Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f77c4042-2eb1-32fe-82d4-cd77f6af2908.roa
File:                     f77c4042-2eb1-32fe-82d4-cd77f6af2908.roa (raw, json)
Hash identifier:          qqh+TeTQ3eNurqPxZ/Olv1XpWLC2Km3NDiK+njkR4C4=
Subject key identifier:   B5:67:85:31:C1:17:56:93:02:9B:48:9A:2D:76:2C:CF:89:9F:CF:DC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CAF893484E13CDECCF056C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f77c4042-2eb1-32fe-82d4-cd77f6af2908.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33491
IP address blocks:        73.51.222.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:af:89:34:84:e1:3c:de:cc:f0:56:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=f445c3d2-58e1-4b37-8d7a-6832525e9840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0e:d9:b5:22:fd:3c:a5:4e:81:46:13:61:9c:
                    82:75:5b:35:66:c7:9d:c7:f7:f8:2c:01:73:c2:42:
                    0e:c3:b8:13:1d:24:56:51:48:d1:11:17:a6:5e:4d:
                    f8:12:c1:cf:4d:52:c7:0f:8e:a3:d9:fc:98:c8:e2:
                    fd:8a:70:3f:19:7c:15:08:c7:6e:92:cb:f4:74:e0:
                    54:48:49:37:cb:6b:34:01:59:f4:ab:c1:14:e1:39:
                    9d:36:f8:5f:f5:e6:3f:15:d7:18:67:b6:48:15:02:
                    b1:2c:28:0e:c2:d7:7c:88:d1:f5:a1:7b:cb:8a:41:
                    b6:c9:e0:b1:99:25:c1:c7:bb:80:07:4f:24:78:e6:
                    b6:aa:fe:4b:3b:25:d8:6a:23:f0:0b:72:65:4c:e2:
                    e7:b3:9f:61:6d:09:8a:4b:1e:e0:a0:1e:93:75:ea:
                    69:b0:6d:94:a6:2d:53:5a:b8:f6:5a:2f:e1:57:26:
                    23:8a:5c:9d:ed:78:db:7a:10:6b:21:74:9d:76:6d:
                    f9:46:3e:57:81:36:03:38:d9:95:6b:1c:7f:9d:66:
                    d2:c3:df:48:3f:c7:95:57:2e:c6:5b:2b:48:83:e5:
                    6b:ab:5f:67:ba:2d:95:0b:7c:31:1a:1b:c7:ed:ef:
                    87:25:10:f9:e4:78:8b:32:c2:66:95:f9:ba:9a:f0:
                    bf:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:67:85:31:C1:17:56:93:02:9B:48:9A:2D:76:2C:CF:89:9F:CF:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f77c4042-2eb1-32fe-82d4-cd77f6af2908.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.51.222.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:cd:66:58:f7:09:d7:36:34:92:27:6f:63:f6:0b:dd:81:d2:
         2c:af:97:c9:c8:53:ff:7b:b7:31:a9:43:15:54:59:70:ef:75:
         e5:ba:64:78:0a:ef:cc:5c:d3:48:d0:a9:d6:8a:8d:88:87:9b:
         b6:a9:27:23:51:3e:61:9a:ca:57:56:3c:68:fa:81:7f:89:7a:
         c7:c9:64:c1:28:2b:fe:a6:51:2c:7a:d8:6e:61:17:80:0a:69:
         55:54:f5:75:e7:4b:b7:59:2c:6f:6a:7b:c3:c1:41:50:8c:49:
         0f:5d:e6:fc:66:6c:db:e9:6a:28:12:0e:3f:68:35:01:a1:fb:
         43:7b:32:08:c4:bb:ee:10:a6:ac:98:84:d6:96:65:c5:ef:ef:
         ee:c8:bf:a4:d9:d5:ca:4f:2a:e9:72:5c:01:39:4c:17:64:19:
         05:73:43:de:b2:94:19:e6:d3:ba:be:15:ce:47:07:79:38:06:
         25:5a:88:d1:fb:f8:d9:cd:2f:1a:0d:e5:3d:61:aa:08:e5:54:
         0b:2f:d1:80:aa:d0:7b:3b:50:50:fb:51:64:c7:24:10:f4:ca:
         7f:e5:02:67:8e:28:94:69:1e:62:1e:4d:ad:00:4d:07:94:3c:
         c4:8f:8f:1f:45:a3:46:e2:e1:02:91:a1:1a:e6:88:75:f3:72:
         50:20:ea:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----