Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/9fa4f415-973f-323a-a294-77ec6ecf0080.roa
File:                     9fa4f415-973f-323a-a294-77ec6ecf0080.roa (raw, json)
Hash identifier:          IHWZrU91a158zD5lUwOPppH6ncEswLxU+z94gCUGslo=
Subject key identifier:   8F:94:FA:03:07:26:A4:74:52:5D:22:19:B1:D8:68:15:6A:6F:BA:19
Certificate issuer:       /CN=1ae9796a-5f3d-4f47-b117-42360a213e37
Certificate serial:       010D0C9F432858493C09208EE5262BFF368A2268
Authority key identifier: 4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/9fa4f415-973f-323a-a294-77ec6ecf0080.roa
Signing time:             Wed 19 Mar 2025 01:00:40 +0000
ROA not before:           Wed 19 Mar 2025 01:00:40 +0000
ROA not after:            Tue 17 Jun 2025 01:00:40 +0000
asID:                     13627
IP address blocks:        2602:fba3:300::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3c:09:20:8e:e5:26:2b:ff:36:8a:22:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ae9796a-5f3d-4f47-b117-42360a213e37
        Validity
            Not Before: Mar 19 01:00:40 2025 GMT
            Not After : Jun 17 01:00:40 2025 GMT
        Subject: CN=e0d7f4b2-f942-4443-88c9-b5ec6bfa3713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f9:0f:e0:42:59:48:b0:b4:d5:9f:0c:44:76:
                    90:70:40:8f:ea:46:9a:87:f2:24:b6:d4:c7:7e:09:
                    c3:06:6d:4a:1d:21:b5:b2:f6:73:45:77:fd:db:26:
                    aa:48:cd:ef:c4:ad:80:fd:c3:86:55:02:71:69:31:
                    0b:0d:2d:32:97:2d:18:11:d5:58:6b:dc:d8:85:cf:
                    57:2d:68:8f:3f:87:42:9f:94:6b:d5:16:c9:f6:5b:
                    56:a1:3c:28:97:9e:4f:c0:6c:cb:58:ce:8f:96:3f:
                    22:9b:79:74:7e:45:84:53:ff:57:2f:fb:12:39:b5:
                    59:ac:45:f0:58:58:05:36:bc:92:2d:81:3a:0c:b5:
                    b4:00:51:76:ce:ec:e1:8e:ac:df:6e:51:a5:be:ce:
                    d9:68:60:26:f1:83:b5:e2:77:83:1b:24:58:76:af:
                    22:49:de:76:3d:6f:6f:51:a7:95:c8:35:08:78:5c:
                    22:86:c1:0c:f1:d3:2e:a5:24:2c:50:d8:9c:3f:1e:
                    75:7c:14:f9:68:d1:a8:95:ee:88:a4:d4:5c:55:61:
                    eb:12:24:f4:48:6a:ce:d6:ca:8a:ff:d7:90:21:f8:
                    11:75:a4:a5:49:08:8d:95:f1:7c:4b:cb:e8:89:2e:
                    96:96:74:07:df:c9:cf:d5:81:a6:00:2e:9e:e6:5d:
                    02:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:94:FA:03:07:26:A4:74:52:5D:22:19:B1:D8:68:15:6A:6F:BA:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/9fa4f415-973f-323a-a294-77ec6ecf0080.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.crl

            X509v3 Authority Key Identifier:
                keyid:4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fba3:300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:31:67:f9:fc:99:d3:c8:9b:af:09:e7:f8:b7:d4:99:21:c5:
         53:8e:f1:83:f9:43:a2:df:1c:8c:10:b8:4f:7a:6a:a2:d6:7e:
         8c:b3:45:95:45:72:56:9e:85:2f:15:ff:54:08:b5:55:56:fe:
         2e:9d:59:96:7d:73:3e:d0:b4:b8:aa:30:50:b0:3b:ab:ad:7b:
         c5:48:ba:27:24:ba:dd:98:18:1b:a3:7c:8d:20:15:98:68:1d:
         a2:0f:96:d8:27:8e:97:ab:d8:b1:ed:90:a9:fa:38:65:8d:3e:
         f5:45:06:cf:81:12:a7:89:0c:ed:e4:e9:d2:dc:f4:c4:5a:40:
         70:cf:22:61:25:fe:f2:d1:bc:5b:60:cf:c7:c2:e2:ac:56:8f:
         67:9a:ee:b1:a8:90:d3:15:da:b2:15:3e:fd:08:1a:cb:db:44:
         56:ab:2e:3c:dc:51:69:d1:55:8a:24:9f:f6:37:4a:69:c9:69:
         0b:f5:52:72:1b:c6:26:3c:7a:d0:7d:3b:e0:1a:af:df:64:2b:
         44:2e:09:f0:8f:0d:13:f2:0f:8e:ec:82:a8:8d:da:00:c4:c6:
         db:ee:95:2e:b8:86:99:84:3d:3c:44:91:bb:b4:7a:e9:00:b4:
         87:ce:84:55:fe:39:1f:52:0e:47:01:dd:2d:d9:c7:c4:64:1f:
         b2:7f:4f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----