Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9d8fbc9f-d95d-392b-91c1-241e1013477b.roa
File:                     9d8fbc9f-d95d-392b-91c1-241e1013477b.roa (raw, json)
Hash identifier:          FWHEYCSiLwdl1yYWNz2LmO/xH5y/yGdGLWcUmkZqk1c=
Subject key identifier:   4E:B9:0F:80:A5:04:E4:90:7A:6C:7D:9D:15:F7:A5:7B:EA:F8:81:83
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848B26343FCE072C8C9096FB9A0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9d8fbc9f-d95d-392b-91c1-241e1013477b.roa
Signing time:             Tue 28 Jan 2025 17:40:47 +0000
ROA not before:           Tue 28 Jan 2025 17:40:47 +0000
ROA not after:            Mon 28 Apr 2025 16:40:47 +0000
asID:                     33491
IP address blocks:        73.36.92.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b2:63:43:fc:e0:72:c8:c9:09:6f:b9:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 28 17:40:47 2025 GMT
            Not After : Apr 28 16:40:47 2025 GMT
        Subject: CN=194ef0f3-9afc-4b77-8928-c54e37ad4f09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:93:70:60:76:0e:f6:38:a7:a3:4f:9c:dd:1e:
                    98:30:8d:28:28:07:a1:d0:43:32:3a:ba:b1:30:37:
                    c6:3c:4e:8e:d4:77:37:81:36:c4:2a:ea:4c:57:42:
                    b8:fb:b5:8b:82:52:75:85:49:c9:8b:28:d7:62:02:
                    42:0a:0f:be:5b:af:96:29:d6:a3:0b:af:73:b1:24:
                    bc:63:dd:eb:ad:86:60:cb:3c:7d:5c:d1:a8:2f:eb:
                    9c:f3:0c:e4:ff:4f:2b:95:79:cb:3b:11:22:5c:3a:
                    b3:30:1c:c3:cc:42:ad:e9:4a:6e:7e:0f:16:0e:25:
                    65:67:63:a0:f4:f6:c1:b6:30:42:b2:90:b0:4e:35:
                    6e:5b:8b:2f:13:a4:e6:fe:79:20:72:e9:b9:ad:7b:
                    11:b9:d8:dd:22:9e:20:53:07:c0:68:a9:30:74:6a:
                    7d:a7:46:e5:19:55:0c:60:0f:52:f5:3d:db:1a:33:
                    d9:6d:14:40:e1:f6:45:7c:22:5c:a5:66:05:ee:bb:
                    66:3f:27:f7:ba:fc:b9:9b:f6:0b:9c:22:37:0d:66:
                    16:b3:4d:d0:7e:8c:29:d4:36:52:41:51:6d:f2:2d:
                    dc:95:f6:6f:8d:57:ef:7b:6a:14:2c:59:11:36:eb:
                    c6:36:4e:2b:90:7b:42:d0:2d:53:7b:50:d3:1d:df:
                    96:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:B9:0F:80:A5:04:E4:90:7A:6C:7D:9D:15:F7:A5:7B:EA:F8:81:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9d8fbc9f-d95d-392b-91c1-241e1013477b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.36.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cc:36:08:90:7d:33:58:d5:15:99:bf:5a:1e:ee:c1:98:76:5d:
         a1:30:3c:99:90:f0:7d:4b:0b:03:04:14:0d:b9:8d:ec:a6:f9:
         ff:9e:3d:0c:e5:3e:06:50:25:87:f0:d0:f6:2e:b1:b3:97:7b:
         e5:f0:24:0c:43:2c:6e:75:96:c1:b1:87:a3:b0:ca:02:1e:71:
         1a:90:0f:ac:36:38:53:27:d7:06:00:1a:7f:1f:ad:95:e8:a2:
         c0:d4:88:e9:25:8d:9f:b4:c7:54:56:68:ab:0d:f8:96:cc:eb:
         12:66:95:51:b4:3e:f7:59:67:cb:cd:b5:af:b3:57:24:f2:dd:
         96:ee:82:48:4d:e5:41:cc:38:95:00:a3:fb:fc:1f:0a:76:1c:
         72:b1:93:5e:6f:ee:ec:1e:e1:0c:e1:68:eb:bc:21:52:29:b4:
         a9:a4:9f:ce:40:10:c7:8c:5e:7f:8f:e1:a4:01:fb:82:fa:92:
         97:d9:c5:d0:26:a5:f5:66:ed:42:f2:61:1c:c7:27:59:5a:0d:
         e5:51:37:28:7f:dc:c9:df:66:c9:4c:2a:a5:b4:be:92:a4:f6:
         c2:f9:49:74:88:de:a6:e7:54:d2:a2:c6:e2:77:06:a1:30:2e:
         b6:f8:18:9a:e0:d6:ee:9b:65:00:31:ed:6b:d3:01:26:a0:f4:
         f1:ba:ab:84
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiyY0P84HLIyQlvuaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDEyODE3NDA0N1oXDTI1MDQyODE2NDA0N1owLzEtMCsGA1UEAxMk
MTk0ZWYwZjMtOWFmYy00Yjc3LTg5MjgtYzU0ZTM3YWQ0ZjA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZNwYHYO9jino0+c3R6YMI0oKAeh0EMyOrqx
MDfGPE6O1Hc3gTbEKupMV0K4+7WLglJ1hUnJiyjXYgJCCg++W6+WKdajC69zsSS8
Y93rrYZgyzx9XNGoL+uc8wzk/08rlXnLOxEiXDqzMBzDzEKt6Upufg8WDiVlZ2Og
9PbBtjBCspCwTjVuW4svE6Tm/nkgcum5rXsRudjdIp4gUwfAaKkwdGp9p0blGVUM
YA9S9T3bGjPZbRRA4fZFfCJcpWYF7rtmPyf3uvy5m/YLnCI3DWYWs03Qfowp1DZS
QVFt8i3clfZvjVfve2oULFkRNuvGNk4rkHtC0C1Te1DTHd+WRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE65D4ClBOSQemx9nRX3pXvq+IGDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOWQ4ZmJjOWYtZDk1ZC0z
OTJiLTkxYzEtMjQxZTEwMTM0NzdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASSRcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMw2CJB9M1jVFZm/Wh7uwZh2XaEwPJmQ8H1LCwMEFA25jeym+f+ePQzl
PgZQJYfw0PYusbOXe+XwJAxDLG51lsGxh6OwygIecRqQD6w2OFMn1wYAGn8frZXo
osDUiOkljZ+0x1RWaKsN+JbM6xJmlVG0PvdZZ8vNta+zVyTy3ZbugkhN5UHMOJUA
o/v8Hwp2HHKxk15v7uwe4QzhaOu8IVIptKmkn85AEMeMXn+P4aQB+4L6kpfZxdAm
pfVm7ULyYRzHJ1laDeVRNyh/3MnfZslMKqW0vpKk9sL5SXSI3qbnVNKixuJ3BqEw
Lrb4GJrg1u6bZQAx7WvTASag9PG6q4Q=
-----END CERTIFICATE-----