Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/addfe12f-5de3-3f8d-baf2-c6b69c5076f8.roa
File:                     addfe12f-5de3-3f8d-baf2-c6b69c5076f8.roa (raw, json)
Hash identifier:          4Gs+rPu6SrX7bCugIMQdrX9KBsdoW227dOS/n1fFfKs=
Subject key identifier:   65:8F:09:2F:72:3E:9D:E8:ED:A7:D5:05:01:53:D2:09:26:FE:30:99
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA67FA665DAC7B6631CBAC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/addfe12f-5de3-3f8d-baf2-c6b69c5076f8.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     13367
IP address blocks:        73.5.182.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a6:7f:a6:65:da:c7:b6:63:1c:ba:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=150ac61f-e8a9-45c1-be55-93496491a5e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f2:38:e9:e3:d5:94:1d:3e:b1:8e:88:e3:51:
                    18:08:3a:81:e9:5f:59:41:ca:c4:2c:15:82:2b:79:
                    40:dc:7d:06:19:c9:fd:36:43:e3:90:67:e7:14:3e:
                    b3:d6:ed:20:02:e6:3d:e3:66:fe:32:b4:8c:e6:e4:
                    fc:6e:6a:55:a1:c6:b2:21:0f:a0:4e:f2:d1:8e:f2:
                    ac:fb:75:94:77:cc:ca:7f:c6:70:76:fb:b7:39:34:
                    a2:65:2d:dc:a4:22:80:4f:c9:6a:ff:73:e7:aa:f4:
                    94:a8:0f:7e:79:13:7a:db:03:31:75:4d:5b:65:05:
                    7c:1d:0c:30:fc:e6:e6:a1:02:d9:e5:26:73:54:39:
                    5c:95:1e:92:45:94:24:de:9e:1a:47:25:97:a8:f3:
                    c5:86:ca:92:44:90:d1:2f:45:c3:48:a3:66:74:6d:
                    49:27:33:da:d4:0c:f4:97:af:8c:c1:ef:07:2e:15:
                    89:24:6f:db:b2:56:6b:10:ed:d8:73:97:91:04:ca:
                    91:3e:2f:cc:23:97:e9:c8:49:50:f6:e6:68:84:56:
                    af:06:f2:f1:f5:e1:29:14:f1:71:1d:c8:ae:7e:d3:
                    7a:4d:6a:0c:b7:ca:39:71:25:e9:11:35:de:42:42:
                    06:36:a4:38:38:48:ff:3f:e0:bb:3a:12:16:7c:84:
                    f7:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:8F:09:2F:72:3E:9D:E8:ED:A7:D5:05:01:53:D2:09:26:FE:30:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/addfe12f-5de3-3f8d-baf2-c6b69c5076f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.5.182.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:21:15:71:df:6e:18:14:43:42:b3:59:c2:5b:2c:14:8f:54:
         5c:24:41:09:48:d9:96:7b:81:e0:22:65:2c:d2:20:2f:73:de:
         fb:9b:7c:2c:fb:fd:24:33:54:ee:f3:ad:0f:23:59:26:34:ee:
         18:55:a6:2f:82:b1:d1:8c:12:ff:d8:e7:42:2d:45:b1:48:10:
         99:de:62:89:76:0b:34:ee:4c:a4:90:78:33:19:7d:1d:bd:bd:
         3a:1e:79:72:cd:aa:b4:87:2f:dc:87:f7:07:d6:fe:d7:c0:f3:
         db:e9:53:55:ec:14:ac:c1:d7:79:b5:18:eb:46:9d:5c:51:63:
         7e:79:e0:0f:1f:44:9e:ff:41:fe:08:af:24:d2:3b:6a:e8:d5:
         71:c4:b8:bc:f3:de:31:26:47:aa:64:a2:0f:eb:1a:84:5a:3e:
         b9:43:8f:bd:fc:e3:5a:76:54:8f:b3:c0:86:19:8f:01:70:96:
         9a:70:a1:84:43:66:58:d2:60:38:a6:e5:fb:80:ed:28:37:86:
         35:64:cd:0d:71:2c:52:8f:fe:09:7c:14:e8:e3:4b:ef:5f:c7:
         75:d8:d2:ca:20:03:21:44:47:75:0b:b9:05:de:0c:1e:02:4e:
         5e:03:0e:8d:2e:fe:00:86:9f:40:21:99:8d:19:f6:53:00:95:
         a1:f6:d2:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----