Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0e4c6203-2db2-37c0-b047-e052e4face10.roa
File:                     0e4c6203-2db2-37c0-b047-e052e4face10.roa (raw, json)
Hash identifier:          aNAsuzwVIFMgdRfQKmZtgcx7Isai/nWaFidNW8aECXg=
Subject key identifier:   F4:61:A8:BC:90:9F:59:80:0E:2F:91:37:03:70:30:EA:2D:00:35:EC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA5FCA3AAC30F03EA43A7F0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0e4c6203-2db2-37c0-b047-e052e4face10.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     7016
IP address blocks:        73.236.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a5:fc:a3:aa:c3:0f:03:ea:43:a7:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=0a447300-b50f-4f12-825f-73dcb0d79042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b6:fe:da:a1:ab:bc:8f:ec:ec:5a:b9:d7:49:
                    00:d0:af:c6:e5:58:e9:ba:9b:7e:8b:af:52:b4:a8:
                    9a:73:b7:c3:1b:33:0e:38:94:f6:dc:b0:d2:94:99:
                    e5:09:44:38:54:cc:69:4e:ae:c6:53:4a:61:a4:b1:
                    8b:48:48:b5:55:c7:61:d7:01:f7:3b:08:71:5c:63:
                    19:33:ce:7e:00:86:14:0e:ef:84:9c:1c:50:5b:eb:
                    3c:12:d0:da:cc:58:20:23:f4:b4:72:82:89:b7:0c:
                    86:ea:50:ec:68:64:3d:73:3b:2f:43:49:3a:88:c3:
                    e2:86:8e:34:71:f7:97:15:89:7f:ed:7b:21:4d:a4:
                    3d:90:7a:7d:b0:3a:79:af:b7:6e:e1:a8:32:ea:43:
                    7e:8b:da:75:30:28:56:3a:e5:02:e2:21:c5:52:67:
                    99:4c:06:83:65:d8:b8:56:50:b3:c2:ce:3d:03:c8:
                    85:df:bd:04:38:3f:0f:a2:27:fb:af:80:86:71:69:
                    49:cb:1d:77:2f:30:f7:dd:78:c2:42:59:7b:b4:f0:
                    a2:fd:04:ad:80:96:3e:e3:9a:3f:dd:5a:65:3c:1e:
                    c2:ae:74:4e:36:e4:5d:0e:91:b2:87:39:8d:6a:e7:
                    29:0d:9d:30:92:43:95:e5:31:1d:60:d1:3b:8e:93:
                    59:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:61:A8:BC:90:9F:59:80:0E:2F:91:37:03:70:30:EA:2D:00:35:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0e4c6203-2db2-37c0-b047-e052e4face10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.236.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:b6:38:08:72:48:63:2d:bf:3d:ec:8e:b2:c0:02:63:d7:07:
         93:b8:04:6f:c6:2d:36:b1:48:0e:f4:6d:6d:7a:67:74:c7:51:
         cc:93:16:74:35:bf:8c:42:83:6a:1a:9b:d5:d7:f8:5b:53:b7:
         68:1f:bd:f2:e1:19:57:4a:b1:86:e8:5a:1f:8b:47:69:8d:c3:
         df:79:2b:f1:cd:0d:fe:95:1a:27:8a:a1:95:cd:80:db:e7:c5:
         5d:5e:68:de:5a:98:20:ee:b2:69:40:00:b0:a8:7e:f0:f8:53:
         70:0f:5b:9c:90:5d:21:3b:0c:a6:65:36:d3:02:f2:0b:75:be:
         c2:2c:f2:68:f2:04:26:1b:c4:6c:cf:70:1e:6f:0e:96:4f:9a:
         a1:8c:a4:7a:57:01:99:25:e4:6f:b1:9b:1c:ea:4a:3c:b9:fd:
         a4:53:2c:d3:b2:e3:f0:5e:5b:a7:1b:af:dc:aa:c8:40:43:c3:
         1b:e3:ee:ef:0a:22:63:28:a5:21:2b:fd:67:63:66:c4:05:18:
         fa:45:95:46:46:70:1f:2e:42:ac:06:ca:b3:19:79:b9:00:87:
         86:af:e9:29:dc:76:8b:10:cd:3a:c2:3f:86:91:07:2e:fd:34:
         de:d1:16:ae:5f:d7:08:9a:68:97:eb:bd:9c:26:da:49:0b:fa:
         19:f7:74:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----