Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d9b274bf-d29b-3288-90a9-9c6aba67edbe.roa
File:                     d9b274bf-d29b-3288-90a9-9c6aba67edbe.roa (raw, json)
Hash identifier:          er3cdhUG1pHa1Pfdy0BwYu/jODwVIJ8Jv9H92XPwn7k=
Subject key identifier:   B9:6E:6A:7D:42:C2:AC:B2:A2:A8:67:28:D7:88:1C:08:47:50:12:57
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CAEBF8AA53492B4D45C0F00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d9b274bf-d29b-3288-90a9-9c6aba67edbe.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33660
IP address blocks:        2603:2680:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:ae:bf:8a:a5:34:92:b4:d4:5c:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=7ffb8262-f2e1-4449-86c8-f0a79baf59e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:45:1f:c2:84:32:aa:34:31:96:29:42:4a:4f:
                    5b:cc:f3:0d:a4:fb:72:eb:ee:c7:d8:8a:ae:53:1c:
                    24:7b:db:68:d0:0c:87:ee:78:a0:5e:51:2b:b2:08:
                    b2:3f:6b:4d:5c:2f:82:2c:00:2b:c7:d7:58:32:8f:
                    fc:65:dc:b1:dd:d7:05:68:74:43:ce:a3:79:e2:33:
                    d7:25:63:74:c1:e4:26:4a:16:c0:9d:00:68:83:2f:
                    9f:6e:cd:d9:68:e4:3a:1e:f6:f9:b9:11:0f:66:cf:
                    f5:a7:d9:ae:2f:dd:0d:d0:34:19:4e:57:ad:8f:91:
                    dc:10:3f:55:85:15:1b:57:d2:0c:fd:c1:69:47:c0:
                    35:26:fe:a8:f1:36:ff:1a:34:64:52:2d:67:51:0d:
                    e0:f5:17:1a:4a:68:68:e6:8b:ed:f1:1a:4f:a9:47:
                    83:c9:c7:9e:1e:93:1c:bb:05:dd:28:f9:f9:25:2f:
                    c0:b8:b7:66:51:2a:97:78:9c:8d:c3:63:44:7a:63:
                    89:03:11:3e:f8:87:99:c6:6e:1a:fa:11:af:84:ed:
                    b9:65:1a:c2:44:8e:7d:a0:2a:e0:f1:74:6a:5b:c7:
                    d8:03:18:32:5e:cf:84:62:f5:e3:18:82:c9:03:3d:
                    92:1f:5f:ff:5a:d6:dd:14:8c:2f:30:e7:ce:e4:27:
                    00:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:6E:6A:7D:42:C2:AC:B2:A2:A8:67:28:D7:88:1C:08:47:50:12:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d9b274bf-d29b-3288-90a9-9c6aba67edbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:2680:8000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:45:11:fc:48:bc:22:2b:88:ef:a7:7f:8c:7f:0b:0d:ee:d2:
         94:9a:9d:3a:57:68:ff:0a:1f:6a:a5:99:a7:06:79:f8:12:23:
         55:02:9f:de:58:18:95:83:c9:fa:4b:64:19:5f:30:67:8c:4c:
         23:a1:04:b2:50:99:67:db:80:ed:97:d1:3f:e1:78:c9:fc:29:
         b6:72:5c:69:ae:4f:d2:d5:b5:78:82:dc:0d:ae:cc:ae:93:df:
         ef:54:b7:9e:2c:d6:a0:83:f3:6d:69:63:2c:c7:89:45:02:cb:
         c5:87:c5:aa:7a:9e:9e:66:f2:18:7a:a1:e7:9f:36:7c:db:23:
         ea:67:23:27:2a:d7:e6:d5:2c:7c:98:cb:7c:e7:06:63:47:4a:
         62:d3:6f:ac:e9:e8:88:7a:bc:aa:81:18:6f:1b:84:f6:32:5c:
         ac:e2:8a:52:12:c3:2a:dd:1f:b0:f3:fe:3b:c2:ab:9c:83:80:
         9b:c1:8d:9b:b6:c6:79:52:8f:d9:c4:62:a9:f5:b7:b9:c7:24:
         4b:90:4b:75:88:b3:ff:a7:78:ad:f6:1f:71:25:c1:2a:5f:00:
         8d:ba:2e:5a:62:f6:b9:e6:6a:27:6d:8a:b6:33:b4:8f:3a:77:
         24:7a:66:f2:85:cc:c9:73:5c:d9:24:8f:f3:6f:f6:2d:bf:2c:
         14:24:1d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----