Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/991f2380-fc96-3def-80cd-8b8a071ad155.roa
File:                     991f2380-fc96-3def-80cd-8b8a071ad155.roa (raw, json)
Hash identifier:          5+DSb4/rCG7wyK//ukyahvjE85JlrG8hNO2Cybpqtq4=
Subject key identifier:   A8:6C:38:17:78:17:7E:03:2E:BA:44:B6:98:7E:BC:87:AA:48:EE:1A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F7E1856FF3EF16EEEFDDC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/991f2380-fc96-3def-80cd-8b8a071ad155.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     33662
IP address blocks:        73.155.152.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f7:e1:85:6f:f3:ef:16:ee:ef:dd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=08c38998-6d55-4a71-9860-dafc6d9843a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f7:9d:97:3a:f2:a6:33:b0:1b:fc:b7:ca:47:
                    f4:74:f9:36:89:2e:c7:b0:fe:4e:b1:a0:c0:e5:15:
                    97:d5:13:e9:cb:d6:b2:0c:57:e4:6a:87:f5:9c:3d:
                    dc:bc:c4:70:08:e6:48:19:fc:d4:2c:7e:f4:70:31:
                    d7:6c:b7:76:f7:1b:a2:7f:ca:e9:5f:6e:3c:04:2b:
                    09:fc:a8:3a:f7:02:d4:f3:50:9f:6c:46:1f:21:b7:
                    6f:c6:85:5f:50:bd:1b:99:aa:36:7a:80:76:52:85:
                    61:cd:30:a1:81:a4:67:51:26:18:fd:ae:aa:a5:53:
                    11:b7:f3:96:34:18:e4:ac:02:3e:5e:62:52:9e:d4:
                    48:fe:56:f3:b7:3e:99:35:c3:bd:35:89:02:4d:3a:
                    8a:b7:6b:82:5a:6e:ff:37:c0:fd:9f:a6:e6:b5:96:
                    70:9a:8a:9c:94:52:6f:f9:53:1b:37:eb:2e:76:90:
                    c0:52:26:bf:c2:47:20:ad:49:b5:f7:3d:49:23:f6:
                    4b:9a:12:0d:f1:43:00:d0:68:8d:77:44:ab:05:ce:
                    c7:2a:19:52:44:9f:7b:79:57:c4:d5:29:7d:aa:5f:
                    bd:b3:b0:d1:85:12:a2:43:34:0a:65:7b:94:b3:da:
                    fa:d0:3d:63:6d:0c:c0:b7:b2:6c:df:26:e7:e1:51:
                    09:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:6C:38:17:78:17:7E:03:2E:BA:44:B6:98:7E:BC:87:AA:48:EE:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/991f2380-fc96-3def-80cd-8b8a071ad155.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.155.152.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:59:93:44:0b:64:2e:47:4a:f5:22:4e:fd:9d:4a:48:96:38:
         2f:0d:04:1f:7f:23:65:71:c2:21:26:c7:9d:2a:1e:c3:63:fa:
         1e:a8:92:c3:00:d8:d4:b1:6c:7f:c4:08:3e:d3:3e:a2:62:f1:
         af:23:dc:0b:2e:14:9d:2b:46:74:46:fd:10:de:9f:ca:c7:60:
         51:34:55:4b:5a:3e:ec:7e:2b:8d:81:a8:f6:9d:79:64:1e:fd:
         33:a3:58:8e:ce:74:ca:81:7e:01:44:ac:f1:e2:7b:bd:39:18:
         7e:57:5b:fa:bb:d5:d3:9f:46:83:54:52:86:b2:54:b7:fa:3e:
         5d:92:18:fe:0e:34:b7:2a:42:01:83:7c:e5:52:a6:cb:91:ea:
         59:75:9e:cd:9b:03:17:8b:bd:79:20:5c:b6:1e:9a:12:96:c7:
         30:40:9a:50:13:26:b8:f2:02:17:0c:57:fd:1a:64:48:cf:86:
         63:e8:95:8b:77:07:fd:b3:df:eb:4f:66:42:09:23:88:fe:d2:
         d6:5d:5e:05:a5:2d:c4:f4:76:86:a6:43:d2:b9:72:82:a2:4c:
         c5:2c:aa:99:ee:be:29:e5:2b:fa:a2:87:ba:7d:68:5c:2e:20:
         c4:23:d2:77:16:c6:15:d2:a4:68:1f:55:90:14:2e:25:5a:13:
         08:b4:ab:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----