Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d2ea913f-14e8-3649-9043-64a5e94b1dd5.roa
File:                     d2ea913f-14e8-3649-9043-64a5e94b1dd5.roa (raw, json)
Hash identifier:          F1rvPcfNVVecXWqvC/TXY1iy0s1BGXywqhXxylt8Apg=
Subject key identifier:   E4:E0:1A:C4:A2:68:86:13:AE:B0:A2:A5:96:DD:9A:75:73:DE:0B:FF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CB1A11FFE3EBB207C84D950
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d2ea913f-14e8-3649-9043-64a5e94b1dd5.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33651
IP address blocks:        73.252.156.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b1:a1:1f:fe:3e:bb:20:7c:84:d9:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=6b016d09-bf62-45e3-8dd3-298635209f15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f9:4c:50:38:e8:01:74:80:f6:eb:6d:23:28:
                    7d:5b:e2:2a:85:56:ea:20:67:41:8c:88:25:6a:54:
                    ba:4b:f5:a4:04:18:00:e4:ab:9e:a2:c1:d3:8d:0b:
                    e8:96:c7:27:2b:ad:48:d9:3b:61:f9:d2:75:64:82:
                    89:eb:45:60:af:f4:dc:2e:17:36:4f:2f:15:25:5f:
                    e0:5c:20:56:f5:3b:af:3b:0f:a7:4c:c3:5e:d4:ad:
                    fb:d2:c7:06:ff:8c:ea:6c:83:2b:7d:40:45:33:13:
                    0b:4c:18:dd:89:40:d6:50:02:79:72:a4:54:9d:c7:
                    fb:75:3e:c5:6e:fd:43:a5:eb:31:e1:99:14:84:0a:
                    40:45:82:86:91:83:c8:64:2f:5d:82:d7:1e:6b:22:
                    69:10:cd:a3:d1:9a:40:70:26:ac:0a:65:fc:0f:b0:
                    76:71:d1:34:90:6e:0e:ef:72:98:72:4a:d2:a4:2a:
                    40:bd:43:7b:7e:cd:58:58:dc:b1:aa:a7:e4:fa:fc:
                    de:84:74:84:9c:91:75:af:cb:00:93:50:93:0b:20:
                    1a:83:67:da:83:8f:c3:7b:71:f5:02:a5:46:8e:64:
                    2e:d7:ce:6c:33:b6:2e:e3:ee:74:94:45:de:16:27:
                    c9:de:2f:67:54:eb:b7:cf:00:c3:7d:20:68:d3:39:
                    fb:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:E0:1A:C4:A2:68:86:13:AE:B0:A2:A5:96:DD:9A:75:73:DE:0B:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d2ea913f-14e8-3649-9043-64a5e94b1dd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.252.156.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:1f:6b:fa:10:1e:b4:eb:5f:5e:8b:78:14:59:06:81:79:91:
         6a:23:d1:17:54:c2:65:81:5b:fa:e3:1e:a8:9b:87:d2:e6:70:
         f7:fd:7b:6e:3f:64:d2:a4:71:75:49:7a:a6:fa:5a:d7:29:62:
         77:8a:00:00:58:94:48:10:13:9d:3c:9c:c0:b2:b2:b6:2b:9c:
         26:87:45:8e:bd:46:f3:c9:8e:61:93:9e:7f:80:8d:8a:45:29:
         42:0e:17:16:92:71:1d:5e:a6:0d:53:aa:fb:9f:21:fa:33:56:
         91:3b:a6:2f:ee:08:a2:b6:6b:d8:50:20:f1:a7:40:18:76:fd:
         4d:32:6f:74:41:03:a1:ea:f3:e0:b3:83:b0:2a:0a:f5:88:1d:
         b1:99:bf:ad:13:0c:40:e3:b4:db:3a:d1:83:cf:06:d5:b8:7d:
         b7:c0:ac:db:db:8c:fa:41:24:68:0c:11:c6:74:a6:ac:d6:fc:
         55:a8:97:fb:27:e6:7b:b8:f7:74:dd:c9:a5:f5:06:8a:ca:5c:
         23:e1:6a:49:72:b5:87:22:31:0a:37:51:3d:3b:69:d2:0f:9a:
         97:1f:08:55:41:c7:53:27:da:7a:fb:fe:1a:92:c0:4c:77:40:
         a9:6f:91:f2:f4:c8:a8:2d:5c:9d:ee:71:49:5e:75:07:95:8d:
         80:6c:aa:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----