Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9e7b3333-cee9-3db1-848d-75fe9db7873b.roa
File:                     9e7b3333-cee9-3db1-848d-75fe9db7873b.roa (raw, json)
Hash identifier:          b/WJOCY2i8xXdtxOOrdsF30cec/q/4tvpneXa9VYtzU=
Subject key identifier:   0D:EA:0E:3B:8E:25:97:DB:4A:C5:C8:92:D1:6D:F8:C1:45:8A:99:5E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CAFAAB48DD7D29A4FE28720
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9e7b3333-cee9-3db1-848d-75fe9db7873b.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33491
IP address blocks:        73.8.56.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:af:aa:b4:8d:d7:d2:9a:4f:e2:87:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=b8f0fbfa-0520-42b9-b219-c3d380281425
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ca:9f:03:66:17:0b:2a:7c:2d:4a:d0:7c:40:
                    fa:d9:3d:6a:0c:5f:93:27:8c:3a:4c:63:7c:6e:30:
                    97:05:89:03:98:28:3e:3b:d7:cb:ee:d3:f2:03:a1:
                    83:25:59:57:97:c2:5c:8f:30:b5:96:2a:97:a7:66:
                    aa:6a:b6:f3:bd:84:2d:da:63:b1:c7:77:f6:2b:e3:
                    1b:ff:8a:07:ac:21:53:af:fa:1c:ad:f8:1c:7c:b5:
                    5d:81:3a:8e:d2:28:e5:3b:79:73:e4:b9:fb:0d:b3:
                    d9:5e:db:3a:60:19:16:d0:6b:5e:84:d8:02:41:31:
                    ae:63:20:4f:a9:c7:97:4b:8e:77:f0:2f:a7:08:41:
                    c7:14:8f:cc:ae:14:9d:d1:a5:ad:ef:a9:54:77:bf:
                    1d:82:13:28:bb:ff:2b:c9:7b:96:3b:db:61:94:55:
                    30:a7:7f:01:2f:a4:95:ef:fd:ec:f5:3a:f7:12:3f:
                    1d:82:1b:cb:e2:63:e7:82:54:9c:55:d9:79:b5:a4:
                    6a:0e:a6:e5:34:66:18:0e:4f:86:83:e4:d5:cd:72:
                    a7:ba:d6:94:ca:74:8d:9c:2d:0e:48:0b:67:43:d2:
                    f1:ea:ee:c8:3d:66:bb:b4:18:c8:f4:f9:06:94:d0:
                    ae:25:a0:0a:e7:46:64:36:b8:06:00:db:6b:4c:24:
                    e2:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:EA:0E:3B:8E:25:97:DB:4A:C5:C8:92:D1:6D:F8:C1:45:8A:99:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9e7b3333-cee9-3db1-848d-75fe9db7873b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.8.56.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:4d:05:46:47:93:80:fa:0e:ee:82:e0:54:f9:a3:31:39:9e:
         d8:44:65:51:c3:5e:60:ab:5c:88:37:bd:01:46:1c:37:5c:57:
         48:41:85:11:01:93:1e:00:fd:25:ec:a6:2e:1f:d3:12:ce:cb:
         26:bc:86:e1:4d:8c:e7:e7:b8:78:db:32:a0:11:c6:4d:ad:ff:
         ff:fe:3c:65:b8:0c:3e:cb:2d:e6:15:b4:7f:6a:35:3a:42:cc:
         94:83:69:27:04:12:3a:91:43:56:ff:be:c0:c6:4f:fc:d0:4f:
         35:d0:0a:07:30:e1:d4:17:cf:ca:28:23:b5:b4:f5:f9:8a:a4:
         70:5e:a6:4f:ac:e9:17:12:a6:55:8e:dd:7f:cd:4b:84:9f:6b:
         29:8b:cd:72:22:d2:13:28:74:81:dd:1f:26:cb:98:8a:7f:5a:
         d4:20:26:12:85:ee:ba:76:b2:2f:7b:30:82:6a:d1:bf:fe:4e:
         ca:0d:7e:61:fa:b8:a3:76:6b:13:e3:8a:68:f1:55:d1:c8:2e:
         3d:7c:29:11:af:d0:21:f0:4e:5a:ad:72:ec:40:ae:5b:e4:48:
         7b:0d:73:1e:ce:3d:99:b8:a7:c0:e4:e2:21:41:40:f8:8d:68:
         d5:65:73:2a:77:32:53:ca:a7:52:e9:d5:95:85:03:7d:29:83:
         f5:ae:45:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----