Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a137b01c-8edd-3cda-89a5-ee5f555b6c6d.roa
File:                     a137b01c-8edd-3cda-89a5-ee5f555b6c6d.roa (raw, json)
Hash identifier:          t9i/oEeSw0jhErn1fxaw1q9gesYMXjNww/vEETGgOWU=
Subject key identifier:   2F:16:12:C7:F7:30:BF:6E:6A:FC:B0:A9:DF:3D:2E:C5:43:8E:DB:8A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CB07D71E8CC2C6ABDFFF800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a137b01c-8edd-3cda-89a5-ee5f555b6c6d.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33659
IP address blocks:        2601:8b:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b0:7d:71:e8:cc:2c:6a:bd:ff:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=182fc5af-cd93-43fa-ac90-e79795d21f8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:8a:ea:fa:3b:42:6d:27:23:b9:af:f6:a8:a2:
                    4d:75:a9:ec:27:34:46:96:18:83:21:9b:f7:8e:9f:
                    d6:73:87:0a:e6:1d:1e:c1:15:c0:a4:43:5a:dc:a6:
                    e2:ce:5a:bd:94:67:1d:31:53:57:49:78:7f:88:0e:
                    ab:43:69:57:3c:ae:97:ef:67:28:c1:95:32:f1:9c:
                    45:19:ab:44:a6:2c:ee:d7:ec:9b:cd:4d:d7:26:7c:
                    4c:ad:ab:cb:f2:09:e7:5d:85:ad:a4:2a:1d:4b:fb:
                    34:2c:ed:df:fc:63:2b:fb:00:6b:93:39:50:e2:7d:
                    2b:6c:78:4d:27:6f:41:34:fc:3d:56:6e:93:f3:61:
                    02:da:cf:1f:cd:5d:8e:7c:c7:5a:19:43:e6:b8:90:
                    e8:06:92:cd:b2:43:5c:1f:83:b8:30:8d:f9:b9:11:
                    98:2a:b8:48:a3:11:bb:f3:62:56:93:d1:82:58:26:
                    18:86:4a:65:a8:08:b1:32:00:9e:77:bf:51:ae:46:
                    49:e1:9a:11:58:e5:24:ab:32:ed:bd:77:c7:b1:7a:
                    06:0b:04:a5:8e:1e:3b:9a:4c:87:1f:82:70:82:74:
                    8e:c9:f5:f0:62:9c:ee:7a:71:1f:93:95:ca:00:df:
                    58:15:64:38:43:39:ce:45:b2:1c:9f:89:25:20:3e:
                    9d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:16:12:C7:F7:30:BF:6E:6A:FC:B0:A9:DF:3D:2E:C5:43:8E:DB:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a137b01c-8edd-3cda-89a5-ee5f555b6c6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:8b:8000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d3:3a:d7:6e:a9:7f:e4:f1:21:46:15:09:05:c8:86:10:84:fc:
         6c:45:7a:a5:ec:cf:49:59:f5:b0:6e:ac:72:14:51:14:38:50:
         10:80:49:41:d8:f9:6e:6e:78:62:9d:cf:1b:5e:ed:a5:5d:9d:
         27:19:18:c3:a1:13:67:20:3d:b8:47:db:8e:38:01:3b:3a:2c:
         c6:d4:3f:b0:36:f1:71:25:d1:10:2a:6c:19:15:9f:f8:87:b8:
         f6:17:1a:29:f6:0f:20:00:24:bd:f1:01:60:16:bf:00:f7:2c:
         9f:ee:67:66:9b:d5:a1:61:47:6f:75:5f:e3:13:91:c3:dd:de:
         44:22:37:1d:22:cb:8d:9d:11:28:b7:ea:c0:cb:31:45:d6:12:
         74:8d:0a:60:55:53:67:eb:67:14:75:03:06:29:af:ac:44:64:
         dc:6a:a7:4e:8a:fb:db:17:fe:80:76:a4:1c:be:95:94:cb:03:
         40:fc:61:97:69:46:85:d9:a3:3e:8f:7d:21:d9:bb:93:d3:ff:
         19:fc:af:f1:68:67:6a:4e:c8:49:ec:a0:02:cc:c9:40:ed:20:
         b9:37:4d:35:57:20:a7:1b:a6:6b:fd:71:04:45:e9:67:bc:ab:
         8b:84:7d:b0:f7:97:cd:3a:cd:9f:a6:18:e3:07:6a:a3:ce:3c:
         b7:ee:5a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----