Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/488ae695-7c8b-334e-b96a-71393c057792.roa
File:                     488ae695-7c8b-334e-b96a-71393c057792.roa (raw, json)
Hash identifier:          ozhja8Mqv5TjJ5sSxcEbE7jmwu2UGVFAq6bwWePCW48=
Subject key identifier:   F9:D0:9C:F7:CF:B5:96:91:DF:D2:B3:79:EE:35:51:5C:70:9D:63:0A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CAED6247C20CFD8D326D980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/488ae695-7c8b-334e-b96a-71393c057792.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33659
IP address blocks:        73.160.156.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:ae:d6:24:7c:20:cf:d8:d3:26:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=f988652c-da39-460e-a655-470e45aa4bd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e5:f2:be:ae:28:c1:8f:7e:97:37:ee:7c:f4:
                    0a:4b:46:34:43:ec:a1:25:65:61:14:9f:66:7a:f3:
                    cf:15:05:74:91:06:90:32:9a:3a:09:f9:ca:ab:08:
                    78:5b:8b:6c:fb:d4:e9:fb:fb:9b:88:53:a6:25:7e:
                    7c:20:50:a0:43:69:cf:37:5f:95:37:62:3c:62:76:
                    f6:0b:ef:de:f7:ad:6c:ba:e2:62:97:f5:e7:d1:99:
                    2d:33:2c:00:cf:d6:5a:bf:c4:75:26:bd:e2:24:af:
                    21:c6:5e:4f:68:fa:70:55:03:fa:89:79:d5:fb:f6:
                    2c:5a:76:57:b7:93:8f:18:30:80:8e:db:c0:9e:cd:
                    fe:b5:f6:b2:4a:ab:a2:55:4d:92:85:10:6c:71:a2:
                    8e:1d:2e:a7:60:4b:27:92:f0:40:9c:3e:ff:0e:7a:
                    eb:54:d6:10:62:97:b5:df:c3:ac:a7:f5:52:37:08:
                    24:25:40:e4:c3:73:19:7c:09:a0:a7:f4:77:c2:d8:
                    60:c3:50:5b:f3:bf:ac:14:6b:02:ad:e3:33:3f:d9:
                    f1:4b:cb:99:4c:26:21:81:2d:04:5d:a8:f6:82:69:
                    c7:dc:1b:f8:c1:67:9b:f2:8e:5e:f7:1a:47:4b:29:
                    b0:31:5a:97:8f:a5:b8:16:6f:0e:8e:9d:54:46:96:
                    b7:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:D0:9C:F7:CF:B5:96:91:DF:D2:B3:79:EE:35:51:5C:70:9D:63:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/488ae695-7c8b-334e-b96a-71393c057792.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.160.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:bb:53:82:ef:e4:38:31:84:70:d9:87:e7:41:52:bd:0b:d1:
         24:52:c5:83:d7:11:40:eb:14:11:80:63:d7:0d:6e:36:3f:d3:
         0b:fa:3c:e0:e5:ab:d7:33:00:9b:a6:58:31:07:b5:e3:5b:d1:
         fa:53:2d:6d:b0:bf:a5:e5:6f:31:90:80:6d:22:9e:93:77:b1:
         87:dd:9f:e2:8a:65:c8:f1:df:37:73:cb:7d:1d:44:89:fa:02:
         3d:10:b5:a2:e0:24:f3:97:a6:ad:af:a0:26:ca:6a:1f:d3:37:
         5c:32:48:bb:31:ec:68:0e:85:88:fe:d8:f3:15:17:b2:1f:2a:
         85:f8:b4:e3:2e:2c:db:bd:a4:84:2e:32:f9:11:3d:b1:f1:cd:
         af:d4:4a:d9:81:51:ee:fc:df:f7:67:26:68:d4:2e:36:27:75:
         7c:ba:8c:47:7e:55:5c:96:c9:4f:6b:86:6a:78:39:b9:84:60:
         23:61:c0:0f:82:af:b6:e6:35:9d:3e:45:7a:d2:11:84:63:91:
         e4:67:5a:b6:ad:d9:d7:91:3f:cf:b5:34:45:cf:7f:ae:c6:0a:
         32:46:33:32:e6:9a:d0:73:5a:60:31:9f:3f:64:34:fa:c4:31:
         63:cf:e3:ea:6e:48:ac:df:d9:5d:31:e3:7e:d5:87:f0:4c:24:
         50:82:49:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----