Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6333e7ea-3f81-34a8-bf18-cb6d995403d1.roa
File:                     6333e7ea-3f81-34a8-bf18-cb6d995403d1.roa (raw, json)
Hash identifier:          yKQCyyQOfCNzjAargAgSh2qbepyC5Tl564g89wL6y20=
Subject key identifier:   4A:E0:83:9D:B7:0C:DD:9C:BA:81:29:80:DA:46:39:02:77:C6:95:2C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CAF844FB6D2C55DFC57D7D0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6333e7ea-3f81-34a8-bf18-cb6d995403d1.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33491
IP address blocks:        73.50.106.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:af:84:4f:b6:d2:c5:5d:fc:57:d7:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=8007b97d-7cfe-4254-8715-ea74f7d8ed76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:80:4c:d0:90:fa:11:9d:cb:64:db:e2:55:60:
                    7c:f4:68:43:41:5e:95:92:7b:16:93:ac:0e:b2:12:
                    52:0c:a4:8f:6c:15:70:1c:5e:25:6b:fe:ff:ab:10:
                    6d:fa:2f:79:09:91:a8:20:e3:6d:8b:52:5e:de:d8:
                    45:96:b0:e8:19:33:6e:bb:31:9b:b0:8c:7f:31:09:
                    c9:c0:44:ea:1d:12:5b:4a:1a:6c:fd:ae:62:de:d1:
                    85:9b:11:9b:cb:ba:a4:a5:a3:51:83:4b:ec:9d:5b:
                    a1:96:d4:88:ec:fb:a7:55:a1:2a:1f:56:c1:a3:bf:
                    41:7e:5e:bf:3c:18:c5:bd:08:bd:10:9f:7c:d0:4d:
                    66:2d:63:ba:f2:c9:c4:99:f1:e3:7f:af:8f:10:f9:
                    5e:58:10:f0:06:ee:c4:4d:bb:05:ce:26:74:db:c4:
                    a4:79:89:38:1d:8f:69:67:30:8a:26:ec:1c:1b:c0:
                    fb:56:7f:af:6a:49:da:f7:15:e9:5a:46:fe:0c:80:
                    ed:00:35:3c:dc:e5:df:3d:98:95:09:46:c9:dc:86:
                    9d:4a:54:0c:dd:e2:8f:14:33:c4:63:d8:3e:f1:69:
                    6f:0b:61:44:c8:1d:49:41:98:e7:fe:d6:6f:e6:f2:
                    a9:dd:3f:dd:75:85:74:dc:04:cb:21:23:40:d8:c9:
                    93:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:E0:83:9D:B7:0C:DD:9C:BA:81:29:80:DA:46:39:02:77:C6:95:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6333e7ea-3f81-34a8-bf18-cb6d995403d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.50.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:6f:52:0c:ed:f6:5c:56:f6:c3:cb:a5:14:79:d0:e8:03:27:
         cb:ba:7e:63:78:3f:ea:0b:f9:ed:55:aa:ed:38:43:57:ec:b2:
         a4:c8:c8:83:9b:e6:13:b5:3c:fd:da:04:66:b3:1d:2b:8a:09:
         99:91:3a:7e:9e:09:8b:45:d7:b4:af:b9:4c:28:18:49:86:32:
         39:ee:b3:34:76:1a:5e:92:5b:6e:6c:78:dc:a1:df:83:35:39:
         4f:bd:e1:de:47:4a:3f:e8:26:71:58:85:1c:c9:8c:28:85:5b:
         eb:99:31:01:8d:7e:bc:07:af:30:f7:02:95:53:18:15:f7:76:
         cc:75:e3:fe:0f:82:87:ca:10:ef:81:ec:9d:3d:45:72:1b:bf:
         2f:f0:40:6b:25:93:eb:8c:95:dc:56:73:6c:51:5c:81:01:2b:
         78:b4:55:34:3e:9d:71:1a:97:3a:56:34:3e:62:22:cc:1e:b6:
         5c:52:30:54:82:04:55:89:b1:6d:53:73:e7:a7:5d:b0:79:85:
         44:11:5c:e6:c7:7c:9f:05:84:5f:27:ea:de:3a:f8:74:25:fa:
         e4:38:f5:8e:69:ea:43:c9:59:6c:bd:ea:74:3c:32:bd:e0:ab:
         35:76:7f:f2:4d:07:3e:4c:0d:b6:7a:b4:b1:a4:19:cd:ed:59:
         7e:bd:ec:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----