Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f81bf62d-adb3-3ea2-b4d2-0a64bac531b6.roa
File:                     f81bf62d-adb3-3ea2-b4d2-0a64bac531b6.roa (raw, json)
Hash identifier:          0vPIKV1J3xR85WAo9Dqvykj5OkgT8B3LF9EAQYHp5c4=
Subject key identifier:   31:D5:7D:41:0E:E3:C8:01:A1:6F:31:A1:37:49:D0:8F:F2:E4:73:80
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858484C125554E7B95A37B8E37A80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f81bf62d-adb3-3ea2-b4d2-0a64bac531b6.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     33287
IP address blocks:        73.233.170.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:12:55:54:e7:b9:5a:37:b8:e3:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=4cd4c7bc-33b2-42f8-8345-bd6d6357bedb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:fa:b7:fe:c4:5a:6d:e1:ad:d9:99:82:d3:ad:
                    66:93:9b:96:f6:14:a1:2b:ca:9b:e0:6f:22:3b:4e:
                    fe:c7:7e:b4:c9:b5:2b:f1:9f:a1:56:5d:72:c9:00:
                    79:49:28:29:36:ff:e7:65:b1:55:12:ab:86:17:da:
                    cc:bb:fc:96:3a:9a:70:13:6b:37:76:f9:90:52:c1:
                    c2:6b:f6:0c:90:cc:e4:55:a4:92:0b:81:bf:b2:54:
                    8d:cd:6a:78:a0:ad:2f:d7:11:39:5c:a0:bb:42:04:
                    6e:dc:e5:82:03:d2:62:76:73:7b:3f:6e:1f:9e:f1:
                    0f:b1:4b:17:39:64:59:05:67:a3:db:5f:50:84:e8:
                    08:79:35:bd:fe:d3:f7:c0:20:6b:ca:3d:6c:73:58:
                    0f:03:ab:67:d8:ac:d9:a7:b9:19:2b:bd:21:82:10:
                    0d:6b:d7:61:23:9c:de:f4:80:0e:c3:f0:13:c0:f3:
                    89:b6:bc:04:fe:8e:24:43:97:33:89:ac:bf:3d:9a:
                    5f:76:9f:75:ce:7e:d1:49:75:83:48:a8:f1:9f:88:
                    2c:be:6f:d3:1c:4f:0e:23:90:72:1f:1a:43:eb:52:
                    5f:21:89:aa:c2:69:85:60:8d:c6:70:c8:12:89:fc:
                    96:56:bc:c4:60:a4:51:0f:fd:8b:03:4e:63:d2:9c:
                    bf:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:D5:7D:41:0E:E3:C8:01:A1:6F:31:A1:37:49:D0:8F:F2:E4:73:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f81bf62d-adb3-3ea2-b4d2-0a64bac531b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.233.170.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:80:17:43:be:6d:1c:85:67:16:2c:b4:f0:4b:e3:5d:fc:8b:
         d3:2e:d8:84:3d:c1:ee:6d:c4:41:7a:9e:04:e2:61:6b:af:62:
         82:d9:64:22:b5:5c:81:d1:59:89:3f:11:1b:d7:8e:ec:e7:db:
         76:b8:19:e9:61:5a:fb:91:c0:d9:4d:4d:f7:04:d3:3c:ab:3d:
         55:14:b4:d4:ae:05:90:25:e8:76:8a:88:ea:8d:9a:d1:d6:4b:
         0c:ae:37:f2:76:24:14:71:7d:92:ff:6c:34:ca:66:25:7d:1a:
         97:c7:57:2b:dc:aa:f6:62:12:a1:00:84:7a:76:c4:8e:3e:d1:
         7c:8e:e7:95:dc:50:f9:36:4b:dd:ff:f4:76:8c:b9:0f:b9:2d:
         c0:fc:ae:68:42:d8:0a:86:f1:90:dd:41:fb:e2:a1:8b:59:fa:
         12:e6:42:6c:6e:9a:ef:83:54:4d:88:2d:4a:b7:0d:3b:3e:b2:
         9f:3e:c6:db:7d:46:19:b6:9f:28:f7:db:f2:9a:f9:01:d1:47:
         5d:34:2c:af:dc:5d:32:20:95:4e:af:60:56:07:73:52:49:67:
         80:ec:dd:f0:b1:fb:ca:45:eb:c1:24:3f:b6:e6:fb:dc:22:76:
         07:ab:d0:ef:2d:6b:cc:f0:c3:e5:85:ef:87:f9:72:00:1c:ce:
         df:e8:bc:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----