Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7c3c2d13-c490-369b-bf2f-25ac7abf9e57.roa
File:                     7c3c2d13-c490-369b-bf2f-25ac7abf9e57.roa (raw, json)
Hash identifier:          +1DZKbIPgJaD01seBP1sD5m2zwxSPIJChdJMESWwOeE=
Subject key identifier:   CA:37:64:39:1C:F4:DA:37:42:95:35:CC:47:2C:AE:7E:4E:7F:BA:9E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F876BAF7F6C967D7BF7000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7c3c2d13-c490-369b-bf2f-25ac7abf9e57.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     7015
IP address blocks:        73.142.194.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f8:76:ba:f7:f6:c9:67:d7:bf:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=a3232234-b030-4b7d-87dc-a0aba7cc0f02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:0a:09:b4:84:6a:b3:7b:27:88:96:03:8c:ae:
                    67:af:93:b2:28:d7:f4:89:8e:c9:c9:e0:d4:fc:4d:
                    38:62:f0:cb:39:39:22:d6:5d:b1:c5:08:60:3d:eb:
                    ce:b7:26:09:49:69:95:22:51:ad:84:5d:41:a9:55:
                    f4:83:f6:36:d2:75:d1:f1:3f:d4:ac:59:09:b8:f8:
                    71:bc:68:cc:33:1a:47:86:77:77:29:08:2c:46:43:
                    8e:9c:03:86:5d:73:11:43:b4:77:5b:49:29:23:03:
                    08:05:34:32:d7:c0:7e:34:14:9c:06:f4:85:1d:cf:
                    0c:83:75:f5:6f:a0:40:43:7b:04:a0:cc:99:d9:85:
                    8b:03:ef:37:50:62:71:1e:49:81:d9:af:7b:6f:de:
                    7e:5f:55:ea:e6:32:8e:1b:22:ca:a4:6a:12:80:ae:
                    12:ed:ab:77:7e:0a:54:81:6d:a7:51:c0:27:f8:c6:
                    2d:06:6f:19:f4:73:47:57:c6:ce:07:32:59:46:38:
                    95:7e:52:71:08:10:97:26:03:46:bb:79:59:1d:44:
                    df:22:bb:fb:4e:c1:9c:7a:a7:a7:21:68:fc:37:d2:
                    4a:20:96:cd:d9:18:eb:ba:32:db:73:3b:cb:a5:92:
                    4a:ff:b8:4e:79:6c:fb:14:0e:9a:1c:ca:b3:2b:2f:
                    c1:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:37:64:39:1C:F4:DA:37:42:95:35:CC:47:2C:AE:7E:4E:7F:BA:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7c3c2d13-c490-369b-bf2f-25ac7abf9e57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.142.194.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:6c:f5:a2:4b:65:13:04:fb:ad:61:6b:54:6a:de:55:7f:ba:
         5f:52:9e:8d:81:de:92:2e:ae:49:ad:13:8a:46:56:88:60:a4:
         37:68:30:00:76:4a:8a:71:a6:66:64:fb:d5:91:01:3f:45:cc:
         94:c6:17:74:a4:03:05:f2:dd:78:f2:b8:1e:57:d4:ef:6d:c5:
         97:83:3b:2c:93:26:92:ae:74:a7:b3:70:b4:32:14:7a:66:ed:
         28:21:9a:66:8e:26:86:d3:c7:ab:fd:26:da:ed:c0:c9:23:1b:
         55:cd:f3:ab:68:f9:3b:23:33:59:28:8b:05:a9:dc:a7:e3:1f:
         9c:84:5d:e1:98:58:f4:ef:0a:2f:62:4b:b2:59:88:7d:4f:4a:
         9d:0e:4a:23:be:13:b1:f9:76:d0:8f:8c:c6:eb:e0:69:65:dc:
         04:72:e4:cb:cc:fa:53:f9:c3:a8:ee:6c:87:74:8b:17:1b:3e:
         dd:80:61:0d:bb:00:48:6f:6c:12:e0:7c:10:12:11:1e:44:08:
         c3:60:31:d5:d0:36:97:98:f2:0e:46:72:26:f1:76:cf:b9:04:
         cf:04:b6:8c:f8:09:bd:91:5e:32:ad:40:bd:41:80:67:e2:7d:
         93:3f:8c:c0:6e:7e:0e:c5:78:99:7e:42:df:42:62:2f:e4:46:
         67:10:64:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----