Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f780a94-79c1-35be-863f-e234c0eedece.roa
File:                     8f780a94-79c1-35be-863f-e234c0eedece.roa (raw, json)
Hash identifier:          u3Ozct+33v1o563F59N+TokXuz/dritl826Z81BGlUU=
Subject key identifier:   09:EC:01:DE:25:A4:5B:A5:57:15:78:F0:A6:09:0C:A1:A6:77:01:14
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F7ED9DEF5EEC5F0626E440
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f780a94-79c1-35be-863f-e234c0eedece.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     33662
IP address blocks:        73.232.36.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f7:ed:9d:ef:5e:ec:5f:06:26:e4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=100adab8-a6e5-49d2-a364-b40f05c94ff2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a9:b3:85:22:6c:a9:85:6d:e4:9b:85:8c:a1:
                    84:22:e4:6a:be:11:42:f0:42:53:a7:57:b2:97:fa:
                    df:28:87:0f:da:3f:34:70:d7:7d:66:bc:c4:30:e7:
                    62:06:28:a8:ac:14:e5:de:d7:85:f8:3d:77:55:01:
                    18:df:e7:8a:1a:ef:97:be:9a:f6:3a:d9:fd:80:79:
                    83:30:f8:34:a3:db:21:69:a7:63:02:8d:bb:e6:61:
                    1b:04:e6:60:ab:98:ac:36:d2:db:4c:4a:64:2f:fa:
                    bc:e4:ee:ba:a5:63:97:be:8c:21:a2:62:6b:f1:e5:
                    6a:9f:a8:3e:76:ed:b4:c5:6b:bb:b9:4c:f7:b3:51:
                    f3:cc:22:51:c0:82:b2:f3:59:29:98:64:32:35:53:
                    1a:c6:ad:32:4f:6e:75:e5:93:7d:3b:9e:32:b6:0e:
                    c9:03:b2:06:39:64:6d:41:00:2a:58:b9:83:62:ba:
                    c6:dc:7a:61:67:87:17:03:df:2c:04:72:a0:14:16:
                    89:a6:ea:f8:07:33:89:ce:75:b3:88:ff:9b:39:c1:
                    0b:ca:c4:8b:d4:68:a8:7f:90:72:d4:12:ff:60:82:
                    9e:f1:61:51:ee:6c:56:64:b8:46:f4:99:df:33:a1:
                    b4:24:00:40:88:ed:72:d3:32:25:d3:d2:11:ff:76:
                    81:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:EC:01:DE:25:A4:5B:A5:57:15:78:F0:A6:09:0C:A1:A6:77:01:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f780a94-79c1-35be-863f-e234c0eedece.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.232.36.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:36:f4:36:3a:dc:d1:8d:27:d0:ff:7e:bb:d5:ba:df:ed:c2:
         f1:13:98:e5:6d:bd:02:88:43:d4:45:4a:a2:68:b3:a4:43:3e:
         c2:71:f1:17:7a:aa:e7:bb:09:ec:80:4e:aa:d8:f1:96:d2:e7:
         92:dd:4b:04:54:ff:98:64:b4:07:c7:74:78:21:0c:b0:b5:4c:
         e3:01:51:dd:4b:ad:9b:b8:2b:58:8e:f9:0b:8b:f1:43:76:de:
         d6:1a:1c:da:3f:5d:4b:2e:8e:df:85:99:d0:2e:c6:bd:24:85:
         a8:db:20:09:ca:cc:da:45:5e:91:53:17:2b:a1:75:0b:61:79:
         58:c2:54:d3:b2:0c:62:96:b7:5b:a7:ed:89:e3:5b:06:c6:5f:
         82:7c:f0:db:0c:9e:c7:3e:18:f5:e7:74:06:a7:8e:41:6e:0e:
         78:86:6f:33:8c:4f:25:aa:35:f0:0a:3e:a5:ed:5d:ad:75:30:
         05:84:17:82:50:52:2e:48:84:22:7e:8c:d7:a8:eb:0f:4a:3a:
         fb:37:2d:72:e2:58:ef:96:3a:dc:24:c0:04:92:3a:91:d6:c1:
         cf:6b:8b:90:86:a1:9e:a0:80:c8:04:88:e1:cd:16:ad:80:8f:
         5a:30:9f:a5:9d:a9:70:a9:de:68:3a:30:5b:b7:e4:3c:58:a7:
         86:48:93:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----