Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/45970f2f-806b-3e68-b87a-e249c1449ea0.roa
File:                     45970f2f-806b-3e68-b87a-e249c1449ea0.roa (raw, json)
Hash identifier:          /x0uADNcGYAGAsz9cse+d2Ha6afRQUSNu8LfUpUqh94=
Subject key identifier:   8E:69:57:A1:00:2C:3F:44:FC:9A:50:9C:07:70:F2:BC:65:C7:D3:16
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CAFADDAAE65F9AA3D73A480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/45970f2f-806b-3e68-b87a-e249c1449ea0.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33491
IP address blocks:        73.9.198.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:af:ad:da:ae:65:f9:aa:3d:73:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=838bd48d-d34f-46f4-a736-f20fd72a92f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:74:7b:71:26:61:1a:d6:b0:bf:ee:70:fc:92:
                    91:49:52:7e:fb:ed:a7:53:1a:d7:36:39:4d:52:2d:
                    fb:d1:15:2a:85:ab:49:ff:bc:aa:64:b5:3b:96:70:
                    50:95:70:8a:62:9c:3a:00:97:3f:f5:4f:2c:a6:b9:
                    46:a9:6f:ff:6d:b4:98:00:97:ed:4f:98:ec:d0:51:
                    5e:ca:55:9a:ca:2b:f2:40:03:d8:e4:3c:57:81:ba:
                    16:69:f4:63:51:2c:85:ce:6c:0b:05:69:01:21:e3:
                    e7:87:26:78:0f:5a:ef:34:6a:23:5e:30:5f:32:82:
                    05:a7:76:8d:6f:6a:65:d7:9c:9c:0b:ee:92:f9:2b:
                    a1:a8:cc:cc:81:22:39:9a:25:5e:b5:d9:7f:d7:4e:
                    f8:08:b4:a6:7a:e5:8e:f6:4e:d4:e4:cf:ea:00:96:
                    f3:6d:eb:6f:af:46:a6:03:b7:72:a1:61:28:8e:2f:
                    10:eb:d4:45:6b:94:4c:d1:c9:4e:66:fd:4b:a2:b7:
                    31:f7:ef:8a:95:51:a0:1d:22:ee:e0:aa:0a:0c:29:
                    fb:89:86:e7:78:41:af:76:8e:60:20:15:3b:c4:59:
                    e2:c8:46:66:31:f7:97:54:0b:bf:c9:99:64:21:35:
                    96:6a:78:b9:37:8e:68:65:33:fd:2f:04:5f:c7:aa:
                    3c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:69:57:A1:00:2C:3F:44:FC:9A:50:9C:07:70:F2:BC:65:C7:D3:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/45970f2f-806b-3e68-b87a-e249c1449ea0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.9.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:bb:97:68:88:a0:3a:b7:7b:53:e6:88:31:db:77:3e:e9:e3:
         ac:6a:e8:86:76:2f:23:d3:c4:f2:35:2c:d3:4e:31:cc:9f:05:
         b7:db:0b:71:51:d3:ed:7d:8a:65:ea:f5:74:3f:b8:be:fd:ce:
         ae:dc:ad:b1:5b:90:0e:21:ff:72:4d:62:00:ff:8f:53:4a:10:
         da:50:c4:2f:e4:d2:1f:b8:64:54:7c:11:25:1b:f7:ad:e2:c4:
         f8:20:32:42:2c:1a:68:71:fb:ed:d0:07:3e:88:35:1b:4a:31:
         bb:fb:45:42:6d:1a:0b:65:45:ff:47:44:61:cf:95:71:e7:ef:
         fb:ac:e9:94:2d:f9:01:b7:5f:27:71:63:38:14:ff:a9:8d:b1:
         34:5a:fb:c5:78:50:1b:b0:ee:97:2d:76:eb:5e:df:ab:33:c5:
         6c:44:cf:5e:60:dc:f9:ba:bb:bd:5d:8c:e6:01:28:68:d7:3f:
         00:8a:42:c5:f6:00:b0:a5:29:c4:a3:2c:cf:11:26:f5:ab:af:
         f4:24:dc:02:d1:f0:11:01:e1:f4:9c:5d:57:3c:b6:54:2a:b9:
         1a:e6:60:ab:4c:1b:b3:22:73:3d:e8:c8:82:ed:20:43:94:60:
         c8:55:1c:96:3d:18:0e:a0:e1:59:58:26:e6:41:fc:e2:a8:57:
         8e:4d:dc:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----