Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65e1c954-67fc-4b1c-85ea-8f2b257fd37b/9f4457ad-a0b8-340e-8373-0e737863387d.roa
File:                     9f4457ad-a0b8-340e-8373-0e737863387d.roa (raw, json)
Hash identifier:          lBsfUgQxJLvF0j+3dAQ6dLR8vEK9chMRj9dr1X3CSZg=
Subject key identifier:   C5:C7:A0:32:FE:DA:5D:90:A5:97:5A:CC:5D:2C:7E:1C:B3:1C:BD:BA
Certificate issuer:       /CN=65e1c954-67fc-4b1c-85ea-8f2b257fd37b
Certificate serial:       010D0C9F43285848DEA11AB7B57E393538734FA0
Authority key identifier: 9C:E7:3F:7B:17:99:01:C3:B4:2B:A2:DD:CC:D7:2D:80:1E:F8:F4:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65e1c954-67fc-4b1c-85ea-8f2b257fd37b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65e1c954-67fc-4b1c-85ea-8f2b257fd37b/9f4457ad-a0b8-340e-8373-0e737863387d.roa
Signing time:             Thu 13 Feb 2025 14:00:50 +0000
ROA not before:           Thu 13 Feb 2025 14:00:50 +0000
ROA not after:            Wed 14 May 2025 13:00:50 +0000
asID:                     12059
IP address blocks:        2001:18f0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:de:a1:1a:b7:b5:7e:39:35:38:73:4f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65e1c954-67fc-4b1c-85ea-8f2b257fd37b
        Validity
            Not Before: Feb 13 14:00:50 2025 GMT
            Not After : May 14 13:00:50 2025 GMT
        Subject: CN=7bb05bf1-7962-468f-b735-3eb55188350a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:bd:67:a2:64:26:16:d1:33:30:b8:b2:a5:d8:
                    63:74:67:a6:3c:6c:c2:2d:90:2d:e2:9d:fc:6b:80:
                    16:65:56:77:4a:4e:b5:a7:0e:05:6a:bd:1b:e4:1a:
                    0c:35:86:6b:c0:e1:3a:62:1f:53:d6:9c:5f:3b:d9:
                    bc:08:33:54:00:76:40:41:9b:46:2f:70:db:00:af:
                    27:a6:dd:3f:fc:b8:d4:b5:15:a0:1f:f5:b3:9c:69:
                    fa:ac:b9:25:a9:f6:e2:67:96:f0:30:ff:32:4a:ff:
                    a2:f0:5f:29:c1:88:76:78:95:31:70:ca:d3:9b:36:
                    0b:69:69:0a:70:48:48:1d:6c:8b:d6:91:dd:3f:94:
                    67:08:64:21:fc:a4:7d:ab:61:14:2b:88:c1:cd:eb:
                    5b:86:17:2e:79:38:2d:62:23:1c:9f:ed:ed:61:76:
                    39:57:7f:f6:f0:60:d3:78:99:7b:4d:4e:f3:69:86:
                    15:c6:2a:32:10:73:a6:1f:04:aa:65:16:fe:da:5f:
                    cb:df:c9:64:2d:d8:5f:6d:ec:a2:49:d9:33:0f:66:
                    a6:d2:e5:fc:d3:4b:a8:62:de:1e:b9:a0:c4:66:07:
                    e8:d8:a1:6d:6e:5e:d5:d8:8d:49:0b:da:9d:dd:09:
                    fa:f4:0f:0e:46:97:19:12:7c:54:12:44:eb:9b:d4:
                    29:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:C7:A0:32:FE:DA:5D:90:A5:97:5A:CC:5D:2C:7E:1C:B3:1C:BD:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65e1c954-67fc-4b1c-85ea-8f2b257fd37b/9f4457ad-a0b8-340e-8373-0e737863387d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65e1c954-67fc-4b1c-85ea-8f2b257fd37b/65e1c954-67fc-4b1c-85ea-8f2b257fd37b.crl

            X509v3 Authority Key Identifier:
                keyid:9C:E7:3F:7B:17:99:01:C3:B4:2B:A2:DD:CC:D7:2D:80:1E:F8:F4:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65e1c954-67fc-4b1c-85ea-8f2b257fd37b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:18f0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:28:eb:dd:c9:b5:91:49:2e:3a:71:12:60:aa:3c:50:e7:f6:
         27:99:40:c9:dd:24:17:e2:c3:c0:6f:a7:c8:6f:b7:d3:d2:bd:
         82:d7:58:00:7d:0f:20:b9:09:cd:b3:50:c9:df:13:08:1d:29:
         ea:7a:c4:92:be:31:c1:d3:ce:c0:cb:2d:dc:10:1d:44:ab:78:
         e0:02:c6:0e:32:db:3c:ad:52:5b:57:29:fe:87:0b:a4:de:5b:
         65:93:8c:a4:62:dc:b4:64:10:5c:a7:17:46:b3:3c:f6:ad:30:
         e9:d2:b8:fc:79:55:10:67:2a:ea:1d:21:df:cd:b3:77:ee:0a:
         c6:4e:7c:ae:41:c2:44:13:8e:47:b9:ec:94:4d:8b:25:d0:1c:
         16:42:ab:3b:5a:bd:c8:12:6a:80:f0:8a:6c:f6:5a:4b:93:8d:
         42:24:b6:28:bb:54:dd:bc:97:a9:cd:4c:c9:6a:95:36:6e:5f:
         69:a9:5f:dd:97:12:57:8c:c1:8f:11:fd:18:a8:07:a8:56:b3:
         e9:81:11:b4:a6:5b:ba:85:54:04:0d:92:8d:1c:61:82:e3:e1:
         a1:36:90:f8:8c:e0:38:86:55:89:50:f9:e0:fe:c2:38:54:8b:
         4f:03:07:d6:9e:02:db:c8:6e:83:96:d9:f2:bf:6f:3b:66:05:
         ec:28:38:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----