Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/611eabe3-6a98-368d-aab8-957eed480ad5.roa
File:                     611eabe3-6a98-368d-aab8-957eed480ad5.roa (raw, json)
Hash identifier:          oYbOxYXF2fkHzFdXndcIf65gek1LMZ0rIXB9OfJbDUk=
Subject key identifier:   75:1D:DB:6D:D1:8E:FE:57:BC:3C:BD:6D:10:FE:7F:07:FD:89:5F:80
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CAFE405A086E72C41593600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/611eabe3-6a98-368d-aab8-957eed480ad5.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33651
IP address blocks:        2603:3024:b00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:af:e4:05:a0:86:e7:2c:41:59:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=0484f6b8-fe63-4c0d-98a7-7848e2c63544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:e9:52:5d:2f:31:98:11:64:f0:91:b4:44:5d:
                    19:69:64:cb:c9:ea:22:59:d4:4d:72:25:7c:21:d2:
                    08:55:9e:3c:bd:91:b9:43:47:4d:09:66:57:bc:70:
                    1a:4c:61:dd:c7:34:3d:cc:83:7b:32:cd:b2:2c:d5:
                    f6:6d:2c:ab:c3:db:09:3a:9d:ec:a6:e3:ed:24:6d:
                    5f:93:30:c4:ce:1a:90:fb:56:6f:09:f3:7f:5a:ab:
                    43:1b:b3:cc:79:b5:18:0a:10:8f:1b:ca:6f:6e:df:
                    37:38:79:e6:b8:f8:05:2c:b0:84:22:53:19:8f:b3:
                    eb:95:cd:36:d9:63:92:aa:f0:83:bc:a3:38:05:ae:
                    dc:ed:2c:8f:8a:6b:25:08:d9:ed:5b:82:a1:7a:30:
                    b1:e0:a2:b3:ce:06:72:27:d2:ae:0d:74:65:2a:4e:
                    3d:e0:1a:8a:4b:6e:a5:4b:07:f8:ba:31:aa:c4:f8:
                    97:48:9f:32:29:c9:34:f7:1f:08:82:7d:c0:f6:b9:
                    22:c8:74:a5:7b:f0:a8:10:04:d7:fc:4f:f2:74:5c:
                    eb:70:31:b2:76:10:e1:d1:78:c0:1c:ea:c6:ff:6c:
                    6b:1e:ee:d1:16:42:5b:b7:70:f7:ad:c4:12:03:0d:
                    07:53:39:f3:80:89:fa:58:ba:c3:aa:bd:f5:7b:fa:
                    c7:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:1D:DB:6D:D1:8E:FE:57:BC:3C:BD:6D:10:FE:7F:07:FD:89:5F:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/611eabe3-6a98-368d-aab8-957eed480ad5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:3024:b00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:87:da:62:33:b4:3c:59:5c:db:be:09:ca:46:bf:48:b9:36:
         4a:c2:6f:5e:33:de:db:34:05:62:c5:21:0a:b8:57:c8:c3:97:
         9d:6b:72:31:8a:fd:0f:9e:13:b4:37:f1:9a:ec:86:15:66:4b:
         7d:8e:e0:6d:22:30:03:f5:e0:25:1b:4a:0d:37:b7:d3:5e:29:
         9c:b4:89:78:3a:68:02:3c:40:58:23:99:08:ea:4b:b5:19:f5:
         a6:ac:23:68:ad:1d:35:ca:09:5d:63:9d:45:8c:09:59:bf:5d:
         70:90:1b:95:fc:e8:e7:a2:a4:55:0c:01:c1:83:66:73:54:97:
         06:1e:ba:31:d3:52:be:2e:93:f4:a6:6c:f7:98:9e:8c:0b:9b:
         9d:e2:c8:4b:d2:dc:db:3b:2d:58:ad:32:d7:1d:2f:9e:af:53:
         45:dd:4f:4c:14:a2:b2:13:ce:d2:1f:5c:f6:4a:38:36:25:4f:
         27:81:49:b2:bd:81:b9:50:58:5a:ce:2a:9e:45:09:21:70:b3:
         8f:43:64:3d:f7:31:e3:35:32:15:c0:15:a9:8d:27:19:ed:fd:
         49:af:90:b7:47:e7:01:57:4b:59:ba:ad:78:cb:5c:67:40:7f:
         d3:85:cc:8e:a1:de:21:24:7d:c5:6b:84:d6:be:e0:a3:c6:d3:
         75:d8:2d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----