Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/85cbb8d9-99f7-391a-a7b4-53d3366097b3.roa
File:                     85cbb8d9-99f7-391a-a7b4-53d3366097b3.roa (raw, json)
Hash identifier:          7rtFjugphx33bRjBpT8AvyVpRLdPsfUWMg302ufmrdc=
Subject key identifier:   03:B8:81:5B:85:13:ED:92:EC:B6:69:3C:AB:61:A1:19:54:6A:1C:AD
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA683267C3353D5BBFE5240
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/85cbb8d9-99f7-391a-a7b4-53d3366097b3.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     13367
IP address blocks:        73.65.124.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a6:83:26:7c:33:53:d5:bb:fe:52:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=aee96d4a-69b3-4db3-9428-74c6fd522012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:87:54:7a:db:db:32:e6:6d:2e:5a:81:94:00:
                    b8:56:08:0e:6a:a2:a3:ca:1b:e3:23:fa:45:70:13:
                    5b:97:3c:d8:c8:8b:a2:31:ae:d8:17:ae:85:ee:a0:
                    18:d4:f9:ca:81:54:26:0e:ce:c2:93:92:ae:03:92:
                    53:82:d3:38:42:47:0a:2a:40:93:4e:36:26:9d:a7:
                    73:f8:8f:4a:24:ba:1c:27:11:ca:0c:bf:1a:d4:a1:
                    69:6f:a7:2f:9f:54:25:26:b8:47:f7:61:1c:f4:02:
                    8f:3f:f0:f5:ec:c5:98:41:33:d7:d2:1e:d5:1b:18:
                    86:79:c4:87:82:56:5f:d7:b3:5b:0e:1c:30:f2:06:
                    d0:b9:f2:f3:4a:a7:46:d9:81:4e:74:3b:52:74:fc:
                    21:8a:82:cf:2a:ff:06:90:f7:e2:62:19:07:62:c8:
                    4a:7c:6b:92:c0:d2:eb:24:d6:20:df:c1:c8:a7:22:
                    6a:62:8f:97:a7:0e:32:dc:43:0b:5a:79:03:04:b1:
                    08:ee:52:78:dd:aa:1c:ab:03:0b:83:93:f1:5e:ce:
                    f6:ad:e4:7a:a0:b3:69:dd:42:d5:cb:23:c8:52:73:
                    00:1f:d4:6b:2d:c5:01:73:8a:7f:a7:8d:e9:b4:9e:
                    93:35:1e:37:27:58:89:d0:fe:01:c5:b5:f3:e8:3b:
                    f0:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:B8:81:5B:85:13:ED:92:EC:B6:69:3C:AB:61:A1:19:54:6A:1C:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/85cbb8d9-99f7-391a-a7b4-53d3366097b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.65.124.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:b8:7d:71:22:4f:b9:93:52:77:b0:5c:d5:e4:22:0a:4d:f8:
         0e:3a:0b:d2:df:7b:f0:48:ab:da:68:e9:aa:3d:69:78:4c:77:
         2f:e5:53:ce:12:61:30:e1:43:78:f2:c9:64:07:3f:ea:2d:29:
         d5:b2:8e:b9:58:ae:fb:ec:e1:74:7f:a5:de:b9:c8:da:51:d4:
         8c:5d:5a:c0:c0:16:05:a3:eb:9f:ad:c1:c8:96:64:eb:19:d7:
         99:c2:fc:01:56:ae:0b:9b:17:78:2a:71:ea:9d:ce:39:a7:ec:
         46:79:6a:6b:d7:74:27:70:e3:26:d9:03:e7:73:45:16:ca:2c:
         99:60:36:c2:4f:4c:7c:6d:2c:13:f3:e6:b5:9e:a0:05:d4:bc:
         a0:2e:66:88:54:93:ca:24:b6:d4:89:d2:8c:92:9e:3e:f5:89:
         b4:1b:d5:ee:57:f6:12:cb:85:58:b5:a7:cf:c2:a0:98:bf:0d:
         8e:17:44:fe:b7:a5:42:18:0e:87:ad:68:52:42:cb:33:8d:d5:
         d8:ab:07:71:9b:93:23:ab:51:21:f8:06:48:1c:0b:0b:f1:91:
         cf:2d:84:a0:d2:71:43:eb:7b:24:3d:b6:a6:b7:54:aa:c6:21:
         55:18:33:fb:02:95:88:d1:b4:98:31:e3:af:3d:c9:65:3b:30:
         3a:3e:6d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----