Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/2ddcd419-f09d-3a08-94c4-01bab2f82911.roa
File:                     2ddcd419-f09d-3a08-94c4-01bab2f82911.roa (raw, json)
Hash identifier:          2A4+dMEKB/mhdiRAOJp+4h/UiR6zwBdoKjCtYgXZnj0=
Subject key identifier:   05:79:13:2D:09:DF:11:7C:2F:1E:75:19:4B:46:03:C5:84:E5:7C:4D
Certificate issuer:       /CN=65506c68-611f-46ed-9e78-36da39f8ee7d
Certificate serial:       010D0C9F432858497279ABFBD9D9E71091B04100
Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/2ddcd419-f09d-3a08-94c4-01bab2f82911.roa
Signing time:             Mon 07 Apr 2025 13:00:59 +0000
ROA not before:           Mon 07 Apr 2025 13:00:59 +0000
ROA not after:            Sun 06 Jul 2025 13:00:59 +0000
asID:                     5769
IP address blocks:        2607:fa4a::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:72:79:ab:fb:d9:d9:e7:10:91:b0:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d
        Validity
            Not Before: Apr  7 13:00:59 2025 GMT
            Not After : Jul  6 13:00:59 2025 GMT
        Subject: CN=dedcf2f4-e383-4bbf-9181-7e10d577b3a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:b4:d0:0b:a2:f4:d8:7b:6a:ea:e1:76:5c:5d:
                    2e:79:51:5e:32:58:67:89:bc:a9:de:b3:d1:6b:41:
                    eb:f8:31:1c:99:63:43:e4:34:cf:b0:7c:21:20:9f:
                    d3:e9:52:71:85:2c:b1:e4:3e:0e:e4:57:fc:33:75:
                    27:63:6b:e1:f6:b7:37:a1:2b:0f:7e:1c:93:52:3f:
                    6d:a4:28:ef:be:27:f8:9b:32:4a:2d:12:29:ea:eb:
                    8c:38:a4:3d:30:82:3c:14:bb:eb:ff:a9:36:a7:44:
                    24:93:07:58:30:4f:3f:e2:f8:e9:e0:99:0a:ed:e5:
                    71:d4:e2:7a:f7:49:88:e5:5a:89:45:c9:9f:80:8b:
                    81:6c:9d:f6:93:a8:5a:3b:fa:83:81:36:7a:5a:ee:
                    bf:fd:94:f9:ed:ca:77:fa:2d:2d:37:ba:ff:db:bf:
                    d0:7b:2d:11:4d:54:cd:aa:3a:77:b4:43:34:0b:0a:
                    3b:ef:b7:8f:06:c4:ed:cf:e0:dd:01:ff:29:b2:0a:
                    d5:ce:0d:bb:11:89:83:6c:73:8e:1a:90:c3:fe:26:
                    09:ee:c3:9e:3f:67:88:ad:99:1e:2a:7e:71:67:a5:
                    e1:6a:54:55:90:f0:a2:1d:3f:c1:60:86:98:c9:42:
                    cb:89:66:b2:29:ce:3b:8d:59:7e:19:b9:ec:e6:f0:
                    1d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:79:13:2D:09:DF:11:7C:2F:1E:75:19:4B:46:03:C5:84:E5:7C:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/2ddcd419-f09d-3a08-94c4-01bab2f82911.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl

            X509v3 Authority Key Identifier:
                keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fa4a::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:49:94:45:3d:5e:01:54:37:3a:28:2d:8b:37:91:eb:6f:fe:
         b4:2c:cc:b6:a6:59:b5:ac:e3:94:0c:12:90:bf:66:0f:21:55:
         4c:ed:b2:04:64:12:a8:78:b7:b0:c7:2f:00:fe:07:d1:43:9a:
         8b:9a:ed:e0:6d:de:00:86:73:4f:d9:90:3a:96:90:dd:e3:bd:
         83:e2:ae:ff:8c:8d:82:48:53:cb:11:96:1d:d7:2e:02:d9:6a:
         36:b3:28:2e:be:a1:c3:d1:6c:dc:61:0f:1b:d0:ca:94:fd:9f:
         ec:20:63:51:47:f8:2b:8c:b7:2e:5d:bc:b1:46:08:d5:ec:96:
         cc:7c:b4:12:f1:dd:89:47:9e:3b:13:4b:05:b5:1e:fe:c7:05:
         cd:9b:35:9a:af:0d:f9:e2:cd:dd:53:7b:c5:9b:1d:2a:f9:25:
         ce:87:ef:47:9e:ee:d2:7e:43:8b:51:03:48:8d:50:ca:ac:18:
         4d:12:13:2f:56:3b:a2:09:2e:dd:c3:24:db:68:0e:30:89:82:
         ed:fc:55:cf:33:e9:6e:24:46:44:9a:cb:6f:de:8f:5d:e7:7e:
         4a:74:c7:54:81:08:74:c6:2f:0c:33:ab:8a:85:5d:0d:04:5d:
         7b:78:d6:da:1a:f7:f3:fd:13:9c:1f:94:60:ba:6b:cc:a1:83:
         44:ac:e3:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----