Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/7b0dbb72-cc3c-385f-8785-fab9294749a1.roa
File:                     7b0dbb72-cc3c-385f-8785-fab9294749a1.roa (raw, json)
Hash identifier:          9xzFamw0OVUCL1D+YHysd7btM3T/hR7kAjLO1/z6yqg=
Subject key identifier:   E3:60:14:F2:E6:C4:80:2A:33:D7:CE:B6:F4:1A:4B:4A:F5:A5:5D:1B
Certificate issuer:       /CN=4eab7524-ab79-46c8-aea6-96b100eb245d
Certificate serial:       010D0C9F4328584979743777CF1CAE2835723E40
Authority key identifier: 02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/7b0dbb72-cc3c-385f-8785-fab9294749a1.roa
Signing time:             Thu 10 Apr 2025 01:00:46 +0000
ROA not before:           Thu 10 Apr 2025 01:00:46 +0000
ROA not after:            Wed 09 Jul 2025 01:00:46 +0000
asID:                     400097
IP address blocks:        2606:3d40:a::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:79:74:37:77:cf:1c:ae:28:35:72:3e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eab7524-ab79-46c8-aea6-96b100eb245d
        Validity
            Not Before: Apr 10 01:00:46 2025 GMT
            Not After : Jul  9 01:00:46 2025 GMT
        Subject: CN=dc70028b-26c7-4bac-bb20-08969550c71b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ea:19:cd:65:87:3f:08:4d:36:df:9c:e8:67:
                    52:53:54:7b:04:e6:ed:09:cc:c1:d1:35:50:cc:8a:
                    6c:0f:c0:d4:1a:59:56:f7:54:18:0e:a2:a8:fe:d8:
                    b2:7f:33:3f:eb:03:de:5f:96:83:d7:5b:8a:18:00:
                    04:90:09:e7:f5:49:ac:31:4c:00:12:4f:a8:ee:f5:
                    ee:95:a3:65:a8:4c:91:c4:ac:a3:9a:cb:1c:40:16:
                    20:9e:2b:f3:bf:2a:d6:c5:12:12:56:51:ce:95:05:
                    03:7c:16:38:dc:9c:40:07:41:6e:a0:59:87:2c:80:
                    8a:b3:bf:bf:a9:e6:dd:64:39:b5:ce:0d:e2:87:79:
                    f9:86:4a:13:58:a0:8e:5e:1e:f5:bc:a1:f1:18:b4:
                    d7:f5:b6:66:51:3a:ce:da:c8:c8:90:0d:c5:0d:62:
                    2c:f7:39:d7:fb:53:92:6c:72:3b:45:22:70:33:67:
                    04:8a:da:f0:a2:a0:17:cd:ac:e5:e0:53:67:ee:36:
                    27:cb:85:4d:30:ce:c7:ec:3c:6c:8d:0c:94:f1:8f:
                    92:14:70:50:9f:35:60:b6:9e:c5:6b:d3:ba:56:7e:
                    ae:c9:94:10:d2:47:22:df:d9:25:26:dc:d0:2b:c5:
                    25:de:c0:00:62:71:39:68:a6:8c:ed:34:45:f7:25:
                    85:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:60:14:F2:E6:C4:80:2A:33:D7:CE:B6:F4:1A:4B:4A:F5:A5:5D:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/7b0dbb72-cc3c-385f-8785-fab9294749a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl

            X509v3 Authority Key Identifier:
                keyid:02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3d40:a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:69:25:37:ec:5a:f8:ec:c4:58:77:d4:9c:57:84:6b:54:a8:
         fc:fe:43:47:a6:b3:e0:18:93:2e:85:e3:b0:e6:25:be:84:51:
         2f:29:c0:72:52:b9:18:d4:da:5d:fc:2b:1f:9f:2d:0e:6c:ad:
         6f:78:d9:d8:d3:f2:ae:ab:f1:b3:97:a0:3e:c2:a3:dd:52:5f:
         7a:f7:4f:f4:fb:b5:60:f2:c8:e4:bb:89:88:4d:be:cf:99:b9:
         55:8d:b1:63:95:75:1f:0f:92:9c:60:68:5e:7c:c0:ea:67:a1:
         00:c4:e6:5e:a6:65:98:d3:00:77:9e:31:a5:09:6f:08:af:da:
         3f:9f:99:66:5d:de:41:e8:dc:bf:78:a1:69:ac:4a:5b:78:62:
         b1:17:7e:eb:28:59:04:f3:9e:dd:a4:20:bf:1c:77:5b:59:35:
         42:fd:df:19:36:69:90:6f:79:0e:05:d5:fe:b8:aa:96:4d:e0:
         e2:32:4b:c7:9e:86:2f:be:23:94:e7:ad:17:ed:51:34:ef:3a:
         34:ae:5e:cd:d9:1d:36:f3:b3:ed:3f:25:ef:7f:fa:c6:79:6c:
         98:3e:17:cc:ee:0c:0c:ce:00:d9:aa:55:7f:ff:c8:b2:87:6a:
         4c:74:d9:87:a4:f9:63:49:e3:44:70:67:b2:ec:25:74:e6:3e:
         b6:6e:70:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----