Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/f169f397-500c-3057-beaa-f359b7034076.roa
File:                     f169f397-500c-3057-beaa-f359b7034076.roa (raw, json)
Hash identifier:          x+1J/9qNP73dQRItrqE7vS827qFSPbJRf8npJcgwJVw=
Subject key identifier:   5A:BD:3F:E0:D0:F6:58:3D:0F:1C:4B:68:D4:DE:1C:A5:66:D2:F4:71
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584968B428419425E8EF960A96CA
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/f169f397-500c-3057-beaa-f359b7034076.roa
Signing time:             Fri 04 Apr 2025 01:00:47 +0000
ROA not before:           Fri 04 Apr 2025 01:00:47 +0000
ROA not after:            Thu 03 Jul 2025 01:00:47 +0000
asID:                     394089
IP address blocks:        2606:f4c0:9000::/38 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:68:b4:28:41:94:25:e8:ef:96:0a:96:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Apr  4 01:00:47 2025 GMT
            Not After : Jul  3 01:00:47 2025 GMT
        Subject: CN=54228b0b-a492-465f-b557-b4b00b59bad2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:06:15:6c:54:fc:89:53:72:55:ba:a2:75:61:
                    70:b0:2b:52:e1:5c:26:1b:a7:74:02:a9:7d:96:14:
                    0b:89:cb:10:8f:72:0c:3e:db:a8:92:b3:01:d7:80:
                    04:2f:ed:4b:30:3c:f8:d8:f6:ed:83:56:12:19:d4:
                    92:ea:8f:86:67:a6:91:ee:23:ca:e0:0b:b8:69:5d:
                    f2:e0:c0:db:48:3e:39:14:ba:c2:bb:a5:1e:ec:4a:
                    c6:be:44:14:90:55:24:87:29:7e:87:5d:5b:4b:59:
                    41:7c:ce:e4:29:17:71:ab:fd:7f:21:85:e3:3b:39:
                    b2:da:6a:db:75:58:2a:79:03:b1:a1:bf:11:ec:e4:
                    76:17:1f:98:80:31:22:ff:d0:48:d5:51:0a:1f:f1:
                    2d:81:26:ac:b2:b2:16:f7:cb:c5:fd:5f:9f:51:dd:
                    ee:fa:93:e1:dd:76:9c:e3:fa:45:fb:77:2c:71:b7:
                    0d:49:2e:45:9d:3a:51:22:93:f3:db:c9:d8:13:39:
                    8e:15:6a:6f:16:93:43:de:74:2f:11:cf:e0:03:43:
                    32:60:4b:6b:fc:2f:84:c3:71:5e:35:9d:f3:12:8d:
                    e3:d8:00:a9:bd:4e:08:35:dc:df:99:29:76:61:96:
                    8e:6f:ac:00:37:43:57:64:88:dc:cb:3f:b0:76:b3:
                    2c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:BD:3F:E0:D0:F6:58:3D:0F:1C:4B:68:D4:DE:1C:A5:66:D2:F4:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/f169f397-500c-3057-beaa-f359b7034076.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f4c0:9000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:7e:77:b2:29:cc:9a:6f:9a:6e:bd:ce:68:5d:9a:8e:53:8b:
         e0:0a:e8:de:13:b1:d4:18:07:28:6a:8e:51:d4:20:48:9d:c4:
         b7:44:68:18:5c:9c:a6:d8:aa:0d:66:fa:ad:00:65:c0:90:16:
         df:56:02:bd:1b:16:92:c8:6e:ec:04:00:27:e0:3c:44:3b:7e:
         1b:fc:48:52:8f:2d:b0:94:35:d0:51:ef:b7:64:bf:c1:8c:f9:
         fa:f9:63:c0:a3:40:4e:f2:a7:60:d9:2f:9e:b8:ba:af:e4:b4:
         45:f3:8b:0f:32:75:ca:de:39:39:ba:af:0e:3b:84:61:59:de:
         91:2a:2e:6b:8b:ce:c5:28:90:46:0e:f4:da:ab:f5:6f:45:45:
         dd:d3:22:38:09:c9:8a:1d:19:78:a2:26:99:ed:27:80:0b:e5:
         83:dd:d9:56:a7:8a:ad:d4:e6:60:f1:ec:56:12:ed:34:1f:8c:
         3a:8a:40:3f:0f:cd:0a:46:84:b9:7e:1f:9d:f4:44:2b:7d:08:
         11:99:26:fa:62:27:d1:d0:da:38:de:f8:8e:a3:75:ec:0a:dd:
         48:c6:50:7f:db:94:c2:48:1d:29:1e:3a:a5:57:32:e2:d1:54:
         ec:7c:16:e6:9d:55:27:fa:90:68:6f:f1:08:4e:c8:62:df:d3:
         34:4a:1a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----