Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9ba59259-5b6c-3e66-bf9f-7682236a67e2.roa
File:                     9ba59259-5b6c-3e66-bf9f-7682236a67e2.roa (raw, json)
Hash identifier:          1Tux/J3jkglgq34kQApGCw61mrjQ9tBoCLPeE108NIE=
Subject key identifier:   69:DD:43:C8:9C:A3:21:D6:33:BA:12:63:6F:1A:06:B8:F0:3E:3A:D6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA53B5FB93BA0441EEE2DB8
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9ba59259-5b6c-3e66-bf9f-7682236a67e2.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     13367
IP address blocks:        73.164.48.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a5:3b:5f:b9:3b:a0:44:1e:ee:2d:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=9829b280-f812-4142-8013-e44d2d242fcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:99:b9:85:d2:80:7a:a8:fd:55:42:f4:fc:d3:
                    28:cd:07:0a:9a:c9:00:52:b8:97:96:6c:ac:a4:22:
                    8a:a3:f1:88:d9:0b:88:4f:39:2b:9e:37:68:31:f3:
                    e9:2b:23:d6:f8:b1:70:b0:6e:5a:59:85:a6:e7:54:
                    fd:51:b5:44:56:18:8d:b3:60:2c:0e:54:03:a8:17:
                    f6:73:e9:11:9c:23:db:86:a4:be:89:42:3e:20:ac:
                    b6:37:3f:2f:53:ec:2a:6f:80:60:8b:4c:b8:6f:cb:
                    71:a8:1c:85:4b:c2:5e:bb:2e:c6:86:50:99:ae:c5:
                    49:9d:27:5e:24:59:43:86:ba:3b:dc:42:c1:4c:8b:
                    53:42:1f:2c:e1:de:2d:4c:be:78:fc:4a:68:95:55:
                    99:eb:a5:f8:84:d3:fb:44:73:6b:b5:6c:93:f3:b1:
                    bc:de:c0:90:b1:45:2a:aa:27:d0:dd:6f:b3:41:a4:
                    39:d8:08:1f:85:f5:50:68:51:2b:34:db:00:15:57:
                    f5:0c:29:eb:95:6e:cd:85:15:31:aa:4c:3c:f1:2c:
                    1f:7c:fa:77:12:55:9b:92:f2:db:13:96:1c:e6:44:
                    37:5e:73:42:9c:6a:4e:19:a3:7e:53:91:31:40:77:
                    fa:b3:80:5d:3b:b5:e4:b5:2b:e1:f8:e1:d7:69:36:
                    3d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:DD:43:C8:9C:A3:21:D6:33:BA:12:63:6F:1A:06:B8:F0:3E:3A:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9ba59259-5b6c-3e66-bf9f-7682236a67e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.164.48.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:de:f1:b8:8a:49:da:74:36:a2:8c:23:d4:41:15:8c:9c:22:
         53:01:5d:29:c8:ae:f4:d8:6c:d6:60:06:ef:b1:90:d0:5b:de:
         fa:4b:ba:ac:83:a8:76:90:ed:2e:23:40:69:5e:ac:3b:ba:ea:
         06:fb:b1:a0:8f:08:af:50:72:ed:d0:6a:99:15:97:0f:24:07:
         04:70:9b:19:61:a2:d3:94:ee:b4:90:25:e6:9a:a0:96:75:a1:
         60:ed:51:60:50:1e:06:11:5c:ec:ab:8c:ac:89:c3:db:20:88:
         04:13:70:19:11:fa:c4:3e:b4:cf:d5:5e:b3:79:c5:da:37:af:
         76:86:31:e4:93:72:c9:54:8b:1c:65:af:2f:a0:c9:92:82:bf:
         df:06:c3:bc:a8:b4:d0:39:db:88:e2:e1:af:7e:5d:a2:9e:c0:
         b8:25:71:a4:ac:51:75:2e:33:63:6c:e6:9a:50:70:70:3e:50:
         8d:68:87:1a:0b:d2:18:09:3d:7c:f7:91:45:2a:b7:cf:2b:4a:
         23:2f:67:46:56:36:21:26:64:e2:a9:5f:f2:b0:30:f1:3e:01:
         01:42:6e:65:cf:a4:85:b4:cb:84:0b:52:57:b9:89:1f:e8:04:
         9c:eb:42:c8:c7:4c:1f:25:1f:08:08:78:bf:10:51:e9:f8:aa:
         44:9a:dc:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----