Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b3271e6e-fda4-3c2e-8ed6-e2a48d6c369d.roa
File:                     b3271e6e-fda4-3c2e-8ed6-e2a48d6c369d.roa (raw, json)
Hash identifier:          0G2JkLCeU+vUOKUXeBLiwG3JUA2wBWa3YkuhWBBM5BU=
Subject key identifier:   40:B5:36:69:F1:ED:A4:78:E9:E0:6F:FB:66:3C:37:0D:CF:D5:E6:2E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F8FE4650904E3A3861E5C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b3271e6e-fda4-3c2e-8ed6-e2a48d6c369d.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     33668
IP address blocks:        73.191.134.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f8:fe:46:50:90:4e:3a:38:61:e5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=98244b3c-b163-4a77-a85b-41a22e775201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:a3:7f:99:50:b8:42:e0:26:f9:e1:32:60:e6:
                    0c:88:3b:55:d4:dc:67:46:cf:79:a1:5b:e3:f8:24:
                    ce:4e:cc:47:f0:e0:ab:3d:97:60:4a:a7:7d:c8:7d:
                    e8:ff:ce:fe:f5:46:29:9e:0c:54:3e:38:31:1e:29:
                    6b:7d:fa:76:6c:6e:e2:91:93:30:2b:36:92:30:86:
                    57:61:87:f6:bd:ce:6e:a1:7e:f4:83:1a:2e:77:ae:
                    76:1c:b1:19:51:01:b8:62:a9:3b:05:8e:b9:21:27:
                    5b:8f:b7:44:40:0b:d6:eb:38:9e:03:91:37:81:ef:
                    eb:fe:bc:94:82:d5:93:5f:4b:2e:45:fb:4f:3d:3c:
                    e6:c9:92:30:f5:f4:82:4c:b5:f9:fa:68:20:05:0c:
                    87:de:51:e0:df:72:39:77:e2:69:51:98:53:2c:22:
                    2a:74:90:8b:ee:d6:73:68:8b:1d:f8:41:4b:73:6e:
                    ce:be:50:3a:84:57:c7:83:18:bc:ca:30:d7:a2:29:
                    90:96:48:74:ab:ea:83:df:0b:e5:7c:ee:77:b4:1e:
                    2f:80:97:97:4c:23:9e:8c:38:de:ed:14:31:e1:16:
                    07:bf:f8:4e:87:41:49:fc:b8:57:9e:f7:ba:53:cb:
                    6a:71:29:fb:c2:d0:b1:99:84:49:6e:49:22:1f:e5:
                    d1:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:B5:36:69:F1:ED:A4:78:E9:E0:6F:FB:66:3C:37:0D:CF:D5:E6:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b3271e6e-fda4-3c2e-8ed6-e2a48d6c369d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.191.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:3e:26:b0:bd:6d:eb:de:45:ff:fc:2c:e3:bd:6c:25:6d:df:
         10:d2:bc:0b:7b:28:c1:fe:a0:17:52:1e:91:fa:ef:9e:e3:e3:
         9b:31:95:46:cf:4f:e3:33:09:5c:7c:a0:47:d9:b6:94:6e:b9:
         6f:8f:8a:6b:11:3e:86:7d:eb:1c:98:8c:a7:78:ac:24:d9:ec:
         d9:8c:c3:3f:da:5e:bf:89:6d:a8:59:07:af:1c:e8:8a:70:ee:
         85:5f:9e:c1:1c:8b:52:a6:9b:88:f4:1b:46:af:7c:5f:c3:49:
         8c:c3:45:c8:f1:4f:65:4c:2a:7a:60:b1:5f:97:9b:32:fa:42:
         8d:5e:3a:d7:07:57:99:17:e4:19:48:67:9e:2b:72:46:63:4c:
         54:17:3d:21:22:dc:e3:5a:58:8e:b6:38:ec:31:4a:03:c3:1c:
         20:b7:b7:a5:e4:2a:a7:a6:20:a7:e2:41:2f:c0:72:19:24:19:
         8a:48:86:a2:eb:75:a7:9d:7a:bd:35:82:55:70:7e:5f:3d:0a:
         45:a3:83:11:9b:bc:34:4b:f8:d2:ce:63:3c:ef:9b:58:be:86:
         bc:82:bf:19:d5:a9:f2:95:f5:97:82:15:94:7d:6f:15:f8:63:
         b3:08:53:07:4c:f9:ae:a4:8e:59:dd:0b:95:42:c8:a9:ea:d8:
         8a:dc:e7:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----