Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/8e29d75c-ea6f-32dc-ad7f-56d0f4a3195f.roa
File:                     8e29d75c-ea6f-32dc-ad7f-56d0f4a3195f.roa (raw, json)
Hash identifier:          yMVY97Ja7AsIaKT73Ou7bG9BbtBKSrf7AjQLirdNkZg=
Subject key identifier:   05:E2:EA:46:03:78:E3:09:DD:73:4D:69:A9:4A:3D:6E:94:FE:51:AE
Certificate issuer:       /CN=cb48baa8-6c83-45eb-b09b-5fbd1e42c57d
Certificate serial:       010D0C9F432858495ABEB81A797FE183664197A0
Authority key identifier: E9:36:DC:58:66:FC:68:02:BF:A6:99:DE:B4:DD:13:5E:4C:D1:27:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/8e29d75c-ea6f-32dc-ad7f-56d0f4a3195f.roa
Signing time:             Sun 30 Mar 2025 01:00:47 +0000
ROA not before:           Sun 30 Mar 2025 01:00:47 +0000
ROA not after:            Sat 28 Jun 2025 01:00:47 +0000
asID:                     237
IP address blocks:        2001:48a8::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5a:be:b8:1a:79:7f:e1:83:66:41:97:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb48baa8-6c83-45eb-b09b-5fbd1e42c57d
        Validity
            Not Before: Mar 30 01:00:47 2025 GMT
            Not After : Jun 28 01:00:47 2025 GMT
        Subject: CN=8fb0016f-8823-4c3f-9db6-c5be03d28f35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:fd:c0:d2:85:a6:04:c5:21:61:7f:c1:c4:a6:
                    d1:df:ad:40:72:fe:a6:7a:bb:cb:3c:0c:35:3d:43:
                    ed:0a:b8:42:0d:77:07:c0:af:0b:a1:67:fb:a4:26:
                    e6:59:92:35:a1:cf:00:23:e6:73:8c:35:99:33:95:
                    cb:8b:f4:9a:08:22:66:cb:49:67:15:f5:09:2f:36:
                    71:38:bd:3e:33:b7:34:0e:f6:9e:e3:d5:b7:b9:bd:
                    03:13:04:5c:8d:63:07:52:26:57:32:e0:80:46:2c:
                    92:55:25:69:6e:03:67:97:06:15:ad:c9:fd:de:38:
                    0e:e4:4e:57:4d:c9:ac:37:df:27:0d:24:70:38:ff:
                    09:83:19:6f:84:0e:7c:d8:7f:a1:c1:eb:dd:4f:d9:
                    df:3c:99:7e:36:e4:f9:f1:b1:9c:8f:f8:a4:99:68:
                    5d:9e:ef:9c:e3:64:0d:64:aa:a8:0f:3e:be:f6:b2:
                    ee:81:63:c9:9d:64:09:94:ed:c8:05:ae:60:f3:f7:
                    fb:57:41:01:5e:c9:e0:d6:2b:9a:54:5d:23:06:17:
                    d7:10:88:2f:fe:a8:f9:5d:dc:9a:d0:29:a3:15:c3:
                    b4:42:b4:5e:b6:1d:81:ed:89:fd:c3:79:83:96:05:
                    97:f7:c9:6f:8b:6c:bd:1f:aa:7e:f2:33:64:83:03:
                    bd:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:E2:EA:46:03:78:E3:09:DD:73:4D:69:A9:4A:3D:6E:94:FE:51:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/8e29d75c-ea6f-32dc-ad7f-56d0f4a3195f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.crl

            X509v3 Authority Key Identifier:
                keyid:E9:36:DC:58:66:FC:68:02:BF:A6:99:DE:B4:DD:13:5E:4C:D1:27:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:48a8::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:2d:bf:22:d2:54:a2:4e:bd:cf:ba:f4:59:9e:23:df:fa:2b:
         b6:fc:22:a8:a0:e7:5e:5c:61:e6:6f:93:4b:a5:31:70:32:10:
         90:e1:22:cd:3d:a5:f0:01:9e:99:48:fa:dd:12:a9:c7:2d:13:
         98:b0:ed:37:ff:38:59:84:2b:75:eb:e9:c2:fb:66:3a:10:47:
         7e:3a:33:2b:60:cc:25:6e:dd:49:20:c4:61:68:39:bc:97:d4:
         05:b1:33:d2:67:a3:89:25:18:1a:a0:d9:bc:21:71:76:ff:1d:
         ac:dc:28:af:55:ab:18:81:86:4d:bd:7f:d1:b8:0f:7a:cf:cd:
         56:0f:ab:5e:d7:52:22:b9:a1:0c:c9:0f:28:95:41:b8:f7:4e:
         16:29:72:21:7b:19:9e:e6:8a:de:1c:c6:8d:01:96:57:d4:0e:
         b0:3c:bd:16:c7:e9:c9:5e:6b:af:fa:6e:c2:63:42:e1:ae:a2:
         60:79:db:a9:6c:5c:b3:d8:f0:d8:c6:8b:64:cf:90:41:52:fd:
         37:9b:70:a6:62:99:b5:f8:9b:3a:0e:dc:9f:ed:74:68:c0:6d:
         6b:2d:9f:b4:ad:37:39:0a:51:27:6f:1e:95:c7:82:94:39:cb:
         59:ce:ae:c6:ea:34:4a:51:08:8e:11:0f:1c:b6:2f:f9:77:f7:
         34:cb:83:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----