Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5330bfa0-7bfa-3bfa-b6c5-0df29b26f7e2.roa
File:                     5330bfa0-7bfa-3bfa-b6c5-0df29b26f7e2.roa (raw, json)
Hash identifier:          BFWQnkaMbOTR48+o6VSONpF7f5zryqha/XWGgk5+1DQ=
Subject key identifier:   B6:A0:40:EF:C5:23:48:F7:8D:AE:92:B0:41:78:56:C5:61:96:A2:D8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CB135A37AF52223651014FA
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5330bfa0-7bfa-3bfa-b6c5-0df29b26f7e2.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33491
IP address blocks:        73.74.114.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b1:35:a3:7a:f5:22:23:65:10:14:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=154f0768-236f-477d-bfe0-69a033b85a13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:28:c2:d8:a4:6e:f9:9b:7f:4e:ea:89:c4:fa:
                    e8:ea:fe:72:4a:01:0d:d5:03:93:3f:94:48:73:3f:
                    24:c4:ff:12:87:1e:9d:0a:49:91:74:d5:aa:ad:80:
                    ab:84:00:df:86:b3:7f:1c:bb:4c:7e:93:a3:d1:5f:
                    4d:7b:f1:29:1d:c0:f6:b8:e4:e4:aa:7e:f5:0f:03:
                    74:bd:a9:7c:82:e2:49:d3:a1:20:81:de:61:8e:d6:
                    dc:07:a4:40:d2:1c:d4:a2:d2:48:32:20:01:e1:65:
                    48:0d:35:5f:1e:16:91:e7:e7:b8:73:4f:70:42:bf:
                    03:53:d2:4a:fd:8f:c0:f6:79:70:2d:81:60:ef:6b:
                    e5:06:ef:b9:ee:fa:9e:ce:f4:f2:56:0f:05:bf:1c:
                    ee:60:14:0a:a3:35:bf:25:db:73:65:da:ff:9f:e9:
                    e8:b1:10:eb:c6:fb:ed:f1:8e:03:2a:c6:bf:bf:cc:
                    e1:d7:94:f6:77:b8:be:3d:a2:06:64:a8:f0:d4:cd:
                    61:4f:7d:2a:eb:3f:2b:3a:63:49:ac:26:ff:08:ed:
                    01:1a:2b:7a:98:b8:aa:8e:b2:3c:a1:82:65:3c:5a:
                    d1:d0:ac:b4:1b:8c:5d:08:ac:98:6e:ee:b9:de:71:
                    9f:22:4a:c8:92:82:b9:8d:b9:67:98:c9:19:43:ad:
                    2d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:A0:40:EF:C5:23:48:F7:8D:AE:92:B0:41:78:56:C5:61:96:A2:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5330bfa0-7bfa-3bfa-b6c5-0df29b26f7e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.74.114.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:6b:f7:fd:8a:c4:d9:f1:45:ec:c0:39:90:0d:fb:60:d3:c2:
         fb:97:63:cf:2a:20:5f:ab:7c:16:11:5d:84:67:ed:1c:d7:5b:
         55:b0:08:37:d2:3e:8a:b5:08:77:60:e0:b4:d9:bc:49:64:cb:
         af:13:6b:8d:a5:f5:a8:d8:57:ee:1c:01:93:e4:db:c0:07:11:
         07:db:d4:e6:31:83:6c:49:aa:47:22:43:de:ed:d9:b3:30:23:
         0e:ae:12:2f:c1:da:03:7a:df:73:7b:fb:5e:a9:6c:b0:c3:6b:
         d3:4e:89:a5:71:f5:7e:8f:1e:a0:24:7d:4b:92:18:55:70:e8:
         ab:22:33:fa:34:ab:bc:7e:90:d6:3a:92:a6:f7:d1:94:67:c0:
         aa:7e:f5:40:35:3d:29:50:b9:91:ec:da:8d:91:01:e9:b1:e1:
         ea:c3:70:56:13:43:b0:a1:45:e9:8e:be:d7:82:fa:f9:0a:fb:
         67:53:da:a0:a2:74:de:f8:82:ef:4a:32:de:b1:c0:68:21:29:
         6c:64:9b:a4:7a:db:06:96:b3:65:33:b5:cc:86:ef:3d:e5:f6:
         78:7f:08:5d:65:c5:d4:d0:6a:6f:2e:3c:a8:b4:5f:3f:66:b4:
         74:c6:6b:23:3d:12:d2:4b:a1:fa:65:cb:ab:ab:38:1f:a5:57:
         6a:c5:64:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----