Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dae314c1-1154-33bc-a129-fc438d26117a.roa
File:                     dae314c1-1154-33bc-a129-fc438d26117a.roa (raw, json)
Hash identifier:          wX6thw1PSV3YfBsa3UkBsevysGNdTO5RphfLBdqM6/k=
Subject key identifier:   8E:C9:7F:A9:B7:C4:2B:BE:8A:8F:C9:D9:D9:6E:53:B5:8F:4D:06:D5
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CAF80514FFB6B2CFD81A040
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dae314c1-1154-33bc-a129-fc438d26117a.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33491
IP address blocks:        73.44.196.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:af:80:51:4f:fb:6b:2c:fd:81:a0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=3b358e79-5efb-4530-b778-dee1aa0d29c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:bd:ea:95:54:54:f2:fd:3d:7d:76:f7:b0:81:
                    1f:26:01:25:6b:b5:a3:30:f7:34:23:5b:b0:2f:d3:
                    fe:e3:97:f1:13:08:ab:1c:80:8e:fc:92:ca:66:37:
                    02:a5:a6:c6:14:5a:67:56:5a:e4:e4:b1:8d:03:95:
                    5c:fe:5b:ae:04:2a:72:5b:7c:5e:eb:53:39:60:9a:
                    6f:f4:83:de:23:2e:46:4d:08:ff:d8:08:f3:c5:d5:
                    b3:33:9b:75:61:0e:92:67:3e:fa:e4:4b:03:be:f3:
                    9e:b4:9e:94:7f:d6:33:cb:1b:0a:89:f7:8f:59:db:
                    c6:d1:a1:70:91:85:65:f3:18:13:10:b5:24:ba:0b:
                    72:85:bf:ec:6d:e3:5b:ef:20:60:02:2c:8d:1d:54:
                    b0:7a:85:4e:ad:02:26:f3:8f:c4:eb:34:59:69:ac:
                    ae:3a:7e:4c:e1:53:e7:6c:e6:90:ae:f1:94:4c:10:
                    cf:26:56:0c:08:3c:81:13:bb:33:b4:03:cb:76:a8:
                    14:ee:1e:d9:8c:1a:4b:38:a6:2f:df:0f:b1:5d:5f:
                    ce:b6:63:f9:96:f0:cb:5f:66:2b:eb:48:22:83:9e:
                    69:02:f4:ff:cd:ae:62:b3:3c:02:41:64:74:1e:d7:
                    db:f0:49:d6:db:57:4f:65:b4:5e:87:21:ca:2d:12:
                    61:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:C9:7F:A9:B7:C4:2B:BE:8A:8F:C9:D9:D9:6E:53:B5:8F:4D:06:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dae314c1-1154-33bc-a129-fc438d26117a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.44.196.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:d1:53:78:5c:57:c8:7a:8d:e0:1f:17:3c:ea:d5:c0:c9:e0:
         d1:61:22:c1:64:83:39:02:e3:0f:8e:fd:5c:9a:97:3e:73:09:
         1c:ba:fd:69:d9:20:67:7f:e6:f9:b6:be:94:f5:08:05:e5:8e:
         66:5a:b1:69:b4:23:b9:2a:39:b3:bf:4d:1d:e6:b1:94:bb:e4:
         e7:5f:3a:72:48:e0:fc:a9:fd:5b:4a:27:8f:9e:7a:ab:be:ba:
         a4:e4:58:37:54:0a:e2:77:a4:7c:f2:d3:ec:96:81:cc:49:c7:
         ab:cc:fb:8f:65:41:de:14:55:0f:b2:cb:a3:2e:ba:b9:a7:3b:
         93:3d:14:f8:d5:68:f9:8c:5b:a8:3b:6d:d8:34:ef:d3:6d:99:
         89:b0:14:0a:8d:32:2f:ee:96:e7:c2:75:e8:9c:73:8f:9c:4b:
         52:88:7a:81:6f:11:6d:17:3a:51:88:7f:30:e9:cd:22:57:c7:
         7d:d9:4f:4c:9f:ad:fd:c3:2d:ec:82:52:a2:52:2a:e7:70:a4:
         e0:b0:50:1b:95:84:0d:52:8f:7a:35:0a:53:fb:3d:d7:3b:de:
         1e:6c:4f:52:3c:e6:9e:2e:9e:bc:60:5a:ad:4b:a8:ca:c8:1d:
         44:cf:b5:1d:3f:b5:32:0e:2d:d5:c8:19:e4:17:20:cd:4f:40:
         9f:ba:20:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----