Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0c6e8b6f-327e-3bde-a78b-7c2b042f284a.roa
File:                     0c6e8b6f-327e-3bde-a78b-7c2b042f284a.roa (raw, json)
Hash identifier:          fCqBHqXsem3D8FlUTfMubxOrr5IyUnoqRDkVlhG+UDg=
Subject key identifier:   AF:1B:73:61:89:0B:39:19:05:7E:8A:75:EB:88:12:EA:52:D1:B2:4C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848B2622A6194E5BD9243937A40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0c6e8b6f-327e-3bde-a78b-7c2b042f284a.roa
Signing time:             Tue 28 Jan 2025 17:38:34 +0000
ROA not before:           Tue 28 Jan 2025 17:38:34 +0000
ROA not after:            Mon 28 Apr 2025 16:38:34 +0000
asID:                     33491
IP address blocks:        73.146.213.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b2:62:2a:61:94:e5:bd:92:43:93:7a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 28 17:38:34 2025 GMT
            Not After : Apr 28 16:38:34 2025 GMT
        Subject: CN=fcb960a1-c32b-46e9-a71f-bbc1ded1cbfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:49:70:f4:62:4c:55:5b:a2:59:14:49:e3:fe:
                    6b:d7:cc:79:df:43:b7:94:1c:32:aa:70:8b:f2:39:
                    a7:96:ca:47:95:dc:ef:59:ab:f5:a6:ca:a1:4b:24:
                    b8:bd:71:3c:dc:d0:a7:8c:85:3e:d6:36:0c:25:a0:
                    e0:dc:55:84:6c:98:0f:50:43:25:86:0a:6e:96:d4:
                    4f:1f:f4:00:bd:69:f6:8e:73:15:f1:1e:2c:15:fd:
                    8f:9a:60:18:c8:57:24:15:96:d3:d6:f4:96:80:62:
                    e8:85:cd:a0:c2:40:d3:83:b9:88:03:c2:88:4d:22:
                    e5:a5:13:dc:4a:fc:c0:84:07:e7:1a:4b:72:64:6d:
                    36:86:4b:b0:8b:d3:52:a1:d2:31:eb:7d:c5:7e:ef:
                    57:09:8b:81:ce:33:27:44:c7:95:b3:b8:62:a6:73:
                    f9:64:f2:9d:75:40:65:95:52:21:95:95:19:0c:0e:
                    30:fb:6f:df:ff:42:e3:2c:6c:13:0d:a1:d8:79:51:
                    2e:c0:91:79:ed:cd:d4:ba:28:1d:8a:12:d6:a5:ec:
                    aa:26:a9:e0:a5:08:47:0d:4a:fc:55:2f:9a:c9:bf:
                    f6:93:6d:a7:9f:45:fb:ff:5b:d6:89:ed:d1:e1:ec:
                    4c:f5:a6:59:d7:01:06:03:36:49:5f:aa:c6:cc:5a:
                    99:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:1B:73:61:89:0B:39:19:05:7E:8A:75:EB:88:12:EA:52:D1:B2:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0c6e8b6f-327e-3bde-a78b-7c2b042f284a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.146.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:3b:11:92:22:7d:cf:50:39:0b:d9:37:06:60:85:16:7c:4e:
         e5:00:dc:df:40:04:b6:b3:46:12:07:f4:0e:60:ec:52:a2:f4:
         b0:db:f1:18:95:4d:e5:79:08:e5:3c:50:e8:55:c5:5b:9d:cf:
         11:74:4b:0f:21:2b:c6:58:53:4c:95:02:bf:9c:9b:b3:1e:9f:
         02:d3:1f:ac:b6:f9:75:79:e8:94:35:4e:3c:22:29:a7:4a:87:
         43:16:9b:bf:66:14:3f:15:be:fa:7b:3b:af:44:b1:ca:b0:3a:
         b7:d1:be:a4:29:e6:c2:59:97:a3:35:d5:a5:22:4b:00:cb:9e:
         0e:b9:b3:9a:64:97:ad:e4:83:38:69:3a:2b:3b:3e:bf:3f:f0:
         1a:70:15:32:b9:60:d1:01:5c:25:8e:b9:a3:f6:ea:4f:b6:0d:
         21:14:b6:a5:b4:74:28:b8:81:83:88:1a:d9:93:35:13:a6:69:
         55:30:83:47:88:13:0b:95:cc:d0:29:85:4f:1b:4c:ae:39:ff:
         eb:7a:6f:bc:66:a7:c2:7d:4d:62:4c:e6:e6:02:3c:d7:b8:fc:
         41:a6:98:1b:94:87:11:02:97:2a:b3:32:ea:ff:d6:79:9a:9d:
         a6:0c:1e:12:27:97:6c:0c:1f:a6:94:b6:46:83:25:b9:f1:97:
         47:e2:27:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----