Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/3df1a855-b635-3c69-ab60-aab7634aaaaf.roa
File:                     3df1a855-b635-3c69-ab60-aab7634aaaaf.roa (raw, json)
Hash identifier:          jSU7FHwMaTqQoTfoAMuryoWnUdrYpbTNOLTsSoYZGTs=
Subject key identifier:   FA:88:BB:96:80:91:C4:3B:39:C0:3D:2E:2A:78:FF:50:AA:31:88:0D
Certificate issuer:       /CN=d12ff9c7-ced8-4cc2-b3d5-adf1859a808c
Certificate serial:       010D0C9F4328584940397C103F66FC873DC28D40
Authority key identifier: 5A:CD:BF:B9:70:80:A4:AA:F3:8E:B8:58:29:11:41:07:9C:EE:FD:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/3df1a855-b635-3c69-ab60-aab7634aaaaf.roa
Signing time:             Thu 20 Mar 2025 13:00:53 +0000
ROA not before:           Thu 20 Mar 2025 13:00:53 +0000
ROA not after:            Wed 18 Jun 2025 13:00:53 +0000
asID:                     16509
IP address blocks:        2620:121:5040::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:40:39:7c:10:3f:66:fc:87:3d:c2:8d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d12ff9c7-ced8-4cc2-b3d5-adf1859a808c
        Validity
            Not Before: Mar 20 13:00:53 2025 GMT
            Not After : Jun 18 13:00:53 2025 GMT
        Subject: CN=0c3d9ddb-a4aa-4168-ac22-f86c19e3cc2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:63:87:20:29:25:ee:3b:b0:ba:fd:70:00:52:
                    58:07:63:8f:e3:e8:1c:bf:75:a0:f3:80:90:b5:15:
                    5b:af:91:a3:53:04:5a:7c:31:a6:ff:d0:1d:75:91:
                    68:ae:8d:70:98:b2:d9:b5:50:24:3f:91:98:5e:b7:
                    2b:c6:59:2f:e6:ac:1c:75:ff:94:41:ae:98:df:5b:
                    b4:1b:0d:08:4f:8c:00:41:56:62:5d:0a:37:32:c4:
                    d4:7b:0f:b4:b1:d4:ca:ed:9c:a1:53:69:62:72:91:
                    c4:96:f6:f4:5e:69:e1:7d:18:82:8e:db:17:8a:f8:
                    ba:87:41:da:f7:ba:6a:83:47:5c:12:47:fc:9a:e4:
                    63:6b:21:e3:79:4b:16:20:67:5a:04:b9:68:3e:70:
                    c2:17:66:17:83:0f:23:d1:57:fa:d9:2b:6e:f9:b3:
                    6e:ca:a7:b0:1f:12:c3:da:8d:f3:6d:89:48:ae:ee:
                    ae:35:89:be:12:f9:72:fe:d7:80:d0:06:ad:50:b7:
                    79:eb:84:4a:0d:04:f9:ca:c6:af:09:d8:41:11:f0:
                    43:2b:bc:08:f9:04:96:89:d1:e0:95:e0:ee:67:ca:
                    17:3a:4e:67:69:23:29:03:f9:3f:b6:65:20:50:5a:
                    21:9d:19:f2:90:20:62:80:e4:be:4e:5b:5d:f5:14:
                    d8:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:88:BB:96:80:91:C4:3B:39:C0:3D:2E:2A:78:FF:50:AA:31:88:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/3df1a855-b635-3c69-ab60-aab7634aaaaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.crl

            X509v3 Authority Key Identifier:
                keyid:5A:CD:BF:B9:70:80:A4:AA:F3:8E:B8:58:29:11:41:07:9C:EE:FD:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:121:5040::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:9b:24:46:fb:a0:3a:89:4b:43:85:c8:47:c2:1f:ea:7d:6c:
         5a:07:c6:1a:98:a3:88:f5:0d:0f:51:0e:fa:7e:f6:61:57:c3:
         ec:8b:0f:3d:57:67:d0:0e:4b:10:80:74:01:ed:52:5e:43:59:
         e6:a6:17:52:da:e4:cb:75:7c:48:05:44:f0:74:25:a9:df:27:
         b3:40:fe:f5:4c:68:4a:f5:07:95:4f:a3:f8:f2:22:5a:47:d8:
         19:17:cd:d9:5c:dc:03:ba:38:c0:17:63:4e:b5:3b:c1:d2:3b:
         a7:a9:5c:9d:ee:37:92:4a:9f:98:d7:87:58:63:90:f3:57:d3:
         49:d6:26:8d:80:68:af:1a:7f:69:7d:fb:a9:4c:3b:27:bb:3b:
         e4:1d:8d:bd:01:16:db:c1:9c:cb:d1:70:75:57:eb:9f:10:9f:
         f0:54:ec:42:b9:f8:27:f7:5b:fc:f7:c0:21:d9:b3:e5:9f:39:
         bf:aa:9e:69:ae:90:4c:0d:02:87:4a:43:11:8e:12:b8:56:11:
         99:cf:6b:5b:86:2b:f3:fe:aa:c6:67:e5:4a:06:ac:cc:10:ab:
         d9:13:59:77:f1:a7:66:28:a9:01:1b:db:b5:68:39:2c:61:dc:
         21:5e:45:4c:9f:c5:2c:e9:bc:e4:c1:8d:b6:1d:d7:65:17:1c:
         ef:14:9e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----