Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e5310947-425b-3099-b68c-f7d54cb02bc2.roa
File:                     e5310947-425b-3099-b68c-f7d54cb02bc2.roa (raw, json)
Hash identifier:          HgDgqMk3l67stcP5B6v5/U+I9kJk4SkvWG63sxvo+r8=
Subject key identifier:   56:65:DA:33:E5:9F:18:8D:E6:F0:49:B6:62:FC:E5:89:62:5C:7F:27
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584981912833F5C933CB9B9DB000
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e5310947-425b-3099-b68c-f7d54cb02bc2.roa
Signing time:             Sat 12 Apr 2025 22:45:35 +0000
ROA not before:           Sat 12 Apr 2025 22:45:35 +0000
ROA not after:            Fri 11 Jul 2025 22:45:35 +0000
asID:                     30036
IP address blocks:        2604:2d81:1800::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:91:28:33:f5:c9:33:cb:9b:9d:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 12 22:45:35 2025 GMT
            Not After : Jul 11 22:45:35 2025 GMT
        Subject: CN=c226aa1b-cbb4-4580-a059-1a0959fdb4ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:67:6e:f7:bb:1b:f6:9f:c5:a2:38:21:0e:b7:
                    a4:82:66:f8:cb:7c:fe:22:95:04:21:26:9c:eb:79:
                    53:d1:7a:e4:db:11:96:91:27:6e:c7:b2:c6:6a:25:
                    48:01:c7:f6:43:c1:cf:17:2f:01:d4:32:8a:28:a1:
                    2f:56:38:c9:37:48:1a:7e:c7:ba:39:ca:e7:43:d1:
                    ab:0f:f0:22:fd:b4:28:e8:31:31:a6:ef:20:0e:64:
                    c2:b1:93:27:1b:50:f0:e2:2b:51:c1:04:5b:56:9c:
                    db:24:95:5a:fc:30:29:a9:48:3b:15:c6:20:2f:a2:
                    6a:0c:3b:5b:57:be:ab:71:4b:8b:8b:0f:f9:60:06:
                    b2:01:76:1a:b7:64:80:d1:f1:c9:3b:95:b1:ba:fe:
                    c0:7f:26:56:06:e4:83:55:24:bc:2d:92:83:f3:b4:
                    27:84:76:44:14:d7:9f:5a:1b:f7:93:88:11:0a:c9:
                    ec:a9:c6:9b:14:a1:52:10:a1:ae:b1:59:55:04:f7:
                    e3:02:16:a0:12:78:e4:b6:44:09:d0:2a:be:53:2a:
                    8c:27:ab:13:5a:5c:97:82:60:10:bd:07:df:9e:4f:
                    d7:21:7b:9c:e0:16:97:d7:41:0a:75:c8:81:9c:a1:
                    69:bb:ae:31:d9:73:5e:5c:fa:8c:f1:6b:7f:89:90:
                    86:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:65:DA:33:E5:9F:18:8D:E6:F0:49:B6:62:FC:E5:89:62:5C:7F:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e5310947-425b-3099-b68c-f7d54cb02bc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:1800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:2e:a2:31:4c:10:cf:b2:2c:89:12:b3:a6:a6:e8:2f:9c:46:
         ac:3f:6f:cc:7b:18:f9:e8:4a:e0:7b:90:96:2f:cd:50:0a:09:
         d9:4b:5e:f8:a9:14:53:59:bb:e1:a5:27:9c:1f:4c:bf:e5:15:
         ba:23:a7:bc:90:d6:56:0f:a1:30:c6:a3:74:20:2d:44:74:49:
         19:31:42:2d:d0:cf:10:f0:06:5e:57:bc:f6:fb:f6:e0:fa:2b:
         d2:90:c0:85:e3:39:0e:36:dd:3c:a8:21:a3:2b:3b:d9:45:00:
         54:e0:ec:1f:a7:39:e1:2f:9d:67:d8:cc:a1:b3:08:f8:0f:16:
         86:12:2d:6a:92:f4:cd:8d:31:fc:86:ba:24:4c:d1:2f:9e:5c:
         fa:b2:e2:6a:73:bf:e8:2f:ae:94:c9:17:c1:22:1d:01:94:e1:
         9c:d0:70:df:42:fb:c9:93:16:b3:2a:53:6b:11:82:53:0e:a0:
         fc:e8:f3:c3:bb:74:11:50:b6:b6:9e:6c:ad:98:38:3a:ad:1c:
         07:d1:f5:54:19:2b:c4:2a:1c:5d:69:81:9b:0d:41:97:e8:ae:
         92:75:30:9c:0a:5f:f5:8b:4c:7e:bd:92:fe:1a:9e:1e:7f:ce:
         ee:17:95:d9:1e:23:78:da:7a:3f:6c:f5:40:0f:f1:66:a5:13:
         ea:77:d7:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----