Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7aa1f0b6-583f-32f8-9526-b5068146f379.roa
File:                     7aa1f0b6-583f-32f8-9526-b5068146f379.roa (raw, json)
Hash identifier:          J8feHeN0fuH9DKJrQep8kP2t3Wu0MYLFOTyGQpMfV84=
Subject key identifier:   C6:69:CE:20:23:87:A9:F5:CC:E4:57:23:07:28:A6:A5:F1:F6:65:70
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858484C124E927B5FFF2D9B06F280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7aa1f0b6-583f-32f8-9526-b5068146f379.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     33287
IP address blocks:        73.188.24.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:12:4e:92:7b:5f:ff:2d:9b:06:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=d4a0634f-670b-4cd4-a1e2-0bdc8740ed58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2a:d7:d8:30:bc:7d:19:05:b0:c2:6b:2c:4c:
                    54:1d:e0:fb:b8:2e:00:94:25:06:21:55:09:2c:e7:
                    d2:1a:22:44:71:8b:65:f6:f5:2e:d3:82:0f:86:e1:
                    c1:52:0f:bc:83:8b:97:7c:e7:b2:b2:31:63:56:70:
                    8c:05:19:f2:77:33:0b:c4:0e:6d:33:84:ef:16:56:
                    be:0b:d6:30:61:fe:b3:98:80:1d:68:f9:e3:57:08:
                    9b:d9:94:fd:84:1c:67:77:9f:5b:02:64:51:fd:d0:
                    3c:24:b2:80:0f:f2:79:09:93:5c:82:44:56:04:7a:
                    2d:3f:2b:bb:82:9f:a3:e1:d6:9f:8b:cf:85:23:84:
                    f6:30:b0:3b:02:be:28:71:a1:9a:18:ce:79:4e:88:
                    66:9f:0f:33:50:70:ed:76:43:7f:1e:56:e2:a1:1d:
                    b7:c5:a3:63:b7:7e:42:4f:75:ee:b0:36:4a:90:f9:
                    e8:58:36:b3:5d:c7:eb:96:70:a3:32:be:1d:f2:95:
                    de:7a:36:38:b0:23:4e:ee:21:fe:95:7a:84:d6:99:
                    f6:04:18:03:7f:16:08:0b:8b:3b:e5:71:c3:81:25:
                    38:9a:50:07:53:10:ca:86:ef:43:44:ef:81:2a:9d:
                    27:6b:28:81:c0:bf:71:65:c8:82:40:17:88:85:9e:
                    a0:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:69:CE:20:23:87:A9:F5:CC:E4:57:23:07:28:A6:A5:F1:F6:65:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7aa1f0b6-583f-32f8-9526-b5068146f379.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.188.24.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:a9:8d:2a:00:6b:54:81:13:2d:4c:83:f2:c0:94:59:b0:24:
         f8:31:db:d8:02:48:86:79:ee:87:6a:10:c5:d3:10:41:32:61:
         d9:0c:0e:db:67:ba:8c:65:a9:13:89:0d:28:01:59:3b:64:fb:
         ff:d9:60:94:b9:a9:f7:a6:28:99:c6:5b:4d:a6:50:64:40:75:
         d2:b5:c2:5c:4d:02:e7:4c:84:27:3f:3c:87:86:cd:86:5c:f9:
         75:5e:1c:d4:c2:5b:83:68:37:ff:cb:02:77:40:45:5c:81:71:
         2b:66:30:23:8d:ab:72:b3:28:df:d3:16:28:c7:74:36:b5:9c:
         24:54:78:0e:72:8d:73:4a:86:60:76:2d:7f:3b:eb:0a:93:a6:
         9b:33:9e:55:ce:32:97:e4:f6:b5:29:cc:1e:c7:67:3a:a0:39:
         47:ff:f4:7a:0a:40:29:ed:49:20:f9:7c:e5:8c:76:79:63:f1:
         97:38:75:07:6c:8a:8c:76:ab:94:3a:cd:bf:2b:6a:d0:6d:2e:
         db:4a:e9:78:36:e4:47:b0:ee:2e:21:5e:9f:d6:42:f7:2e:c8:
         56:21:5c:b0:7f:84:13:e5:3c:51:06:42:44:c6:8e:c6:50:de:
         04:1f:ed:fd:26:8d:9c:7b:74:58:41:f0:a9:16:c3:c7:91:19:
         d6:ff:4d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----