Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f4f7d8db-a6a3-3f7b-9da3-7d4674884f20.roa
File:                     f4f7d8db-a6a3-3f7b-9da3-7d4674884f20.roa (raw, json)
Hash identifier:          /noBWLfRjGPOdGXVhHs0x65/iXtflEBnbx3K8u99w+4=
Subject key identifier:   51:B4:7A:D6:3F:FC:59:1E:FE:85:C1:29:40:AB:94:9C:13:96:61:7C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA4C9C1DA1EC241AE8655C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f4f7d8db-a6a3-3f7b-9da3-7d4674884f20.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     7725
IP address blocks:        2601:7c0::/26 maxlen: 26

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a4:c9:c1:da:1e:c2:41:ae:86:55:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=f2419c8c-a14c-4a50-9a77-19e4c1016a26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a5:7e:c6:da:5e:9c:c1:33:95:88:01:e8:32:
                    3c:c6:19:a5:72:b4:6b:18:8e:ee:b5:e3:c6:8e:a8:
                    8e:41:39:b2:dc:74:73:42:2e:34:59:4b:d7:fb:ca:
                    ba:c6:63:c8:26:93:4f:0a:75:36:1a:67:28:80:5d:
                    bc:eb:c8:14:10:7c:18:6c:94:e1:7c:1c:ae:57:15:
                    70:7f:cc:64:27:30:f9:15:ac:e6:7a:84:09:1e:21:
                    59:19:8a:ef:4e:fa:13:f8:80:8f:6b:c0:8b:ac:df:
                    f4:de:a1:91:06:98:6b:c5:ef:bb:4b:8d:0e:3f:cb:
                    85:42:c9:4b:d6:94:3b:a1:ed:ce:f0:a9:f3:95:e6:
                    bd:99:57:3f:18:cc:c3:24:51:7e:3c:62:e6:d7:89:
                    d3:c4:61:c3:f3:a3:e7:b5:64:48:6a:76:5e:b4:5e:
                    03:90:98:f0:0d:12:fb:6d:cd:c9:aa:8c:36:c2:21:
                    81:7e:42:93:aa:83:4c:68:c9:82:73:d4:ba:c5:b8:
                    5a:2e:5a:ca:4a:8f:33:20:ee:fd:37:d6:c6:d7:63:
                    f1:58:55:81:15:fe:72:69:83:d5:5a:f1:e8:cc:cc:
                    aa:eb:43:48:9c:ca:99:16:64:78:61:37:97:46:a4:
                    c5:e2:b3:f0:2f:3e:94:ea:0e:7b:85:32:e3:61:bc:
                    90:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:B4:7A:D6:3F:FC:59:1E:FE:85:C1:29:40:AB:94:9C:13:96:61:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f4f7d8db-a6a3-3f7b-9da3-7d4674884f20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:7c0::/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:a8:83:33:1f:21:a8:f2:03:c3:8e:3d:8e:18:df:46:db:0b:
         9b:05:b3:2a:f8:01:75:17:e8:c2:bd:8f:41:88:5b:b6:5a:be:
         1e:26:49:e3:ce:47:4e:0e:9f:62:aa:86:5a:8e:ac:92:f2:bf:
         41:e9:a6:1e:4c:b5:3d:08:68:08:58:c6:2e:1e:5e:9f:5a:c6:
         7f:b4:06:fd:0f:a2:6b:65:fc:2b:66:c3:06:e4:0b:e7:20:97:
         0d:5c:14:e7:6c:6b:6e:0c:ac:c6:e4:9e:ec:1e:20:ef:b1:d3:
         ea:75:8a:9d:29:54:f3:1e:cf:62:aa:5a:4c:73:f6:e0:72:df:
         b9:be:e9:40:28:2e:87:00:1c:2f:e4:16:da:3f:11:30:ee:26:
         94:9f:aa:78:7c:87:71:4c:26:67:64:4d:b7:39:b0:7e:e1:8f:
         16:07:97:44:08:5c:f0:f1:fd:94:8e:38:4d:a2:b5:5f:9f:24:
         96:b3:96:4b:a9:7e:57:94:f1:bd:fb:3c:ce:41:5d:b9:8f:41:
         c0:09:1e:94:06:01:e4:fd:f6:b4:7d:ea:57:d3:c3:3f:38:a2:
         f9:b1:9a:87:3b:db:1c:30:c3:8b:86:64:d8:d5:69:d6:2d:7c:
         b4:92:ba:5d:a2:91:6e:a2:e2:06:3e:cc:92:05:7e:92:28:fb:
         bc:5c:4d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----