Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2601edd3-9640-34db-8e18-aefc2152b10f.roa
File:                     2601edd3-9640-34db-8e18-aefc2152b10f.roa (raw, json)
Hash identifier:          HpcypO50SWKUXdWvD2/c/VUEPuyYZwKvG9NFBpxFXL4=
Subject key identifier:   CC:26:5A:DF:5B:10:87:44:5D:98:AE:3E:4C:18:B3:CC:A7:F1:F1:16
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858484C147F7C66AD858761790300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2601edd3-9640-34db-8e18-aefc2152b10f.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     33651
IP address blocks:        73.71.23.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:14:7f:7c:66:ad:85:87:61:79:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=36ca62e8-78cf-4a5c-b61a-82999e40b520
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3b:98:04:8c:fc:3d:ad:56:5c:6e:bc:84:99:
                    aa:30:3c:ac:44:85:00:41:b6:02:99:9b:f8:b9:75:
                    35:9a:2c:10:dc:a7:15:ff:c1:1b:9c:20:8e:54:10:
                    f5:86:7f:41:d6:e3:03:7a:75:8f:ba:23:b6:02:df:
                    08:69:55:ef:78:db:8f:42:33:9d:b7:d5:82:0a:80:
                    c2:d0:36:dc:74:24:e9:5c:d7:2f:46:b3:e2:2d:70:
                    f7:9c:0b:de:11:56:67:de:a8:fe:1b:dc:aa:86:ea:
                    fb:d6:cf:db:e5:69:83:b2:a7:95:6a:d1:d0:03:81:
                    76:7f:5f:3d:17:09:b8:5b:74:5b:b9:66:4f:2c:49:
                    37:9a:97:0e:b1:22:24:29:59:cd:6c:19:70:1b:3e:
                    42:ac:e4:ad:25:26:47:f8:3b:8c:9c:1a:1e:41:28:
                    b2:d4:14:41:b4:91:62:3b:7b:c4:f2:ce:bb:34:72:
                    1f:77:43:48:c0:93:09:33:61:d7:39:fa:c8:2d:d7:
                    f9:6b:0b:16:1e:f0:6e:62:7d:5c:38:5f:30:1a:81:
                    92:01:3b:a0:2c:c5:9a:bb:35:df:ba:83:7b:de:1d:
                    c2:90:b7:77:8a:16:5f:3f:06:ed:60:e5:ec:75:66:
                    ec:2d:9d:3f:64:cd:e3:2f:45:9d:0f:d1:57:55:c9:
                    f1:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:26:5A:DF:5B:10:87:44:5D:98:AE:3E:4C:18:B3:CC:A7:F1:F1:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2601edd3-9640-34db-8e18-aefc2152b10f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.71.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:e5:4b:09:78:48:c9:16:b4:74:28:11:95:ec:1c:7e:0f:05:
         eb:68:a1:37:c4:b3:c3:52:50:29:38:68:d3:89:e5:70:dd:b1:
         64:63:b7:47:df:4d:e4:6b:ba:99:62:24:5f:e9:1b:64:1e:bc:
         26:cc:56:e8:90:11:fa:1d:eb:e8:cd:81:63:58:f4:74:6f:2c:
         dc:73:03:75:2c:16:d1:9b:04:61:af:17:8f:67:08:ff:6a:15:
         ef:9c:bf:c6:6a:79:7c:92:6c:d0:a9:60:53:0e:18:48:d8:ec:
         5c:75:d0:f7:51:06:33:a0:39:8c:f8:b7:43:62:18:dc:59:65:
         87:56:d7:ab:90:fb:60:a6:04:e4:b8:40:8e:05:ff:b1:b5:90:
         30:51:66:41:bc:94:e2:c2:dd:c0:4d:49:9d:34:3b:54:f2:31:
         4c:13:db:3b:2d:e5:62:79:d0:02:92:0b:0c:c6:68:c2:0c:ee:
         52:3f:3a:3b:20:41:f9:6e:fc:c7:0f:23:61:7b:63:11:ef:d5:
         15:d6:e9:20:ba:af:b9:95:58:2e:7f:cb:f2:6c:59:ea:93:4c:
         7b:53:d8:db:a6:9e:0c:8c:89:5e:18:d2:e1:f7:30:a1:aa:f5:
         f7:6f:f7:22:7f:f2:60:c5:17:3f:e3:7a:78:d1:85:62:06:ff:
         a3:35:cd:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----