Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cc0a85fd-1bd8-38ee-b4e7-58373b51a3f8.roa
File:                     cc0a85fd-1bd8-38ee-b4e7-58373b51a3f8.roa (raw, json)
Hash identifier:          dNKlFP8by5ExgAdygz6sQDJ36nLIfKavl+vuSCi+X4Q=
Subject key identifier:   29:E8:57:D6:F9:45:E3:A5:F0:FF:D9:5C:3F:0C:F3:2E:DF:9F:45:C1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6DC65910DDB68EA36CE730
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cc0a85fd-1bd8-38ee-b4e7-58373b51a3f8.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     13367
IP address blocks:        73.94.30.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6d:c6:59:10:dd:b6:8e:a3:6c:e7:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=7a6f7ad2-6415-4311-87cd-a3959efd5a16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:04:58:bc:00:19:e4:d3:2d:ec:e5:51:2d:29:
                    6e:fc:55:78:42:88:ec:db:49:1a:9e:58:6f:b4:d6:
                    c3:e2:42:5f:4d:67:b1:9c:23:d0:05:18:dd:15:98:
                    61:82:a7:dd:e0:07:b5:b4:7d:18:e0:df:12:67:46:
                    09:a7:42:8c:74:dc:03:5b:10:2f:2a:70:64:d8:7a:
                    c9:71:f5:b7:19:0f:88:aa:95:6e:30:04:ba:e1:e1:
                    59:69:e2:aa:ea:f8:62:2b:cb:38:e4:59:19:ee:95:
                    6d:97:5f:0e:12:82:6b:c7:5a:50:a2:cb:a1:15:d5:
                    95:d4:ad:e9:78:3c:f5:2f:1a:b7:ae:49:49:f0:d5:
                    16:6b:d5:15:f4:87:d9:d0:5b:b9:7c:b4:6b:5f:6a:
                    73:32:9b:e6:25:ba:f9:29:38:5a:f5:2c:90:f1:9c:
                    74:19:6e:48:36:99:84:21:7c:d5:e9:a8:d8:b9:cd:
                    b9:f6:30:8f:79:05:16:b0:d8:87:84:02:d0:e6:8a:
                    f7:26:84:50:bb:da:1c:e4:06:a6:31:ef:e2:9d:1f:
                    34:63:60:e4:71:7c:82:cc:ac:93:80:00:36:6f:8c:
                    fe:38:49:81:00:ae:1e:7c:2a:da:f2:cd:37:6b:df:
                    68:0e:95:7f:47:12:24:63:9b:4c:75:50:da:56:33:
                    e9:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:E8:57:D6:F9:45:E3:A5:F0:FF:D9:5C:3F:0C:F3:2E:DF:9F:45:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cc0a85fd-1bd8-38ee-b4e7-58373b51a3f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.94.30.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:7b:2c:05:47:ad:42:06:57:6a:3d:41:e6:49:03:0a:82:9d:
         db:b4:1f:45:a4:00:bd:aa:74:fd:7f:f4:35:a7:df:89:66:06:
         19:c1:7d:8d:0e:20:81:08:bf:e4:b6:92:ce:09:30:e7:91:77:
         23:98:57:0a:2e:e0:f2:93:d1:a3:db:64:b3:4a:d0:5c:5e:9f:
         64:50:88:7f:08:48:e6:a5:ac:3f:94:d1:36:c4:b1:68:4c:12:
         33:1e:ec:37:f7:24:f3:62:da:da:8f:d5:ca:e0:e7:91:01:2b:
         c2:c0:88:60:da:c2:c2:df:94:84:d0:bd:ce:95:28:7b:f2:63:
         85:9b:5e:ae:a8:94:f0:ee:0e:d7:7a:ef:30:61:2c:19:7e:ec:
         d9:37:9d:c1:de:ca:d8:f9:47:6a:f1:a5:b5:85:b3:99:82:6b:
         18:14:99:db:99:28:ef:cc:33:ee:07:8c:12:5c:b5:a0:63:c6:
         57:a3:f0:3d:e0:7f:27:6b:04:98:17:6c:27:9d:5b:bb:85:07:
         ec:3f:4b:af:d9:29:18:bc:a4:91:0f:15:a0:37:3b:05:fd:16:
         22:a6:3b:cd:ec:fd:11:4e:e6:5c:45:1c:8d:af:04:9f:68:46:
         25:3a:8a:a9:29:06:28:7d:3d:df:97:55:e4:9f:7d:a9:6f:a1:
         90:2d:14:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----