Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1651a64b-774a-3bf5-94d3-0268f323468f.roa
File:                     1651a64b-774a-3bf5-94d3-0268f323468f.roa (raw, json)
Hash identifier:          p/YbIt1UL5ka/T6z3O+hLux1g/Zm0AH/5oY5gxiSqiY=
Subject key identifier:   D1:B9:72:B2:23:B5:BE:18:EB:18:B4:0C:B2:68:C3:07:D6:75:63:80
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CB11913A0CE3B7A301E0E90
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1651a64b-774a-3bf5-94d3-0268f323468f.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33491
IP address blocks:        73.36.172.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b1:19:13:a0:ce:3b:7a:30:1e:0e:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=1777bd59-67d8-4111-839e-859e63f922f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:60:11:97:46:da:a6:a3:f4:ee:fe:47:8c:c7:
                    c2:54:40:2d:6a:5f:81:87:7c:68:72:58:af:71:ec:
                    77:cd:8b:33:ac:c5:c8:75:28:3d:15:b0:e9:4c:04:
                    e0:2f:ee:72:23:cb:99:ee:8e:a4:85:65:76:12:bb:
                    bb:76:c2:49:bf:ca:a4:15:92:e1:b6:4f:1d:fb:2a:
                    cc:d1:6f:40:df:fb:34:cb:d2:ff:34:31:e5:d8:e7:
                    d1:a1:cc:c7:b6:f0:54:6b:90:7a:40:47:e7:c7:6f:
                    fc:ea:91:b2:c0:bf:bd:ef:d5:fb:1d:c1:43:a5:64:
                    57:91:9b:1e:5f:2e:46:79:c3:7c:f3:9f:0a:9f:ed:
                    af:5e:cd:f9:05:78:72:82:11:23:e5:4c:f6:4f:4d:
                    74:ae:e2:83:3b:f2:8c:23:b3:a4:f4:c7:8e:96:30:
                    ec:e7:40:09:e7:f6:aa:c0:e4:91:55:b6:4d:c5:56:
                    22:ad:3d:d0:cc:00:dd:28:b5:93:e2:1b:6d:b8:62:
                    fa:19:ae:e5:f6:8f:f2:5b:f8:e1:50:cd:56:99:3f:
                    7e:36:01:f3:f4:56:23:51:3e:40:c0:79:53:46:9e:
                    a6:40:be:4f:f0:52:b5:bd:1f:89:2f:70:56:98:b8:
                    4e:14:be:a6:05:e5:3a:c8:c1:62:85:a4:40:56:c7:
                    65:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:B9:72:B2:23:B5:BE:18:EB:18:B4:0C:B2:68:C3:07:D6:75:63:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1651a64b-774a-3bf5-94d3-0268f323468f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.36.172.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:27:f5:a9:a7:08:af:5d:66:99:ba:53:71:13:88:c3:38:52:
         00:8f:ab:b7:ba:56:f7:49:86:55:21:d7:c8:54:76:7a:ff:10:
         04:2c:d8:02:a1:e9:a3:ea:00:a1:5b:95:24:88:92:eb:ec:dc:
         6a:73:b1:54:66:da:e7:60:fa:03:60:fa:43:e8:04:4d:3c:7f:
         5f:37:4e:30:2a:eb:a3:99:76:8c:96:6f:8e:b9:fa:b7:a4:9b:
         6b:23:3d:01:aa:6c:9b:5b:63:8e:4f:82:13:fe:6b:25:95:a0:
         0e:19:b6:02:81:30:7d:b8:2a:f8:d0:93:9c:a0:8f:46:8f:15:
         0d:ba:97:a3:55:73:d7:ac:83:45:d7:44:a4:ae:8e:ad:1d:d2:
         21:aa:80:aa:d3:15:c8:15:20:ce:24:bc:aa:6a:15:fb:c1:82:
         dd:e1:c8:35:50:92:97:68:9a:d8:d8:3c:71:b7:90:ad:16:5f:
         90:94:f8:0f:c0:d7:e0:e5:5f:3f:15:f4:91:09:9c:b3:39:ec:
         36:c9:6c:64:e7:01:db:70:a3:bb:bd:60:6f:7f:3f:b9:d0:bd:
         db:44:1d:55:26:44:73:88:06:f3:1a:d7:5e:2f:53:ef:15:10:
         e2:69:79:92:81:a3:4b:02:17:70:72:aa:cb:43:80:ca:c1:fb:
         ee:db:ab:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----