Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33e178b7-aabc-3b65-b98a-9f879c6e7f4c.roa
File:                     33e178b7-aabc-3b65-b98a-9f879c6e7f4c.roa (raw, json)
Hash identifier:          +GWM89JmEkcRv19Ylwy8YI7QOWw09/OxF0WLsKKk93w=
Subject key identifier:   6B:F4:D4:92:77:53:E8:1F:24:D0:D9:A7:5D:5D:AC:38:36:A0:89:9E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA5D667836D4595393EE3C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33e178b7-aabc-3b65-b98a-9f879c6e7f4c.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     22909
IP address blocks:        73.58.240.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a5:d6:67:83:6d:45:95:39:3e:e3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=1057b0cb-ae52-434a-8a26-39141103af55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:91:46:2a:3b:90:4e:09:85:d9:cd:07:ee:31:
                    2d:fb:3b:ef:df:d3:e6:ff:4a:fd:9c:47:af:bf:36:
                    54:c5:f4:e5:25:23:5c:c6:14:46:0c:f5:ed:48:8c:
                    e0:a4:39:4a:6a:4e:8c:15:5d:a6:ec:ad:3a:93:3c:
                    a8:9f:ff:41:c2:29:6c:60:47:77:58:b2:24:84:7b:
                    b3:8d:f3:c3:ca:f1:62:62:b5:1c:d5:65:f9:ff:fb:
                    3d:a3:e7:7a:49:8e:5a:52:62:16:00:06:1f:fb:8e:
                    a1:1b:6f:52:53:8a:2c:7f:4d:0d:89:7b:20:78:70:
                    32:8a:b3:ce:86:bf:50:f6:3a:23:ad:ce:44:24:33:
                    88:39:7c:09:46:97:f0:4c:2e:e2:61:9e:85:1b:5f:
                    b9:6e:79:66:fb:49:a2:c3:61:04:a3:99:cb:b9:23:
                    59:1b:6e:2b:40:2a:61:db:17:6c:d6:b5:4f:2b:b3:
                    05:37:01:ce:b6:9d:f6:12:47:db:a5:0b:9e:cb:44:
                    61:6a:bd:ec:93:f1:2d:79:0b:1e:03:7b:de:ab:ce:
                    63:c2:b7:d6:e5:c8:39:13:7f:fd:e5:b4:8c:cc:c0:
                    18:c4:22:44:2e:b5:f0:80:a6:5c:f3:c2:c9:ab:ae:
                    da:83:28:84:a4:90:c5:fb:b0:41:0b:19:96:25:b0:
                    a6:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:F4:D4:92:77:53:E8:1F:24:D0:D9:A7:5D:5D:AC:38:36:A0:89:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33e178b7-aabc-3b65-b98a-9f879c6e7f4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.58.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:df:bf:c5:a4:44:86:49:a7:f1:e3:57:13:9a:14:0c:76:5b:
         24:0b:3a:aa:90:8a:6a:01:ca:e6:15:3f:29:b0:b9:e2:51:9c:
         fc:4f:86:fb:90:ba:ba:13:bf:c1:b6:10:fd:2a:f7:05:5e:40:
         30:20:b1:cd:21:98:80:41:c2:41:fe:20:3c:39:f4:c7:64:21:
         c6:41:bd:2d:93:06:5d:36:de:75:19:b3:f5:de:1b:1a:a5:79:
         8a:b9:cb:fe:1f:cd:c3:74:c7:56:a0:6c:dc:9a:12:b6:7c:cb:
         44:e8:58:dc:86:f5:d9:4e:aa:8f:df:e0:9a:d3:39:70:ef:d0:
         de:b7:20:97:fc:79:f7:78:48:93:2a:ff:e3:7d:6f:e6:d3:7b:
         d3:5b:7f:2b:45:90:fb:3f:b6:3d:70:aa:92:43:63:04:a1:f8:
         8f:a8:b7:41:15:24:b4:21:0f:34:ad:f2:69:61:9e:29:73:58:
         c7:4a:4c:8e:41:f2:b9:ad:47:6c:3f:4e:40:ae:58:ed:7d:3e:
         ce:49:b1:aa:6c:bd:c9:b4:7d:fc:05:fd:4b:44:33:d8:a0:bc:
         44:54:d2:7d:6e:07:23:86:d1:e0:b5:11:4c:88:2b:60:f8:35:
         de:f0:cf:33:a7:89:c6:4c:7b:cd:86:c2:a2:3a:5d:4e:a6:05:
         d2:66:04:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----