Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ea617bd8-849d-3ab3-ab52-61d86b636150.roa
File:                     ea617bd8-849d-3ab3-ab52-61d86b636150.roa (raw, json)
Hash identifier:          ezlW7yiVPQ2v6tq4uJ48GG0lva+3K10xpuq+IwQ+1Fc=
Subject key identifier:   CE:3D:3E:9D:8F:59:71:E7:CE:4A:C4:ED:11:2D:37:D9:58:47:53:7C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA620B8868FE08622218A88
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ea617bd8-849d-3ab3-ab52-61d86b636150.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     33489
IP address blocks:        73.182.0.0/17 maxlen: 17

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a6:20:b8:86:8f:e0:86:22:21:8a:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=04d1535a-d5c5-488f-859c-b10b1825076d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:70:0c:e4:32:13:aa:3d:c6:f2:68:2d:8b:a7:
                    6a:88:35:17:4f:0e:ed:1c:9f:32:aa:d2:d6:a5:4e:
                    7c:bd:48:ba:02:34:1d:dd:63:60:72:9f:2f:b6:5d:
                    c4:b2:ea:14:3a:2d:d6:ca:70:00:67:63:81:e5:d0:
                    9e:96:1a:db:20:5b:74:5d:0f:25:c2:86:1b:a3:cf:
                    82:39:a2:a6:7e:1a:b7:ec:d2:44:d0:35:22:4f:e7:
                    f6:2f:33:29:ed:a5:87:30:74:15:b8:65:73:83:f7:
                    86:b9:61:f6:49:83:97:cf:68:8f:cb:31:e7:ec:64:
                    16:5d:ba:d5:ce:81:16:e8:40:d5:05:9f:99:fc:a6:
                    d7:cb:87:ad:dd:9b:14:db:a0:1b:d8:92:c3:ce:8f:
                    a2:25:31:1e:9a:24:c4:5a:81:a5:11:e7:e2:70:bb:
                    5d:00:e1:be:c6:aa:d5:7f:3b:fd:04:4a:a9:da:53:
                    8a:c8:99:72:93:23:19:de:f1:91:c2:86:0b:f5:83:
                    c2:d8:8d:ca:24:8c:06:e0:12:e8:e1:88:c2:f1:bf:
                    4d:83:67:3c:88:cb:7a:00:2a:84:c0:80:dd:64:68:
                    55:a3:95:e8:4c:e9:d9:d0:31:f4:98:ed:31:5c:c6:
                    d8:e9:5e:13:a5:a7:c8:a2:c9:7e:43:0d:96:b5:e3:
                    1f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:3D:3E:9D:8F:59:71:E7:CE:4A:C4:ED:11:2D:37:D9:58:47:53:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ea617bd8-849d-3ab3-ab52-61d86b636150.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.182.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:3a:57:2b:49:59:22:b6:f6:34:91:f5:0c:1d:75:ca:e2:99:
         12:f9:46:12:95:b7:6f:af:04:a9:69:81:7e:b6:10:68:8f:0b:
         18:e7:c0:31:bc:86:c6:5e:c4:cd:9b:c2:be:e0:dd:a4:a4:9c:
         4d:41:56:c7:b7:52:63:3a:0c:fe:bd:50:51:b3:38:fc:ab:22:
         45:04:5f:04:53:a9:ad:2a:b9:94:86:41:93:d2:f4:0b:58:b1:
         14:de:69:6e:f4:21:75:a6:c1:6a:43:d6:12:68:01:e4:2f:aa:
         2a:f2:70:4c:f8:19:92:ce:96:c0:02:9b:cd:fe:46:02:ce:d6:
         50:e6:b8:e9:b2:62:3e:bc:cf:86:ce:29:cc:54:73:17:0b:1c:
         ca:aa:30:df:98:5d:66:cb:a1:9e:e6:14:c9:09:32:33:8e:ee:
         ff:55:c2:df:97:66:a1:e7:34:03:26:7e:5a:c5:31:01:fb:68:
         af:2a:19:91:76:2e:38:2d:57:1c:8c:64:31:1d:24:61:c9:55:
         d4:83:f0:0e:a1:37:8c:b8:cf:fd:9f:4c:97:58:8c:90:b1:c7:
         67:dd:89:61:20:c5:62:5e:6d:34:d3:e9:4e:8e:b2:ee:91:8e:
         07:15:20:a9:6a:5b:f4:14:6f:9a:cc:8e:48:9e:06:9f:fc:69:
         76:9d:11:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----