Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f988f2d3-a670-3869-ad1b-5211051a1a01.roa
File:                     f988f2d3-a670-3869-ad1b-5211051a1a01.roa (raw, json)
Hash identifier:          wNGdyWypdj2AJ34Ovbr4FbXViJRBCNF4yI6EvpF39lM=
Subject key identifier:   60:4F:BB:5B:E4:FB:AA:35:45:83:1B:B3:41:21:D3:85:54:3C:B5:6D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA53FF3C00B454C864277B0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f988f2d3-a670-3869-ad1b-5211051a1a01.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     13367
IP address blocks:        73.242.120.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a5:3f:f3:c0:0b:45:4c:86:42:77:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=9fee2308-2b48-494b-88f2-0ae484673c69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:69:d3:f3:12:54:b3:53:fd:fb:35:27:88:f3:
                    6a:e9:dd:5d:69:0d:7f:62:ac:3d:45:02:9e:7f:3c:
                    5c:d5:fe:df:3c:ba:92:28:53:82:e0:9f:c8:6d:4c:
                    49:3b:42:fd:33:23:1f:09:4a:89:51:8c:85:71:0c:
                    60:6f:b5:3b:fa:49:4c:80:fc:33:ce:4f:f9:81:27:
                    c2:9f:c5:ba:51:5c:8e:e4:75:a6:b8:fd:c3:89:67:
                    95:a4:a0:32:77:69:0f:d0:92:14:cd:12:b9:37:fa:
                    c3:3d:c4:3b:0a:31:ff:a9:76:08:c0:4d:14:65:f1:
                    56:f3:25:56:81:96:1e:e9:18:76:15:61:64:e5:49:
                    a8:85:61:7f:fb:e9:7f:ee:7b:28:63:a2:fb:19:ab:
                    05:45:f3:09:99:09:5f:22:63:06:46:7f:6b:18:64:
                    1d:cf:70:51:8e:2f:c7:64:cd:50:25:8e:98:66:6a:
                    92:b9:66:fb:88:85:37:ee:df:a6:09:25:d9:39:9d:
                    25:bd:f6:77:e3:5d:a8:e0:eb:6b:f2:af:26:b1:e9:
                    ef:12:da:fb:cd:52:ed:6f:67:ce:eb:dc:8d:75:1d:
                    8d:83:90:99:3d:f9:4f:21:4f:54:b6:10:2b:3a:8a:
                    cc:bb:f2:90:27:f8:ba:ea:7c:a9:bf:b0:ad:cb:3d:
                    b1:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:4F:BB:5B:E4:FB:AA:35:45:83:1B:B3:41:21:D3:85:54:3C:B5:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f988f2d3-a670-3869-ad1b-5211051a1a01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.242.120.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:91:20:4f:29:5c:81:65:c3:6c:95:27:1e:2f:51:d5:af:73:
         7d:ba:96:95:06:7b:5e:33:36:5d:6e:98:4a:7b:50:10:35:e1:
         1a:28:c0:3f:0d:fc:68:be:62:72:8e:79:86:aa:5f:fa:c8:97:
         cd:98:49:89:15:4d:a8:60:18:d7:ad:c6:8e:3e:e7:82:b1:42:
         df:24:3c:3f:81:96:89:1e:5b:29:15:d3:b2:a2:42:27:50:ce:
         50:5b:cb:74:a7:51:43:b6:16:5f:b7:15:c8:25:37:72:19:c3:
         ca:8a:ad:10:7b:c4:55:ad:06:71:85:48:3a:c2:c0:92:8b:5b:
         ff:5d:4b:67:23:12:71:26:72:02:f4:e0:15:72:62:cd:73:79:
         33:7a:c1:68:e7:67:6f:92:0f:6a:b9:ac:b8:c5:6a:99:ac:e2:
         21:83:06:42:92:e2:0e:3a:ce:6c:12:18:ff:6e:6a:55:f6:78:
         49:23:35:53:60:47:4b:34:4b:35:ad:85:cd:6d:2a:20:57:07:
         f1:9b:2d:ee:21:12:43:e4:cd:20:6c:f3:60:ff:0c:45:86:d7:
         07:25:37:d2:79:4b:4c:be:82:f0:d1:d0:d2:d8:93:2c:a2:82:
         98:17:6a:63:1a:d8:b0:54:eb:5f:68:aa:94:85:ed:2e:1e:75:
         db:67:49:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----