Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/5ea233cc-40a0-39be-a806-47d7ac8801a3.roa
File:                     5ea233cc-40a0-39be-a806-47d7ac8801a3.roa (raw, json)
Hash identifier:          RicM3hoGsa8kq1NMc+VZjEbtAZCunNE/pQYFPa0ZoiY=
Subject key identifier:   25:8B:17:E6:CD:11:EC:7F:43:71:C9:E7:72:13:0D:DB:C4:1C:2A:C0
Certificate issuer:       /CN=4eab7524-ab79-46c8-aea6-96b100eb245d
Certificate serial:       010D0C9F43285849797437925CAA48B06B7C70E0
Authority key identifier: 02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/5ea233cc-40a0-39be-a806-47d7ac8801a3.roa
Signing time:             Thu 10 Apr 2025 01:00:46 +0000
ROA not before:           Thu 10 Apr 2025 01:00:46 +0000
ROA not after:            Wed 09 Jul 2025 01:00:46 +0000
asID:                     400097
IP address blocks:        2606:3d40:c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:79:74:37:92:5c:aa:48:b0:6b:7c:70:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eab7524-ab79-46c8-aea6-96b100eb245d
        Validity
            Not Before: Apr 10 01:00:46 2025 GMT
            Not After : Jul  9 01:00:46 2025 GMT
        Subject: CN=ff649abf-4739-4503-882c-2259f16016a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:07:47:de:0c:74:67:a3:e3:3f:3e:8b:37:59:
                    6a:06:fb:da:aa:7d:9a:49:e1:27:b8:40:02:60:b7:
                    73:98:49:3c:d1:b8:74:21:99:88:7a:56:36:55:06:
                    31:ca:95:dd:9a:d6:a6:8c:ee:4a:4c:a6:44:bf:59:
                    c9:44:34:e2:be:91:4c:19:42:24:82:de:3c:28:b4:
                    ee:0b:c3:2d:84:b7:9d:a0:b0:11:af:b6:32:76:06:
                    9c:0f:b9:50:ac:1c:34:c7:e2:0e:95:d9:49:a3:f9:
                    c3:77:9b:97:f3:a1:90:0d:3b:28:bd:f3:be:4b:24:
                    ce:86:70:81:1b:66:85:53:83:24:56:ae:f1:4c:d2:
                    6b:04:ee:92:8e:e2:45:aa:f5:2b:28:0a:8d:8f:59:
                    d4:6e:48:f6:cb:59:c2:25:5b:86:db:5d:56:d2:c4:
                    7d:26:ec:e9:30:fd:25:16:01:ae:b7:0a:5c:be:2f:
                    77:28:81:fa:4a:27:12:f2:b9:a9:2f:dc:82:d2:42:
                    19:0f:17:13:43:03:e9:b1:98:fe:97:18:ce:00:14:
                    f5:8c:6f:af:ca:8b:90:4a:3f:fd:0d:76:3e:3a:32:
                    0d:29:7c:c3:b3:c5:77:83:8b:46:c7:ce:47:a9:19:
                    39:b5:23:4e:f9:5a:30:0e:6f:79:04:11:f5:7a:bd:
                    29:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:8B:17:E6:CD:11:EC:7F:43:71:C9:E7:72:13:0D:DB:C4:1C:2A:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/5ea233cc-40a0-39be-a806-47d7ac8801a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl

            X509v3 Authority Key Identifier:
                keyid:02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3d40:c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:09:2a:76:72:e4:8d:26:28:43:b4:0a:aa:51:0d:9e:d7:3b:
         2a:9a:a8:be:57:6f:87:48:6e:fe:26:eb:8d:4d:ae:29:24:9f:
         70:75:d7:74:7b:32:aa:dd:82:c2:90:d3:42:cc:84:13:07:9c:
         9d:c3:bd:33:58:27:d2:98:ed:65:14:03:99:3c:02:a3:7f:64:
         70:51:5e:46:e7:d2:e4:c1:d1:5e:ae:d7:b9:de:27:05:34:aa:
         7b:56:5a:66:8f:de:f8:46:54:6d:4a:31:1e:63:11:a2:bc:c8:
         c7:52:84:72:6d:08:28:ef:a2:bf:9e:58:02:fb:da:84:fb:cd:
         70:f4:b4:50:45:c4:0c:cf:2b:d6:25:e0:20:98:d0:14:6b:7a:
         4e:97:ff:a1:2a:f2:cb:43:68:5f:44:9f:f2:52:ec:34:35:76:
         8e:17:b6:8c:f9:84:96:6e:de:b4:a3:83:4a:60:8a:6a:93:0f:
         69:38:4a:c0:d8:8f:fd:8d:6e:e5:56:f0:d3:85:33:ff:fd:88:
         ab:3e:66:3c:17:a9:85:27:5f:98:59:d1:1a:32:4a:cf:6d:8d:
         40:24:04:a3:2b:1d:ff:90:4a:c8:e9:d7:08:b6:28:c3:88:7c:
         f9:4b:66:ad:24:e1:d1:3a:55:7d:23:96:76:e0:66:ad:1a:2f:
         70:dd:ac:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----