Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/558aa0da-2661-31b9-8b9b-f45a60cc25a8.roa
File:                     558aa0da-2661-31b9-8b9b-f45a60cc25a8.roa (raw, json)
Hash identifier:          NN2aihkrB8EotC7veikKlWhaF6tGZct4nudDV3jZpLs=
Subject key identifier:   07:99:D8:08:2A:E4:CB:2D:9E:41:94:D5:6F:28:8B:50:E3:91:91:36
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858484C13B57B39724D27829E0B00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/558aa0da-2661-31b9-8b9b-f45a60cc25a8.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     33651
IP address blocks:        73.15.252.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:13:b5:7b:39:72:4d:27:82:9e:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=cdfbf61f-5704-4852-902c-44cc7884287a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:91:62:f3:8e:1f:c9:1b:c1:60:7c:ae:13:fb:
                    8d:56:65:86:b8:24:55:76:55:c6:7b:b3:52:11:4f:
                    0f:6b:76:cc:51:44:e7:0c:fb:06:52:ec:5e:ea:09:
                    53:4d:8f:ea:48:38:2c:10:65:36:c8:30:b3:02:7d:
                    e3:c9:4e:7c:9e:90:a4:f5:70:68:8c:12:7b:7c:9c:
                    e2:a5:c5:8b:26:40:f7:2b:c6:06:45:b6:30:48:06:
                    5a:a4:d6:18:18:80:1f:8c:8c:22:d1:d5:d8:49:af:
                    11:0a:32:72:51:cc:a7:da:b3:e6:c6:6b:99:71:80:
                    ec:5b:e8:02:78:17:95:21:dc:fa:00:60:c3:55:e7:
                    29:4e:d6:f5:9e:1e:f5:67:15:4c:19:9e:68:cb:9f:
                    08:c7:25:ff:f2:5c:6d:00:22:34:b9:3d:12:50:83:
                    3e:fc:13:b2:46:e1:e0:79:b0:9f:94:17:3f:a3:ad:
                    04:09:91:09:e1:06:57:3f:19:de:27:98:10:71:f9:
                    a0:db:67:42:41:b7:49:78:2a:2f:54:51:d0:2d:e0:
                    98:d2:03:75:9c:5f:f4:64:91:85:8f:ee:6f:fd:12:
                    b2:13:ef:c5:36:5c:53:32:99:87:25:8f:21:aa:d5:
                    b3:9e:31:74:e0:8c:13:8e:08:bd:fc:f8:27:d0:ac:
                    0f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:99:D8:08:2A:E4:CB:2D:9E:41:94:D5:6F:28:8B:50:E3:91:91:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/558aa0da-2661-31b9-8b9b-f45a60cc25a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.15.252.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d1:ee:2b:0f:a0:8b:6f:60:e7:38:9c:c9:f3:de:d1:2c:2c:9e:
         4e:75:64:60:f7:b9:21:7e:99:d9:db:a5:f1:15:61:30:c1:c2:
         aa:04:b0:1f:a4:a5:92:8b:fe:45:4d:c4:80:3c:bd:21:ce:8a:
         00:59:cc:48:2c:1f:c7:b4:ca:89:8f:34:47:ad:55:d3:2d:b1:
         86:c2:54:41:9c:fb:96:eb:12:95:00:bf:8e:ab:e6:46:61:9b:
         a4:eb:07:84:ab:bc:73:8f:6c:b1:47:c3:e8:66:e0:fd:69:00:
         fd:49:7f:6b:eb:88:7d:8f:75:fc:3a:16:89:e1:8e:d5:20:f7:
         43:99:17:22:fb:2f:41:d7:fa:49:da:bc:6c:33:c3:16:71:72:
         16:12:72:0b:8d:4c:38:74:a2:e4:ce:a1:1a:c4:07:7a:53:99:
         62:7b:39:48:f3:6d:00:2e:56:3c:14:a7:51:51:fa:ab:d9:9a:
         43:53:a5:81:04:89:fb:28:bc:7a:f3:d2:63:ea:0e:45:ec:4a:
         cf:0d:46:06:98:6a:83:28:f9:98:c4:53:fd:ce:8a:8c:d6:78:
         d7:14:92:c6:31:17:3f:00:40:6a:de:d5:e3:8d:59:c9:7a:e5:
         6d:e9:dc:15:83:78:78:9e:43:c3:ee:02:44:b5:0b:d8:f3:f9:
         60:16:41:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----