Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/806c85fa-bb87-3d8a-b645-3fb422217fad.roa
File:                     806c85fa-bb87-3d8a-b645-3fb422217fad.roa (raw, json)
Hash identifier:          YUi5cu80ofYlcLd4LF0yYr3d0HgkY5mG72fosAZrDuA=
Subject key identifier:   62:04:A5:95:8B:5E:AA:61:0E:E2:6C:33:D3:4E:55:83:7B:3F:23:EF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CB0A5EA9629AC9CB89F2800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/806c85fa-bb87-3d8a-b645-3fb422217fad.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33287
IP address blocks:        73.188.86.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b0:a5:ea:96:29:ac:9c:b8:9f:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=29d8beb9-91ea-496a-98e0-80591080b95d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:1d:d0:a8:5e:7e:04:d6:f1:f5:69:e5:1e:ce:
                    32:0f:63:8f:51:13:96:ba:7f:fc:ed:a7:52:7f:ab:
                    0e:48:6d:75:87:36:4a:52:b8:5e:c7:81:d7:0d:a0:
                    47:a4:59:0b:72:76:e2:bd:23:f1:d2:59:4f:72:df:
                    81:9e:67:37:54:3a:5d:8b:4e:79:24:40:d7:e2:d9:
                    0c:bf:cb:ec:93:75:bc:7c:0e:94:62:a6:42:33:e0:
                    f2:35:84:36:7b:64:ca:f0:13:8f:e7:17:d2:2b:63:
                    0f:79:59:44:d3:f0:0a:9b:9b:83:fc:2e:5f:ac:db:
                    5b:63:18:dd:f0:78:13:27:de:b5:fa:ef:33:ba:da:
                    37:16:53:27:d2:1a:cd:19:8c:02:d4:a1:25:ef:60:
                    07:08:5f:ab:d7:18:1f:4f:2b:9c:a4:15:59:a0:86:
                    23:83:b2:c1:41:9c:bf:a9:52:4d:5f:f3:25:34:e0:
                    7d:d7:65:e6:e1:10:0a:96:c6:00:5d:0c:42:d2:61:
                    35:23:87:78:81:64:78:f9:09:60:94:88:c0:b2:f4:
                    13:24:c2:46:05:c4:ff:23:42:e3:0b:8b:b1:b7:d0:
                    99:3b:f7:3b:ba:d0:4a:e5:36:1b:bc:3d:2b:b9:9b:
                    9a:73:6e:50:eb:00:ff:8d:b0:06:00:f3:22:a8:07:
                    18:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:04:A5:95:8B:5E:AA:61:0E:E2:6C:33:D3:4E:55:83:7B:3F:23:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/806c85fa-bb87-3d8a-b645-3fb422217fad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.188.86.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:fe:b3:1b:d6:92:af:61:44:89:5e:fd:05:29:dd:39:6f:3a:
         8e:c6:37:d8:0c:91:84:c1:6a:8e:e1:d7:af:db:24:08:3b:f5:
         97:fc:2c:66:f1:fa:d3:52:a2:1f:0b:34:a0:e7:60:74:38:c7:
         6a:8a:a2:5f:5e:9f:26:37:29:f5:78:e3:a7:a9:eb:e6:ed:24:
         0f:6a:e4:50:ac:09:02:09:5e:ab:d8:26:32:a8:13:b0:08:db:
         97:61:7e:99:8e:6b:75:29:6b:48:9b:0d:ab:d5:65:8d:d4:c4:
         58:40:07:ef:ce:4e:40:cb:2c:88:ef:74:4d:91:83:f2:c8:97:
         d3:93:42:e5:72:27:6a:72:da:2e:42:3a:4b:84:f3:5a:52:5c:
         37:c9:b9:c5:e9:20:6b:93:f1:04:e5:d0:28:bb:c3:77:0a:69:
         4a:c1:6d:d1:be:60:7e:e0:86:f8:25:07:30:0e:8f:d0:ba:98:
         70:71:a2:17:57:92:c5:7d:a1:9e:39:ad:0a:32:cd:97:d8:0b:
         c9:c1:f3:58:97:ec:4c:ef:bb:fb:63:46:97:49:aa:ef:7f:27:
         dc:82:e2:0b:99:ed:f6:93:a6:c5:25:99:c6:59:ea:2c:0a:67:
         1e:1d:bf:2a:10:45:bf:5f:2c:80:00:d8:2c:2d:98:a6:08:12:
         92:09:28:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----