Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/951ab196-8aac-37f7-a855-c04968525d52.roa
File:                     951ab196-8aac-37f7-a855-c04968525d52.roa (raw, json)
Hash identifier:          mvtD3rakjfQG3hGjHga0fyMgu6XpgqTimLjEVpBYxDM=
Subject key identifier:   83:FC:B7:EE:97:E5:A7:D5:43:B6:4A:BD:B5:48:DB:A9:A7:C8:62:BC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA688AB31A247AE2D798520
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/951ab196-8aac-37f7-a855-c04968525d52.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     13367
IP address blocks:        73.242.104.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a6:88:ab:31:a2:47:ae:2d:79:85:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=fa395d20-e552-4cea-b346-3a09c62df92a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f6:6b:0d:7f:38:e2:95:ba:7a:98:9a:cf:f9:
                    19:01:f5:f9:61:16:b0:97:cc:43:d8:64:87:4f:01:
                    7d:c9:db:88:40:03:c8:a1:aa:89:be:ea:9a:7b:0f:
                    0e:e1:0f:17:5d:a0:75:0e:5c:33:a3:6e:9b:ec:e5:
                    fc:46:47:d7:8c:55:12:4c:eb:d8:0d:54:67:2b:aa:
                    9a:af:0c:27:6d:c8:01:4a:ae:90:0a:cf:84:bb:0f:
                    dc:26:a9:7a:7a:63:71:82:84:3d:fe:ff:f8:52:88:
                    59:17:6a:fb:e1:2c:e7:7a:f9:73:dc:ac:42:69:1a:
                    24:ca:38:c3:00:0e:b4:40:d3:ea:bd:a8:15:82:c8:
                    57:c5:cb:35:69:94:bd:88:b8:f9:4a:28:ac:42:14:
                    d1:5c:7a:a5:8a:91:24:f5:85:bf:83:95:e9:e6:90:
                    5a:31:d0:68:9f:26:98:80:a2:9d:9b:b8:04:ef:b0:
                    9f:a7:30:52:4c:6e:04:3d:8b:c1:e8:56:93:3a:a8:
                    c4:a9:f7:f3:9f:c7:0d:91:c5:89:57:3f:81:1e:9a:
                    1c:2c:af:2b:3f:af:46:14:38:e9:4f:9d:01:91:91:
                    26:45:6c:f6:f1:0a:c1:54:79:51:19:41:78:42:37:
                    b8:0a:7b:60:1b:5a:67:9f:51:c2:a8:43:db:41:9d:
                    22:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:FC:B7:EE:97:E5:A7:D5:43:B6:4A:BD:B5:48:DB:A9:A7:C8:62:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/951ab196-8aac-37f7-a855-c04968525d52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.242.104.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:de:38:96:2f:dd:2c:7e:48:31:4d:ef:e6:92:4a:5f:fa:fa:
         f3:e8:45:fd:4a:b7:cb:e9:f2:41:3a:cf:5c:98:66:7b:95:e0:
         3a:e3:fe:a2:39:74:5b:67:03:2f:97:1a:19:04:ea:1e:d0:aa:
         8c:9f:5b:6d:e4:69:30:25:6c:fc:dd:66:a2:ba:aa:f5:48:61:
         1f:70:2f:c3:70:56:96:d0:58:da:7b:22:ee:b7:d4:74:1e:6f:
         45:51:b3:b3:a4:7c:cd:bd:23:97:b5:5b:26:c0:cc:b1:66:51:
         85:44:c2:ad:f0:12:33:81:71:9c:e3:1b:9d:87:b9:b6:43:dc:
         66:37:84:36:0b:a7:76:5f:12:8f:9f:95:6d:c4:02:d0:5d:5d:
         fd:36:fb:6a:8c:d1:fd:12:28:7e:a6:ed:13:0e:c7:66:af:2b:
         5e:66:c1:58:75:e2:2f:6c:00:11:45:52:fc:d7:71:60:7f:af:
         4f:8a:43:c9:23:b7:9f:a0:86:da:6b:a2:6f:37:0f:74:4e:df:
         d0:1c:e1:1a:f6:12:e3:4f:b1:e1:a0:f5:0b:63:12:24:2d:af:
         8d:fe:31:8c:b2:44:00:85:e1:9e:3e:63:f5:f9:01:1f:8c:52:
         26:33:9f:19:ad:f3:fc:e0:2e:ee:5d:47:a3:d0:68:97:93:f3:
         4c:66:ec:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----