Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/74a7fad8-dd78-48ee-b80f-33c16bd717de/7e78094b-5975-3917-802d-0c9f6b97e478.roa
File:                     7e78094b-5975-3917-802d-0c9f6b97e478.roa (raw, json)
Hash identifier:          ZpupDHTVja8FbTHsNmxFB6NP+6dGFhTNV1BHbgry4fM=
Subject key identifier:   1A:58:DC:5C:52:9F:9D:29:DD:8B:A9:86:8D:16:73:71:DD:40:56:E6
Certificate issuer:       /CN=74a7fad8-dd78-48ee-b80f-33c16bd717de
Certificate serial:       010D0C9F432858493ED3D9E69227FE1CF85BAAC0
Authority key identifier: 32:83:79:E9:5E:97:FC:E4:82:97:20:3B:F0:D7:1D:C2:34:93:AF:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/74a7fad8-dd78-48ee-b80f-33c16bd717de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/74a7fad8-dd78-48ee-b80f-33c16bd717de/7e78094b-5975-3917-802d-0c9f6b97e478.roa
Signing time:             Thu 20 Mar 2025 01:00:39 +0000
ROA not before:           Thu 20 Mar 2025 01:00:39 +0000
ROA not after:            Wed 18 Jun 2025 01:00:39 +0000
asID:                     55194
IP address blocks:        2604:5480::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3e:d3:d9:e6:92:27:fe:1c:f8:5b:aa:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74a7fad8-dd78-48ee-b80f-33c16bd717de
        Validity
            Not Before: Mar 20 01:00:39 2025 GMT
            Not After : Jun 18 01:00:39 2025 GMT
        Subject: CN=48dd4dcf-95af-4709-96ec-0290f241f74a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:f5:cf:8e:fb:c8:db:8b:2a:25:4d:5d:fe:38:
                    cf:a7:fc:2c:25:9a:d1:a9:82:1a:0b:cc:c3:eb:27:
                    88:2f:48:5a:49:36:1f:cc:eb:2e:cd:c5:96:d9:64:
                    2c:22:25:0f:7b:49:11:2a:20:5f:f2:ef:b4:31:15:
                    28:1f:ae:d0:20:f0:13:39:5c:13:76:61:2d:db:43:
                    ff:70:fb:1e:22:62:b2:09:38:d8:b6:c6:67:ed:2a:
                    f2:80:fa:6f:41:f2:ca:63:cf:9a:90:bb:ef:5d:bb:
                    b3:18:6d:36:e0:ea:14:b2:67:1a:15:88:ca:dc:a3:
                    db:1a:ff:74:5d:41:b4:6d:83:96:86:94:cb:27:be:
                    41:04:5b:05:96:56:28:5a:fa:0e:f3:86:cb:2c:93:
                    60:8e:18:e0:97:2b:e5:04:c9:a4:9d:5c:f7:d4:43:
                    9d:6b:8b:d8:4e:dc:a3:51:f5:ae:fd:27:6c:9f:32:
                    fd:fb:f0:7a:a4:f7:ef:cc:4b:bb:3f:c8:e9:94:71:
                    f3:50:d6:71:b0:98:4e:85:97:a3:c6:e1:eb:0b:b5:
                    86:7e:41:42:06:30:9e:45:92:8c:a8:73:7d:34:0c:
                    ba:fc:1c:13:8d:c0:51:fa:6d:bd:f8:c2:de:85:31:
                    fe:cb:f7:3d:9c:06:2f:81:65:0f:c5:66:8c:af:6d:
                    da:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:58:DC:5C:52:9F:9D:29:DD:8B:A9:86:8D:16:73:71:DD:40:56:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/74a7fad8-dd78-48ee-b80f-33c16bd717de/7e78094b-5975-3917-802d-0c9f6b97e478.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/74a7fad8-dd78-48ee-b80f-33c16bd717de/74a7fad8-dd78-48ee-b80f-33c16bd717de.crl

            X509v3 Authority Key Identifier:
                keyid:32:83:79:E9:5E:97:FC:E4:82:97:20:3B:F0:D7:1D:C2:34:93:AF:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/74a7fad8-dd78-48ee-b80f-33c16bd717de.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:5480::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:b1:42:9e:d2:70:8b:8e:39:52:d5:f2:5f:6c:89:f8:2b:e3:
         d8:fb:3d:01:d8:89:e3:e4:08:42:f9:f6:12:7e:5b:ae:25:37:
         ad:65:89:5c:2e:11:f1:de:10:fb:d7:27:3f:89:db:1c:88:80:
         49:d9:06:0f:fa:2e:b6:d7:6d:1a:c4:5f:fd:c5:3a:59:a4:b0:
         69:a4:20:c7:24:1d:c4:c1:05:c9:18:fb:27:6d:13:77:10:7c:
         ca:b2:b3:17:4a:20:d5:8c:6a:0a:91:2e:71:1a:c1:db:c7:c3:
         c8:74:a6:b3:58:c2:a0:b5:d1:ca:48:11:8a:3a:9f:d3:2c:1b:
         2f:45:ba:48:fa:a2:67:3c:7f:ff:a1:93:e6:89:8d:f5:5e:eb:
         bd:59:74:f7:07:49:3f:3a:d0:90:22:93:1a:49:66:75:2c:4d:
         ac:3c:3d:b0:e8:54:01:94:6a:23:1f:72:9b:78:54:72:02:9d:
         ff:e4:31:9b:c6:59:24:ce:46:32:4a:e3:1a:d0:d1:fb:8c:40:
         95:ed:39:2b:c5:40:ef:7b:21:70:51:cf:5b:60:a8:f9:4a:9b:
         3b:70:fc:48:bb:66:7a:11:d7:d9:b2:09:fb:72:6c:86:d0:4c:
         91:1c:58:25:8c:b2:90:9b:f3:67:0d:ff:35:75:3b:71:39:6c:
         7d:4e:41:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----