Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/1f7e55fd-ffb0-3261-9139-c0fb8997bbb1.roa
File:                     1f7e55fd-ffb0-3261-9139-c0fb8997bbb1.roa (raw, json)
Hash identifier:          QZYbgd+8rbTm1QJkY3vzzmEaBESQUoT73QM/JEexX4g=
Subject key identifier:   89:D5:AC:98:C3:8F:BA:EF:D3:3C:2D:88:08:3E:DD:38:87:98:27:D0
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F43285848E2D10CB39FB0E2EBBD671460
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/1f7e55fd-ffb0-3261-9139-c0fb8997bbb1.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     11164
IP address blocks:        2001:468:1f0c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:0c:b3:9f:b0:e2:eb:bd:67:14:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=84b6c3fb-5341-4db4-981c-fd8af01608f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:d6:c7:d9:16:a2:84:6c:03:75:57:b7:9d:5a:
                    22:5b:01:35:bb:e5:d6:fd:13:38:5a:d4:3b:d7:6e:
                    27:03:5a:24:8c:bc:95:3b:ae:62:06:ad:9a:61:6b:
                    f0:97:60:39:0b:ee:05:c1:4d:58:a4:a6:00:fd:21:
                    de:0b:f2:ea:37:06:53:87:d0:22:b6:98:38:a3:98:
                    71:f4:68:0f:14:06:87:6b:cd:20:ee:12:12:bc:a5:
                    01:43:69:98:d0:55:c7:fc:bb:83:c7:21:00:b1:12:
                    e1:2c:fa:35:22:fe:c5:91:50:0b:12:22:e5:68:e6:
                    d0:d5:57:3a:6c:bc:e8:d6:8e:9d:e8:68:bc:b9:62:
                    63:c0:9f:08:92:91:68:44:86:5a:0a:9c:b2:0f:a6:
                    e0:eb:61:ed:cf:fd:6b:73:a5:e9:dd:22:15:a0:d0:
                    14:57:8b:f0:8e:35:76:b7:19:70:fb:c3:73:0b:17:
                    22:80:74:e6:fc:30:b6:50:4c:28:27:42:cf:f4:15:
                    fb:5a:34:6f:22:9d:d5:ff:7c:a0:fa:3a:5d:0d:ac:
                    41:b0:54:e9:b2:07:c9:cc:7f:88:ad:0d:8d:4e:34:
                    9b:88:a7:5a:df:10:4d:97:a3:26:bb:a4:37:aa:a4:
                    9e:17:89:3c:10:03:6e:77:35:c5:61:06:b4:10:a9:
                    cc:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:D5:AC:98:C3:8F:BA:EF:D3:3C:2D:88:08:3E:DD:38:87:98:27:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/1f7e55fd-ffb0-3261-9139-c0fb8997bbb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:468:1f0c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d0:85:9b:55:f2:ee:e4:74:60:5f:5a:40:1f:8d:08:61:f0:a7:
         f4:23:fa:62:c1:64:a6:40:11:ac:a3:79:27:d8:a8:3b:16:43:
         56:d1:1a:74:3c:4b:95:ce:d2:5d:8d:1a:04:7c:fc:a8:80:84:
         18:ab:cb:2f:06:52:9b:35:ae:16:e0:eb:8e:41:04:54:b6:a5:
         f0:9a:a2:a5:ee:82:83:6c:25:32:cb:cb:57:3c:aa:93:2e:ec:
         2d:e2:9a:2d:3f:f6:45:45:c7:38:d2:11:06:0c:a7:da:e9:3d:
         b2:7f:f0:4a:c5:dc:82:9b:c5:c8:c3:b2:7e:ba:df:b3:9f:18:
         b9:76:60:da:c8:b1:65:7c:7e:db:c2:b0:cf:6e:24:c3:fe:d3:
         e9:43:96:8e:08:74:de:be:2f:a0:5e:cc:3e:f7:9c:8f:8c:6d:
         e2:76:8b:3b:92:33:39:02:a5:9a:fa:d7:4d:9f:99:1f:ac:6d:
         e1:e5:33:c3:27:fe:d6:d3:dc:df:40:53:35:b4:1b:28:c5:c3:
         c3:9e:1b:e4:06:04:57:f6:66:89:2c:8f:8d:12:3f:99:18:07:
         bc:dd:50:64:83:1b:d1:1e:76:d9:52:bb:99:39:56:db:56:c0:
         a6:c8:40:99:79:63:b7:1b:61:8d:59:a8:7b:fc:b6:7e:69:ff:
         98:1e:36:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----