:e6:39:1d:15:
                    19:e5:fb:ea:c2:87:45:f4:a8:a7:35:7c:dc:0d:8a:
                    2f:91:37:68:75:b5:21:6c:0e:7b:70:00:98:a5:9b:
                    ed:87:9c:51:e4:41:2f:b6:60:1a:f9:6b:b4:2a:39:
                    60:ea:81:67:27:e2:8c:6a:0d:dd:56:ff:bb:fa:0f:
                    25:7e:4f:54:4e:8c:64:4c:ac:80:bc:90:08:04:77:
                    1e:9e:44:8e:ee:cd:36:37:d2:ab:71:50:1d:54:5d:
                    1a:50:cc:39:f5:81:7e:41:bf:c0:8b:69:e0:48:8a:
                    02:24:f8:a5:3c:76:89:0d:df:69:67:92:c4:9c:be:
                    71:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:C8:85:8F:C0:42:A6:EA:2B:1D:2E:FA:1C:CC:08:FF:BA:AE:A4:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c491655c-364c-36ab-9ae7-23f25e71b346.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.253.232.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:d6:19:90:2f:a7:a3:e7:56:07:27:f7:f9:a0:86:27:d5:d6:
         eb:5c:0e:c7:68:92:1e:7f:7b:66:b1:cf:df:b9:e5:c2:b7:6e:
         1f:a8:1e:c5:d1:d5:5e:b6:35:5f:a9:b5:7b:3f:d7:75:67:83:
         96:e8:d5:bd:8d:7b:94:5b:79:60:51:36:c7:d3:3e:8c:96:d7:
         b3:28:0b:82:37:c7:c8:18:76:f9:71:07:ec:cc:a1:20:6f:c4:
         54:bd:75:0b:f7:2e:44:b6:04:4b:99:84:9a:44:01:d0:6f:7b:
         29:c5:74:2a:91:6f:e7:16:2c:51:9f:0b:f1:b9:b9:12:56:77:
         49:bc:2f:80:01:de:4f:ca:09:e4:75:40:d5:d8:a0:2c:32:b1:
         77:c1:bc:15:b5:46:a1:71:91:61:eb:84:ac:a2:95:35:bf:b8:
         81:2c:29:80:f9:37:ab:c5:3d:d4:71:f7:ea:f8:af:f2:fa:10:
         55:5a:4b:1d:1a:60:a8:ff:8d:96:3e:43:3c:a7:a4:df:0d:9c:
         64:33:fb:19:48:d2:df:08:c6:e7:cd:86:c3:61:85:bc:05:f1:
         f5:ef:97:2c:9f:6b:e4:00:28:90:6d:b3:a9:f5:ee:df:a8:13:
         ae:8a:dd:b3:25:ad:15:15:34:5a:35:c7:22:6d:f8:3a:ea:d7:
         ca:a9:f4:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----