Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/8c951231-be71-33fa-9b06-cbad33367c84.roa
File:                     8c951231-be71-33fa-9b06-cbad33367c84.roa (raw, json)
Hash identifier:          OUOqBboXALQw3KDUGc7/Xn/ieF3asqwKSIyxw/wc57E=
Subject key identifier:   82:BF:3D:3E:A6:BF:55:F5:42:B8:31:8C:E0:D8:A6:99:F3:07:1B:80
Certificate issuer:       /CN=ad6556d7-60a4-4318-9d11-464fb8396d3e
Certificate serial:       010D0C9F432858493D73F6DAAC203C2CE5B77800
Authority key identifier: 5D:C1:FD:9A:63:85:C1:8F:46:52:4A:B8:C4:62:F5:34:24:BC:AF:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/8c951231-be71-33fa-9b06-cbad33367c84.roa
Signing time:             Wed 19 Mar 2025 13:11:47 +0000
ROA not before:           Wed 19 Mar 2025 13:11:47 +0000
ROA not after:            Tue 17 Jun 2025 13:11:47 +0000
asID:                     395418
IP address blocks:        2001:500:30::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3d:73:f6:da:ac:20:3c:2c:e5:b7:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad6556d7-60a4-4318-9d11-464fb8396d3e
        Validity
            Not Before: Mar 19 13:11:47 2025 GMT
            Not After : Jun 17 13:11:47 2025 GMT
        Subject: CN=a7d5436f-ced8-49c8-9040-6bcc3fb26546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:23:7d:6e:5e:95:70:80:82:a8:58:d0:42:64:
                    ab:a0:fd:11:51:93:c2:56:3f:ab:4e:57:88:57:90:
                    e2:a2:6f:87:f8:b6:fb:00:8b:74:b6:96:37:c8:1e:
                    71:87:e7:ed:92:f1:ef:12:1a:4a:d5:28:3b:e7:ef:
                    a8:3d:8c:47:29:c7:db:25:99:02:4b:f3:ff:fa:74:
                    c1:b5:af:63:85:d3:fc:7d:74:80:f3:12:db:2e:26:
                    91:30:4d:6b:a4:0c:32:6e:b6:53:30:f3:15:75:62:
                    8c:d3:76:16:18:5e:bf:1c:05:d9:1a:c2:2e:1a:d0:
                    15:98:c3:e1:90:25:a9:46:0f:9a:4b:4d:40:99:b4:
                    b3:cc:ed:a6:de:e7:9a:d1:ee:bb:88:c5:b8:12:95:
                    42:2b:f7:75:5c:06:48:9e:89:47:a4:c5:78:b7:57:
                    97:49:bf:e8:99:97:fd:7b:01:2a:65:9b:b8:70:98:
                    50:36:5c:4e:67:a6:50:64:00:51:01:79:d0:f8:a9:
                    68:98:50:68:b5:3a:88:68:a9:93:5c:18:4e:29:54:
                    ec:8f:c5:35:91:64:41:ec:ea:93:a7:29:85:95:f9:
                    76:a7:84:2e:94:57:db:f4:92:35:6c:48:3f:0a:32:
                    0c:e1:4c:ae:56:53:e1:69:ad:da:e7:2f:78:c5:1f:
                    4a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:BF:3D:3E:A6:BF:55:F5:42:B8:31:8C:E0:D8:A6:99:F3:07:1B:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/8c951231-be71-33fa-9b06-cbad33367c84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/ad6556d7-60a4-4318-9d11-464fb8396d3e.crl

            X509v3 Authority Key Identifier:
                keyid:5D:C1:FD:9A:63:85:C1:8F:46:52:4A:B8:C4:62:F5:34:24:BC:AF:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:30::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:4e:43:04:98:3a:bc:e6:f7:f2:93:5e:ae:27:d7:8b:6f:4a:
         44:5d:e5:36:05:b9:4d:ef:de:e9:1f:58:d7:83:f4:f9:dd:e1:
         30:4c:ba:10:84:d1:28:08:54:45:30:aa:0d:d4:18:9c:e5:61:
         91:4b:54:cc:ea:f6:c1:d8:55:83:f4:d2:7e:d9:c6:75:18:ae:
         48:0c:0f:bf:6e:35:83:72:d8:a2:ec:82:26:00:6b:20:01:e7:
         54:d5:5d:b8:71:24:67:be:f8:0b:69:a0:82:25:e6:31:0d:09:
         af:78:eb:f4:bd:78:40:4a:8d:3c:20:9e:0f:90:db:11:7b:c2:
         09:18:a8:39:d9:db:ff:15:20:cc:e8:ca:89:60:b2:5b:e2:c3:
         26:a3:66:78:a3:e1:b3:a3:70:0d:4d:0a:d2:ae:c1:21:28:7b:
         1c:bf:55:63:b3:cb:59:9d:3f:e4:e6:c2:90:f4:3b:25:59:e4:
         ab:3c:62:79:f5:00:c8:0e:7a:5b:34:ec:97:73:71:3c:22:e2:
         02:3a:37:00:7d:fb:92:d2:26:b8:0e:0d:ae:8a:89:0f:e4:01:
         45:46:b7:95:64:2c:04:df:82:03:5f:b8:8a:e6:f0:7e:3e:a0:
         ca:32:3f:d0:57:19:5f:e0:da:49:c3:6a:a5:ad:af:2f:83:8b:
         18:a3:58:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----