Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/968f7c37-9304-3113-b566-1954290349b0.roa
File:                     968f7c37-9304-3113-b566-1954290349b0.roa (raw, json)
Hash identifier:          9Y/q0UCzU7KO304p+1fp7efVg934VyMizf/oalDBWSE=
Subject key identifier:   0A:3C:A3:AB:B4:B7:B3:84:63:E7:A3:A4:87:8A:A6:93:A5:E3:C6:81
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CB118AE42B664CA2DBF8F40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/968f7c37-9304-3113-b566-1954290349b0.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33491
IP address blocks:        73.36.142.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b1:18:ae:42:b6:64:ca:2d:bf:8f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=38f7776c-4fef-4a13-bd41-d721a70af309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:17:e1:2e:1e:bf:e0:e6:82:75:af:c7:49:3d:
                    dc:a3:16:e3:23:0c:96:76:9f:d1:1f:e1:53:1a:95:
                    24:95:ff:1e:ce:e2:2e:83:73:ff:46:3c:6e:7b:d6:
                    5f:29:29:7a:59:c9:9a:5d:c2:9c:36:49:68:fd:b7:
                    4a:ea:4a:72:8f:f6:b9:01:75:3d:84:d9:ab:f5:6b:
                    40:93:a4:9f:13:7f:cf:5d:5b:01:4d:fb:60:32:14:
                    94:1f:33:cb:e5:30:32:50:9e:07:84:b0:78:32:2a:
                    e8:88:73:b4:37:4a:79:d0:fe:fc:a1:51:70:62:c7:
                    f1:a4:cb:1b:fa:99:40:c2:3f:4f:d1:4d:fd:16:8b:
                    0f:ea:20:76:8a:ce:25:17:40:18:5b:9c:6c:05:85:
                    aa:d3:44:ae:3e:84:c3:dd:68:1b:4d:8e:bb:5c:6b:
                    7d:9d:6a:97:d8:24:f0:7e:44:45:4b:a0:85:af:02:
                    3d:34:54:11:ad:94:e7:c0:e1:64:93:55:98:a7:02:
                    50:a2:66:71:60:29:c3:f2:d5:d0:fe:e2:61:a5:c8:
                    92:17:50:1c:98:7e:75:07:66:c5:35:7d:ae:24:63:
                    4f:2c:d2:14:4a:1e:a0:5b:0c:4f:d9:51:12:cd:4c:
                    1c:40:6d:b8:63:b4:ad:8c:d5:31:8e:89:0c:66:d7:
                    83:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:3C:A3:AB:B4:B7:B3:84:63:E7:A3:A4:87:8A:A6:93:A5:E3:C6:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/968f7c37-9304-3113-b566-1954290349b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.36.142.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:ce:bc:3c:e2:cb:c5:07:a2:02:2e:8a:69:ba:aa:2b:cb:1a:
         c6:fd:d5:ab:5c:50:10:24:ba:d3:73:33:a8:c7:a6:7a:a3:3a:
         28:f1:41:0d:7d:87:5e:5f:65:05:80:a0:13:32:45:57:58:5d:
         0b:66:e6:1f:ed:d3:2f:b6:81:38:df:0a:e0:db:9b:b7:ff:8e:
         e9:12:eb:e8:96:c8:ed:bc:7e:be:43:ed:63:b9:35:02:68:d2:
         48:8b:ba:3a:60:ac:ad:54:50:0f:45:36:ee:39:d0:46:ff:4c:
         84:f1:03:32:4f:86:b5:b5:83:24:5f:de:28:d1:f8:98:a8:53:
         05:97:88:03:fb:db:e7:45:5b:a5:60:ad:e7:8a:6d:52:c6:52:
         57:44:7d:dd:5b:77:4f:3b:8f:0b:d4:81:67:3a:d0:6d:16:7c:
         f8:ec:53:c3:58:93:8d:5e:a0:7d:b6:c0:48:b9:ed:30:cd:37:
         85:0d:de:f1:6a:e4:e9:ac:13:d4:b0:a7:0e:b5:3c:2c:98:5d:
         6b:d8:78:17:cc:2f:1d:4c:eb:01:84:a9:ca:d2:7a:35:f4:77:
         27:3b:78:5e:2e:0c:92:8a:e8:cf:b0:f8:b5:c1:a6:61:ab:51:
         3b:07:08:66:56:81:0f:ab:cf:57:61:47:ed:e3:03:85:2a:c9:
         aa:c7:eb:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----