Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/2aca9835-2362-3d49-9ba5-59ad5b0f72a5.roa
File:                     2aca9835-2362-3d49-9ba5-59ad5b0f72a5.roa (raw, json)
Hash identifier:          87rJvE73TTXJWukyQnbcGeTiT6D23hdHFZ/1Jni+P4E=
Subject key identifier:   D8:38:39:15:1F:02:80:51:16:FB:6F:BF:1C:C7:4E:45:6F:C0:37:AE
Certificate issuer:       /CN=65506c68-611f-46ed-9e78-36da39f8ee7d
Certificate serial:       010D0C9F432858497279ABCA83D975A1EEA40400
Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/2aca9835-2362-3d49-9ba5-59ad5b0f72a5.roa
Signing time:             Mon 07 Apr 2025 13:00:59 +0000
ROA not before:           Mon 07 Apr 2025 13:00:59 +0000
ROA not after:            Sun 06 Jul 2025 13:00:59 +0000
asID:                     5769
IP address blocks:        2607:fa4c::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:72:79:ab:ca:83:d9:75:a1:ee:a4:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d
        Validity
            Not Before: Apr  7 13:00:59 2025 GMT
            Not After : Jul  6 13:00:59 2025 GMT
        Subject: CN=10ed87b0-d682-43e5-8bd4-c7f766703ebe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:19:22:e9:46:6d:6c:44:c1:12:6f:6c:c4:d3:
                    d0:29:9d:ef:f4:81:85:1c:8f:31:40:36:47:32:4c:
                    db:c7:42:87:11:78:ec:d9:e2:9d:81:f1:54:f6:8b:
                    15:95:aa:86:6b:d0:02:91:61:ad:9b:ce:e4:fa:a4:
                    24:3f:a2:d3:b8:87:81:d9:a6:e9:f2:6b:27:60:2a:
                    96:fb:b4:71:ab:27:b3:20:d5:d2:57:8b:af:2d:d4:
                    f9:50:97:61:1e:2e:df:98:1e:69:d9:de:cf:5a:ce:
                    ee:e6:7a:40:bc:e3:6e:0c:52:6a:dc:dd:97:76:aa:
                    35:6e:59:14:aa:c3:fa:77:4b:41:45:19:43:2b:7b:
                    27:d2:2e:89:0a:7c:4f:93:6a:d2:b7:ca:38:4c:5c:
                    ff:44:bf:53:95:b4:6a:2e:82:8d:a2:84:dd:60:32:
                    3a:2b:bb:fc:99:fc:18:f7:92:c1:ba:9d:3e:7a:11:
                    35:42:40:c2:16:30:2e:82:59:07:aa:2a:ec:e7:57:
                    f2:bf:5d:a3:20:01:ac:9e:cb:23:0d:9b:15:40:c1:
                    df:99:cf:f7:eb:a5:be:fd:89:4a:c6:20:77:d9:67:
                    b2:c0:fa:48:e8:1b:d1:ea:75:6b:df:c2:61:a5:1a:
                    6a:78:1f:75:82:40:ec:5e:8f:22:70:8b:9f:8e:61:
                    77:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:38:39:15:1F:02:80:51:16:FB:6F:BF:1C:C7:4E:45:6F:C0:37:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/2aca9835-2362-3d49-9ba5-59ad5b0f72a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl

            X509v3 Authority Key Identifier:
                keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fa4c::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:d0:ce:d0:f3:a3:f5:5e:7d:46:ea:22:93:14:5b:8b:f8:6f:
         cb:8c:40:15:d3:00:f8:cd:5a:02:1c:3a:c7:68:3f:bd:83:7d:
         70:f5:88:c1:14:04:9b:31:89:2b:0a:d7:52:4e:c1:4b:88:83:
         cb:01:c9:52:35:e1:05:25:a3:d9:df:93:40:03:43:20:9a:da:
         40:b8:d8:b3:60:1c:c8:00:f9:78:c5:d4:66:86:96:20:1d:5b:
         01:ab:6d:a1:b5:46:83:74:c7:35:93:8f:71:b0:c5:e1:d0:39:
         b1:f7:df:f1:50:96:7f:44:0a:04:39:8b:b9:16:a1:5c:45:b7:
         c9:c8:60:85:1d:82:1e:54:fa:5a:f7:7f:da:f8:02:ec:23:c4:
         92:a7:34:e4:05:1c:aa:a9:3a:12:07:9e:c7:f0:3a:d7:47:bb:
         f9:8e:86:c3:99:95:8c:0a:d6:63:81:2a:3c:de:ce:33:04:51:
         ae:45:78:43:e6:90:f8:87:63:de:2c:6d:a3:93:0a:5d:db:2d:
         aa:c3:9c:60:5d:78:9c:4a:61:4a:31:a6:a8:21:71:83:d1:d0:
         d2:75:e9:27:7e:c7:e1:ea:ac:de:a0:43:ae:b0:1e:4f:76:4c:
         31:38:e6:0c:20:36:2e:54:84:54:e4:31:b5:cc:1a:3e:74:80:
         34:81:73:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----