Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e33519d3-55f4-33bb-b505-5775936444d8.roa
File:                     e33519d3-55f4-33bb-b505-5775936444d8.roa (raw, json)
Hash identifier:          LuC93Sj6YLDWCHl84+HkfOW3zeMhDKy4G523DKDUQkM=
Subject key identifier:   B6:A7:3F:A5:15:7F:7A:00:17:42:A3:6B:56:1F:C7:67:B9:09:9C:9C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848B26246FD5A8D08C900A8E140
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e33519d3-55f4-33bb-b505-5775936444d8.roa
Signing time:             Tue 28 Jan 2025 17:38:47 +0000
ROA not before:           Tue 28 Jan 2025 17:38:47 +0000
ROA not after:            Mon 28 Apr 2025 16:38:47 +0000
asID:                     33491
IP address blocks:        73.168.122.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b2:62:46:fd:5a:8d:08:c9:00:a8:e1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 28 17:38:47 2025 GMT
            Not After : Apr 28 16:38:47 2025 GMT
        Subject: CN=059aeca1-a5cc-45e1-b9f2-5c3433ef98ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:34:48:6d:bc:2b:a3:40:6f:0c:d5:b6:b6:07:
                    8a:00:37:7b:08:3d:1c:53:7f:77:e3:65:2d:c3:e1:
                    4e:87:bc:0a:68:da:19:79:3d:d3:45:72:f0:b6:2c:
                    a9:88:ba:d0:7b:e1:1b:f8:aa:b3:7e:fe:3b:71:5a:
                    d8:1f:4a:f6:f1:8f:a0:a1:5d:e7:d9:03:ee:d3:cf:
                    68:24:ca:37:30:2b:7d:04:f1:24:2a:eb:b0:cb:c3:
                    4e:a2:b9:72:8c:8e:f3:0b:d0:33:81:3a:bf:59:7c:
                    76:1f:8e:65:79:9d:e1:95:6a:43:71:18:f4:18:f1:
                    99:f9:25:26:52:45:62:60:83:d6:14:df:52:0a:98:
                    72:71:c9:f8:e0:7f:c9:7f:5a:4c:59:b8:aa:24:58:
                    48:1a:9c:e6:f1:dc:56:73:0e:a4:85:0b:fc:10:02:
                    11:bb:7b:d5:a6:7d:f2:fb:65:98:8d:f9:55:09:6d:
                    5b:85:b5:07:3d:28:44:a5:6a:ae:71:5e:75:24:1e:
                    ae:79:8d:20:69:4c:b7:a4:1a:9e:a3:88:b6:21:5c:
                    35:12:a3:1c:5b:19:ac:d3:63:d9:95:ee:22:c1:77:
                    e1:0f:c0:e7:d1:39:74:5b:35:f8:5a:4e:10:b5:d3:
                    8b:b0:d8:1c:6f:01:98:2a:8f:b9:c0:71:a0:30:4c:
                    30:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:A7:3F:A5:15:7F:7A:00:17:42:A3:6B:56:1F:C7:67:B9:09:9C:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e33519d3-55f4-33bb-b505-5775936444d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.168.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:78:49:58:02:b0:c7:ac:a2:e4:32:87:5e:55:3b:19:4a:3e:
         b7:30:a4:ac:eb:6d:fd:87:10:eb:c8:7b:88:f5:d7:6e:41:ab:
         e2:f0:cd:99:69:92:b8:1e:82:4b:c1:6c:cd:8a:33:3c:7b:38:
         14:d2:43:f0:06:5c:16:8a:3b:54:b4:46:48:7a:0c:42:ad:f9:
         3a:89:76:8d:8d:8b:6e:99:18:a7:5f:a9:4e:c2:8c:7d:05:2a:
         df:49:d1:b7:38:ed:34:e5:3c:3d:ac:32:57:ac:f9:9d:92:2e:
         b7:4a:4e:dc:46:fa:a2:4b:19:e0:10:91:a2:6d:f4:0f:75:ca:
         29:f1:31:a8:78:a3:bd:f5:25:03:5b:96:99:f8:06:4e:e1:87:
         f3:d1:df:f5:67:2d:1b:8d:ec:e7:6b:60:90:bd:55:e4:89:15:
         89:19:0b:2b:93:87:d2:fd:c8:88:f4:01:3c:19:54:87:fa:e8:
         06:66:65:43:18:13:97:34:78:3b:a2:d1:6d:ba:b2:8a:3c:8c:
         57:34:28:03:77:4f:3f:19:d3:bc:90:71:3d:87:7f:40:34:8e:
         82:44:f5:ee:6b:b6:68:2a:36:e2:7d:5c:eb:57:24:fd:3b:a2:
         7d:c1:a6:b0:42:01:a9:ec:17:ab:f0:28:1b:cf:45:d4:b6:0d:
         10:94:39:6f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiyYkb9Wo0IyQCo4UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDEyODE3Mzg0N1oXDTI1MDQyODE2Mzg0N1owLzEtMCsGA1UEAxMk
MDU5YWVjYTEtYTVjYy00NWUxLWI5ZjItNWMzNDMzZWY5OGFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjRIbbwro0BvDNW2tgeKADd7CD0cU39342Ut
w+FOh7wKaNoZeT3TRXLwtiypiLrQe+Eb+Kqzfv47cVrYH0r28Y+goV3n2QPu089o
JMo3MCt9BPEkKuuwy8NOorlyjI7zC9AzgTq/WXx2H45leZ3hlWpDcRj0GPGZ+SUm
UkViYIPWFN9SCphyccn44H/Jf1pMWbiqJFhIGpzm8dxWcw6khQv8EAIRu3vVpn3y
+2WYjflVCW1bhbUHPShEpWqucV51JB6ueY0gaUy3pBqeo4i2IVw1EqMcWxms02PZ
le4iwXfhD8Dn0Tl0WzX4Wk4QtdOLsNgcbwGYKo+5wHGgMEwwwwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLanP6UVf3oAF0Kja1Yfx2e5CZycMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTMzNTE5ZDMtNTVmNC0z
M2JiLWI1MDUtNTc3NTkzNjQ0NGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASah6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJV4SVgCsMesouQyh15VOxlKPrcwpKzrbf2HEOvIe4j1125Bq+LwzZlp
krgegkvBbM2KMzx7OBTSQ/AGXBaKO1S0Rkh6DEKt+TqJdo2Ni26ZGKdfqU7CjH0F
Kt9J0bc47TTlPD2sMles+Z2SLrdKTtxG+qJLGeAQkaJt9A91yinxMah4o731JQNb
lpn4Bk7hh/PR3/VnLRuN7OdrYJC9VeSJFYkZCyuTh9L9yIj0ATwZVIf66AZmZUMY
E5c0eDui0W26soo8jFc0KAN3Tz8Z07yQcT2Hf0A0joJE9e5rtmgqNuJ9XOtXJP07
on3BprBCAansF6vwKBvPRdS2DRCUOW8=
-----END CERTIFICATE-----