Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/04b8f073-802c-3694-abb5-fa11a95bca8a.roa
File:                     04b8f073-802c-3694-abb5-fa11a95bca8a.roa (raw, json)
Hash identifier:          u4wc4WLOl+Grlhsz7ASsiFS3FhepczxsPOhWSli4VI8=
Subject key identifier:   66:FE:D2:BB:A3:BB:04:26:56:69:20:D5:9C:C6:B0:D6:24:8B:7B:65
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA53941214D9B020EB63080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/04b8f073-802c-3694-abb5-fa11a95bca8a.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     13367
IP address blocks:        73.94.28.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a5:39:41:21:4d:9b:02:0e:b6:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=34b9593b-5cf5-43ba-a2d3-7e32c925ad9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:27:e4:fd:89:9b:8f:c5:01:24:e0:64:ce:6c:
                    52:64:2f:83:1e:76:75:df:19:9e:c9:b5:6e:6e:2b:
                    f3:e3:c0:0b:0e:09:c1:12:e8:69:39:c0:ce:b4:57:
                    e9:14:1b:21:ae:14:b5:92:6b:0a:73:15:88:9c:67:
                    cc:f2:5d:92:f1:05:3b:b9:03:b9:05:f9:d6:4d:78:
                    ae:db:52:78:7e:f6:51:4f:27:76:7c:14:68:a4:c4:
                    67:c5:73:30:13:5a:e9:14:33:c9:da:4a:67:2b:52:
                    65:f5:b4:b3:77:a6:8c:b9:5b:0a:18:71:fa:7b:a3:
                    87:27:ff:1d:10:3c:a3:b5:d2:a5:8b:85:da:b5:19:
                    6d:d1:74:16:da:f7:03:be:c9:57:89:b2:de:92:8d:
                    b8:fa:41:2f:ba:3f:62:ae:06:21:bb:7e:90:e1:e5:
                    1a:fb:ce:c9:8a:42:66:e9:ef:e3:a4:28:aa:74:c9:
                    d8:23:83:4b:0b:62:86:58:81:0b:41:9b:c5:2d:fa:
                    76:72:3e:87:c1:9c:5f:25:a2:33:71:16:49:b9:49:
                    23:f1:31:28:d7:a0:ec:72:24:05:ff:b8:69:df:46:
                    eb:5c:4c:25:41:71:f0:53:61:21:a3:a5:8c:e8:ad:
                    b6:a6:e5:dd:70:aa:be:ae:1e:c1:6b:37:81:d9:66:
                    cb:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:FE:D2:BB:A3:BB:04:26:56:69:20:D5:9C:C6:B0:D6:24:8B:7B:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/04b8f073-802c-3694-abb5-fa11a95bca8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.94.28.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:70:68:b3:79:42:4c:15:50:18:86:44:d9:6b:86:c1:7b:db:
         cd:ce:80:8b:bc:a7:3a:24:cc:73:b7:81:c3:8d:cb:30:95:d0:
         87:8c:ec:a3:03:97:f4:e1:4f:e3:0a:6f:aa:3f:d6:f6:e8:4b:
         9c:31:3b:a7:1f:3d:1c:fb:0f:20:da:eb:2f:04:fe:46:19:d6:
         e2:e0:79:89:84:8c:e9:7d:6d:62:f1:b7:6d:74:d3:86:cc:8d:
         08:ad:fa:9d:8b:25:4e:80:fb:c2:56:7c:30:4b:96:bc:3d:31:
         e2:8e:fd:f4:eb:94:a8:88:d4:52:57:5d:eb:f1:b7:50:56:8e:
         93:cd:0f:80:65:a6:74:d7:21:7a:e5:89:4a:1d:f2:5d:be:0d:
         ee:8f:71:36:ca:a8:17:de:52:22:db:dc:db:68:13:4d:10:a6:
         8e:79:ca:11:0c:0d:0a:7e:af:b7:b9:8c:14:26:76:0d:8a:1f:
         1a:f1:36:44:18:9f:f4:33:ec:cc:ca:ce:57:b2:5b:94:e0:f5:
         f7:0a:f4:fb:55:8e:19:60:b2:6d:b3:9a:42:d1:72:3f:80:f3:
         93:ac:ca:77:be:0e:46:7c:08:da:93:f0:23:0a:c1:82:79:01:
         5a:ff:1f:37:53:72:1e:0c:a0:6a:95:c5:14:12:e4:90:44:30:
         cf:3a:9a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----