Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a046cb4f-3ca8-3f37-905c-461d04528a66.roa
File:                     a046cb4f-3ca8-3f37-905c-461d04528a66.roa (raw, json)
Hash identifier:          lQsm/BF1DQsAgV4WQBUDbvTru19L2Q5pT04vh0/exg8=
Subject key identifier:   AD:AF:07:E1:CB:9D:2B:98:EB:62:C7:0A:BD:B7:17:01:59:C5:33:11
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CB0577756D415258399C7C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a046cb4f-3ca8-3f37-905c-461d04528a66.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33659
IP address blocks:        73.29.200.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b0:57:77:56:d4:15:25:83:99:c7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=410481ac-97f8-4b99-a0bd-27f927f97e2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:fe:c2:0f:a7:4e:57:af:52:08:95:2e:02:82:
                    05:5f:9a:04:ed:f1:1b:81:b3:19:a5:bd:54:ff:91:
                    41:9d:07:e7:22:73:8c:52:34:be:4e:9d:86:f8:ac:
                    16:37:61:1c:8d:7f:f4:e7:75:7c:ae:14:01:19:cd:
                    3c:fd:b7:11:d2:d7:d8:77:76:76:c5:4c:af:f8:73:
                    32:ea:cb:6b:69:83:03:29:54:be:a2:27:9a:0f:3b:
                    75:50:c7:d1:f5:8e:bb:e1:60:e5:18:e1:8a:33:fd:
                    57:9e:53:4f:8e:3a:79:31:9e:99:c0:88:75:6d:46:
                    0e:61:bc:70:a0:73:2c:6d:5f:03:54:41:31:9c:ca:
                    6c:a8:21:7f:f8:d2:8c:9a:95:14:e4:15:9f:19:3e:
                    de:d9:da:19:44:e2:e8:7c:00:5b:c9:c0:dd:2f:0a:
                    17:a1:80:e2:4b:f0:6b:09:11:77:b7:d9:ca:0e:83:
                    9b:88:4c:10:52:8b:89:50:2b:e7:86:5c:70:40:37:
                    47:48:c9:71:43:cc:64:14:2d:4c:a9:87:fe:07:70:
                    7d:d7:00:50:06:84:14:e1:cb:fe:e5:47:a6:ee:23:
                    ea:cd:a2:a1:5d:6d:cb:26:b8:9f:f6:1f:5b:0a:da:
                    fd:b2:63:56:5f:97:06:25:20:98:93:50:5d:11:ad:
                    b6:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:AF:07:E1:CB:9D:2B:98:EB:62:C7:0A:BD:B7:17:01:59:C5:33:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a046cb4f-3ca8-3f37-905c-461d04528a66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.29.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:87:70:6c:cb:c0:dc:79:55:bc:c8:c1:2d:28:e3:74:d1:c9:
         1b:b2:1f:ea:90:74:ba:61:9c:c0:24:bd:2e:a6:8c:d2:94:56:
         b3:08:ee:37:a6:d6:cc:ba:64:ab:c0:88:0a:79:f3:5d:33:e0:
         b2:f8:c9:f8:34:6d:8c:92:ea:ba:c8:29:ea:0b:77:0a:2b:22:
         41:90:03:60:3f:1e:a9:93:73:c5:7c:75:b2:aa:d2:93:02:d4:
         3b:4f:29:68:2c:d6:0f:ca:e7:fe:4a:cd:19:e5:80:09:9b:a0:
         45:a5:ee:20:ab:d4:a2:a2:e9:1b:d4:b4:a2:4c:a5:98:84:83:
         67:24:50:57:24:29:16:52:8e:6a:f5:10:4f:da:c6:b6:67:a7:
         3a:ec:50:38:22:8b:44:92:26:3e:75:6e:5d:16:71:55:bb:9c:
         c2:04:92:36:de:d9:8e:9d:a1:c3:e7:79:76:32:76:ed:83:98:
         4a:17:a0:14:a3:6e:06:8c:0d:b6:27:5a:38:c3:d3:5a:0c:5e:
         01:b2:e2:05:8a:2c:2e:8c:84:28:a5:c5:7f:b6:b2:84:dd:ec:
         75:2a:ac:70:69:12:8f:e3:4b:86:d2:69:a3:ec:ab:a8:b2:b3:
         48:49:a6:c8:55:0e:6a:01:8e:eb:89:b0:55:54:32:19:a0:58:
         bc:0a:51:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----