Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/95e92e02-15a9-3d96-bc83-12225f385c99.roa
File:                     95e92e02-15a9-3d96-bc83-12225f385c99.roa (raw, json)
Hash identifier:          Zvx4Wtn8Ej00Ifa3ArzJNuuCheqUrmCI6lFi0WgoDBc=
Subject key identifier:   65:F4:20:31:42:56:6E:32:EE:4D:CB:F6:F9:89:75:F0:BF:E5:6D:83
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F91B3A7A26991EB1B33F40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/95e92e02-15a9-3d96-bc83-12225f385c99.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     33662
IP address blocks:        73.155.226.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f9:1b:3a:7a:26:99:1e:b1:b3:3f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=e37fc3a2-bc2c-415c-8168-1964f5af4396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:43:79:a9:01:30:c5:58:03:db:a4:4d:26:de:
                    29:95:3b:c1:58:65:37:00:fe:c6:65:66:1e:d2:1f:
                    8b:1d:c4:ca:d0:c6:1c:e9:fa:8b:cb:b3:eb:03:f1:
                    0a:9f:6b:9a:7f:97:be:f3:a3:4f:0f:aa:e0:14:e6:
                    79:28:69:ae:24:45:34:ac:87:59:f8:37:e7:b3:83:
                    57:b7:91:48:82:ca:3e:92:61:20:6d:0c:8b:fe:3b:
                    61:77:e1:3a:26:83:ce:99:a4:dd:04:6b:0c:e4:07:
                    9f:f7:89:02:3d:f0:c4:b2:93:22:b9:f1:0c:7b:14:
                    99:8f:f1:89:4d:22:3e:8a:c6:f9:ee:0b:c6:70:26:
                    b7:f2:7f:e2:45:31:6c:1b:62:fb:91:a9:ed:1c:08:
                    9b:79:13:5b:53:b1:c9:2c:a2:8a:e5:2d:05:3b:9f:
                    99:da:1a:a1:bd:e7:e8:c7:4d:35:23:ed:57:9d:84:
                    ac:63:17:59:ec:18:22:da:a5:c2:8f:94:f1:3f:1c:
                    23:be:4c:5e:d3:14:66:2a:8c:79:62:eb:b3:1f:52:
                    0a:8c:8b:da:c0:77:1a:e2:02:d8:a0:02:68:ac:a0:
                    2a:ee:1a:3e:f3:d7:8c:ee:67:e6:d5:f4:f4:f9:aa:
                    97:75:f7:14:ad:51:bd:bf:ac:72:87:ca:b3:d5:aa:
                    52:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:F4:20:31:42:56:6E:32:EE:4D:CB:F6:F9:89:75:F0:BF:E5:6D:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/95e92e02-15a9-3d96-bc83-12225f385c99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.155.226.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:63:d9:85:33:9c:bc:6a:3a:b8:d9:3c:30:ef:21:65:83:38:
         7c:90:03:8f:68:63:b7:56:a2:ae:6d:0f:1f:5d:36:8b:4e:38:
         0b:8e:d5:3e:70:74:76:e2:40:62:8e:f3:45:05:c4:98:d7:73:
         f3:97:ca:45:63:95:c4:77:8d:c6:57:34:7a:20:2f:40:c3:46:
         5f:cf:bd:64:e5:d7:42:55:fb:58:d7:9a:30:d3:ce:63:61:e2:
         d4:3b:f6:ff:78:08:2f:c3:4e:de:b8:c8:1b:0a:26:a6:55:0b:
         e3:29:73:c1:b5:88:e7:66:b0:fb:6f:8c:77:b2:e1:5b:31:f3:
         a1:39:4b:6f:de:37:b3:6b:db:07:58:d4:2f:3f:19:c5:8a:97:
         ee:e1:4f:df:aa:93:40:ac:3f:0c:a4:f4:8e:a8:e6:bb:d0:a6:
         83:53:ee:e8:28:56:fa:d1:78:b6:a7:86:af:79:11:5b:3a:cc:
         cd:98:58:13:eb:96:55:b5:ca:94:70:ba:87:7b:87:a4:55:9d:
         be:97:e3:f8:09:96:e0:3a:8b:62:94:49:f5:57:27:a1:7a:81:
         ae:3d:af:a3:4c:1b:fe:6e:d0:02:cb:95:46:88:b5:31:00:a2:
         b0:5a:5e:3e:83:da:35:14:18:23:da:27:47:f5:22:23:b2:0e:
         18:d3:c1:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----