Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2fbbf195-53a3-366d-b014-a4977a4acfe6.roa
File:                     2fbbf195-53a3-366d-b014-a4977a4acfe6.roa (raw, json)
Hash identifier:          hKys9Dxw7lzMGRQxlzlgmE+eIfMURcFHhNPq0JZuWYg=
Subject key identifier:   E2:9A:CA:DB:CC:6B:88:EC:43:9F:96:72:8A:B7:21:CF:DE:48:CC:00
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858484C1426BAC50A07A32B63FDC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2fbbf195-53a3-366d-b014-a4977a4acfe6.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     33651
IP address blocks:        73.222.74.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:14:26:ba:c5:0a:07:a3:2b:63:fd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=8144d493-45c6-4915-8c3b-77d605dcdb0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a2:8f:33:41:f5:37:ad:6d:9c:99:60:9b:18:
                    0b:f3:f1:54:52:e7:4b:3c:d5:89:4b:5b:da:98:ac:
                    e5:0e:50:76:dc:2b:2c:90:2a:38:d1:4c:99:b9:6a:
                    92:05:4a:84:5e:9e:d4:d0:62:64:2d:bd:1d:19:87:
                    92:89:be:34:51:36:46:53:7e:52:0b:e6:8d:38:c8:
                    85:11:b2:21:67:33:00:83:44:29:c5:a1:80:8b:ad:
                    3e:0d:5b:a4:6f:44:1f:ce:b9:7a:7a:93:99:e7:8a:
                    45:c9:67:8b:6c:c9:23:41:9c:11:3f:54:13:6b:47:
                    13:c8:ca:8c:9e:2e:4a:8b:4a:52:d1:d5:3a:c9:52:
                    90:32:a6:2e:f5:ee:ee:7d:cc:10:90:d9:b2:0c:e8:
                    32:12:37:48:97:8e:f5:69:ae:e7:34:39:9b:91:1a:
                    3a:eb:2a:70:73:d7:23:0a:94:73:d3:f7:5f:e6:06:
                    1f:eb:9c:8f:5a:72:b9:ae:6c:b9:76:25:46:c2:09:
                    95:3d:fa:c8:35:ce:9f:a3:48:97:35:fc:27:8e:78:
                    d2:b0:fc:3f:75:2c:4c:25:a2:e6:fe:5a:46:09:0d:
                    2c:81:b0:61:b5:bb:ed:26:dc:7c:5c:1a:9c:f2:cc:
                    f9:04:53:a4:58:df:43:76:6f:6d:9a:e7:59:f5:80:
                    cb:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:9A:CA:DB:CC:6B:88:EC:43:9F:96:72:8A:B7:21:CF:DE:48:CC:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2fbbf195-53a3-366d-b014-a4977a4acfe6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.222.74.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:be:d2:79:e5:30:fb:6b:5d:1f:96:09:07:b5:c7:8c:33:d4:
         f2:a4:b8:2b:c0:12:8e:7d:55:b3:64:31:d1:4f:a5:ea:ab:6f:
         eb:c9:d3:5c:9b:97:77:7b:7b:ca:5c:ca:53:62:83:d3:c8:3a:
         f9:bc:08:d8:18:dd:97:cd:5b:1e:ac:f1:30:db:e3:c1:1f:9f:
         8f:79:25:18:af:a6:af:ea:1e:0e:b4:ec:63:8e:ff:2d:6f:5a:
         8c:ef:2d:9f:c1:16:46:dc:05:0f:f9:71:fd:45:c0:1a:f8:6c:
         44:21:40:45:71:10:67:1f:df:30:c4:ce:fa:7e:ec:42:d8:03:
         9f:b0:0a:d5:52:e3:36:4a:62:52:d6:0f:63:ae:47:a6:69:62:
         0d:5d:07:3e:a3:86:a2:a1:1a:30:19:55:b0:0e:33:74:e5:78:
         46:63:e6:e0:2f:b6:8f:5c:b7:41:e1:31:ab:c5:4b:9a:94:d6:
         9b:dc:64:e4:55:45:63:b4:ba:5c:8a:df:66:74:a1:bf:9b:4b:
         63:12:b4:50:dd:09:70:8b:25:eb:1b:0e:0c:59:e9:c1:56:68:
         74:9a:04:d5:db:2e:4b:8b:9e:59:6c:a6:73:3b:f9:78:cf:2f:
         0c:4a:fc:82:77:c3:78:81:18:0d:fe:5a:87:2a:c0:e2:23:a8:
         91:5b:7f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----