Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c50d69b-6be1-329a-a71d-8bd4b5d88dc5.roa
File:                     8c50d69b-6be1-329a-a71d-8bd4b5d88dc5.roa (raw, json)
Hash identifier:          j8gb/zoh6xdJ+ln02wKYCwD6lOhBXlD+TEFzb/248Cw=
Subject key identifier:   A1:96:B8:A9:EE:5D:62:61:FE:70:13:94:69:13:DB:C3:F9:98:71:82
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CAF64A98281BAAF3B719900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c50d69b-6be1-329a-a71d-8bd4b5d88dc5.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33491
IP address blocks:        73.146.166.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:af:64:a9:82:81:ba:af:3b:71:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=a21ee1f2-b43b-4042-b9ef-8bf27328dc52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a7:23:2a:b9:75:3b:b6:26:9c:ca:79:48:86:
                    d5:d4:90:19:ff:8c:33:12:60:da:2d:74:66:3c:98:
                    b6:36:35:1c:39:24:c7:2a:dd:dc:21:a0:ce:da:7b:
                    bd:a4:4e:a4:7b:29:e3:9d:1e:2e:67:b3:70:e0:c1:
                    e1:b9:88:c2:f3:66:b7:ce:ce:15:1a:2a:79:77:25:
                    d6:ed:af:f9:cb:9c:c2:37:47:91:cb:ed:ad:21:79:
                    39:04:10:83:9e:c4:2e:eb:0d:e1:a5:77:68:af:68:
                    85:4a:1d:6a:2a:b1:62:c4:9f:b5:fa:bd:c2:07:f0:
                    a7:b7:9b:b6:e2:02:e7:32:f4:be:b3:65:c8:16:83:
                    f7:c6:82:ec:7d:19:3a:c4:8c:7b:27:fe:d8:56:26:
                    47:a6:e1:3e:aa:62:d3:b0:b5:e5:db:65:ba:42:b2:
                    cb:fe:dc:9e:19:f3:9e:a7:1a:9a:6e:a9:0d:9e:8b:
                    6a:58:b1:ee:2f:9c:43:15:a1:c7:17:36:18:2c:7a:
                    4c:63:d0:10:ed:56:6e:96:a7:52:a0:eb:31:1c:3e:
                    8d:ff:04:ab:76:04:b2:68:7e:c9:ad:ea:46:a2:2f:
                    34:02:20:c8:24:8c:61:75:03:78:97:cb:c9:0b:b2:
                    69:f9:4a:44:cc:70:bb:ed:eb:13:be:43:cc:c2:cb:
                    d3:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:96:B8:A9:EE:5D:62:61:FE:70:13:94:69:13:DB:C3:F9:98:71:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c50d69b-6be1-329a-a71d-8bd4b5d88dc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.146.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:01:65:8f:a1:89:aa:f4:05:fa:63:5e:58:ae:a9:c0:6c:16:
         bd:8a:12:ff:88:75:02:3a:84:dc:e8:00:39:da:9b:f6:ba:7e:
         cc:87:d8:2d:20:f6:ac:b6:9d:87:e7:cc:94:63:9b:bf:a8:f5:
         f1:96:97:2f:6e:86:a3:a0:59:33:df:40:f2:0b:67:ed:66:cc:
         46:9f:5f:e0:b4:51:70:fe:7d:29:26:b1:59:fb:69:50:9d:9e:
         97:43:b1:1f:d4:02:28:ef:e6:8c:7e:ed:2a:bc:25:b7:8c:f9:
         4c:04:09:bd:94:cb:06:da:a6:f9:5d:03:0d:de:2e:09:2c:5a:
         1f:ee:b7:ec:2d:72:3c:2c:46:a5:4d:a9:9a:b3:a1:e6:d3:64:
         39:31:fa:b8:24:93:b6:14:7a:61:5d:33:43:42:8a:b4:11:6f:
         1e:6d:8b:79:65:d7:e8:e3:d6:31:90:84:12:ef:21:f2:93:17:
         d0:1f:cc:a3:6a:22:d8:ee:22:5e:52:ea:ca:8b:ea:a3:ab:0e:
         fc:76:bc:01:3c:8e:7f:a3:98:fa:9b:85:aa:71:64:11:0e:90:
         24:f5:8c:00:ea:36:1c:eb:87:05:e1:c3:ce:f2:5d:34:14:10:
         85:44:b8:9a:b8:6e:7c:92:28:55:46:6d:62:1c:e5:25:59:39:
         1a:ba:c9:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----