Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0284c47d-eb04-390b-b067-d05eca86708f.roa
File:                     0284c47d-eb04-390b-b067-d05eca86708f.roa (raw, json)
Hash identifier:          PH+R21O23Ak5ft12UThwwrJcCDUFT74kb0wEYFIduw4=
Subject key identifier:   83:73:55:01:53:32:F7:C5:BA:82:A2:BF:8E:B5:39:54:E1:35:63:E7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CAF752BB48D25DC25116BC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0284c47d-eb04-390b-b067-d05eca86708f.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33491
IP address blocks:        73.211.250.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:af:75:2b:b4:8d:25:dc:25:11:6b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=ae5821aa-1193-4276-b2f3-658cbda3ae86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:1d:8c:72:a6:ff:4e:fb:a5:47:22:2c:26:ff:
                    2e:07:cd:24:53:3f:39:ec:1b:f7:cb:76:67:0e:56:
                    3c:c8:3e:cb:f0:62:d4:c3:08:d3:a4:21:1d:ea:32:
                    53:c2:8b:47:59:06:ec:f2:d7:25:ee:12:a4:fc:66:
                    c7:30:59:f2:5e:f5:15:ec:5e:96:52:be:2e:ba:13:
                    d0:22:49:3f:c1:ef:7b:0a:7f:58:4f:db:8e:b2:1d:
                    40:a2:e6:ea:00:96:6c:93:29:d3:bb:41:f7:ea:02:
                    f2:84:f1:0f:f7:3e:ef:f0:e7:ca:d4:a5:42:a6:59:
                    dd:58:65:50:ca:dd:a2:67:51:ce:3e:c4:d9:19:0a:
                    7c:7a:57:2a:98:6f:ad:10:41:87:c1:4e:cf:5a:a4:
                    76:49:c7:c4:70:1d:a2:0f:70:4f:95:b1:db:c2:99:
                    cd:92:a4:c7:2e:34:72:0d:7a:a7:e3:4b:47:eb:fd:
                    59:6f:40:4f:93:4b:54:27:ba:6f:59:ac:0a:a1:b5:
                    39:a6:fa:3e:df:f8:10:48:db:14:c3:e4:0a:77:cc:
                    89:b9:1e:d0:40:12:dd:e9:87:ba:b8:68:6d:15:02:
                    04:74:9e:f3:61:46:bb:11:74:c6:07:6f:8a:fa:0f:
                    45:ad:fe:f6:1b:02:a3:da:7c:18:a0:03:aa:54:ba:
                    52:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:73:55:01:53:32:F7:C5:BA:82:A2:BF:8E:B5:39:54:E1:35:63:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0284c47d-eb04-390b-b067-d05eca86708f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.211.250.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d2:d5:be:2f:9e:4f:c7:08:c1:41:83:f6:c6:a4:13:cb:ce:55:
         b2:52:00:74:f8:a9:ca:6e:3e:0d:6d:14:b1:6e:df:f9:77:b0:
         f2:e8:fb:e8:07:b4:b6:bf:54:21:dd:9c:8f:04:d4:87:de:96:
         45:e8:b5:ba:27:28:36:6e:f7:1d:af:fa:a4:cc:c0:f7:ef:35:
         47:eb:26:6a:06:e1:33:e1:a1:d4:15:e2:4a:06:60:aa:b8:f6:
         b7:b6:4a:27:c3:41:84:b7:a7:2b:d5:82:bd:41:d5:3a:52:cb:
         c6:21:91:9d:1d:99:79:33:8b:6a:f6:15:43:ff:45:b1:d1:2e:
         0f:0d:b2:42:a6:32:e1:92:45:36:64:97:17:c8:7f:6f:ff:e5:
         e6:84:cd:b5:e5:c5:01:f8:8e:ef:15:04:e8:19:44:ad:8a:b4:
         fc:b7:79:10:c6:a8:72:96:ad:bc:67:a5:b3:29:85:c9:70:36:
         aa:79:48:a3:28:f1:2d:78:61:1b:44:2c:5c:f6:90:c4:0c:33:
         21:89:7f:7c:41:05:1e:be:2b:5f:7b:44:5e:03:86:3c:d9:17:
         0a:a8:09:4e:c9:4e:e1:b0:90:5b:bf:12:5b:d7:30:2d:7d:b9:
         a2:34:71:a2:d4:b0:ad:4a:c6:08:70:bc:e8:87:4a:5d:c0:25:
         dd:ab:0e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----