Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/b20b8405-c0e6-324c-b6f1-03d0a83140b0.roa
File:                     b20b8405-c0e6-324c-b6f1-03d0a83140b0.roa (raw, json)
Hash identifier:          Yw8V8085P6/XtNTQ2X+sAjRukfJn2qwSAoy6Zox5CX0=
Subject key identifier:   9B:AA:BC:E8:0B:14:B4:5C:23:BC:93:76:FB:09:16:E1:91:DB:42:1B
Certificate issuer:       /CN=7bbee9b1-1b33-4951-a617-ecb80d9bad99
Certificate serial:       010D0C9F4328584930DE792E4FFBF01981ACAC80
Authority key identifier: 29:22:F7:E2:F2:74:93:2B:5F:CC:A4:03:B3:FC:52:65:E7:86:C2:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/b20b8405-c0e6-324c-b6f1-03d0a83140b0.roa
Signing time:             Sat 15 Mar 2025 01:00:39 +0000
ROA not before:           Sat 15 Mar 2025 01:00:39 +0000
ROA not after:            Fri 13 Jun 2025 01:00:39 +0000
asID:                     396982
IP address blocks:        2607:9f40::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:30:de:79:2e:4f:fb:f0:19:81:ac:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bbee9b1-1b33-4951-a617-ecb80d9bad99
        Validity
            Not Before: Mar 15 01:00:39 2025 GMT
            Not After : Jun 13 01:00:39 2025 GMT
        Subject: CN=9cd2a73f-2e15-4a75-a493-3a3d97243c45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:84:b7:a3:df:ce:1e:1a:d9:dc:76:ae:1a:c2:
                    f5:de:41:f2:dc:0f:e5:d5:e1:7f:c2:1b:33:2a:40:
                    11:0c:e2:06:79:a5:bd:39:97:fd:72:d9:4d:f8:e6:
                    97:a4:f7:ed:5f:13:8e:1c:cf:9e:89:28:56:0f:96:
                    5f:aa:84:ee:ed:50:91:55:e1:62:c3:fc:71:0c:8e:
                    26:ee:12:99:07:dc:29:eb:6f:80:37:32:2f:54:c7:
                    64:00:be:d4:d2:e5:2a:64:7f:e2:26:6f:ad:d8:49:
                    c6:d8:96:bb:f0:ca:01:d4:c0:6f:2a:ed:11:66:66:
                    fa:1b:11:96:cd:12:37:b8:cf:e2:5a:7d:61:be:9c:
                    66:7e:ae:81:b6:25:77:64:b4:7d:b6:67:b8:b1:b8:
                    c8:21:93:4e:8d:4b:b9:a3:cc:b6:a6:64:d7:80:6b:
                    18:f3:ab:02:ab:e2:50:59:a8:68:88:58:5e:ee:e2:
                    41:eb:52:38:3c:aa:25:cd:b6:59:8e:c0:96:77:a1:
                    8e:43:ca:a8:36:08:3b:31:13:1c:d9:6c:03:6a:b7:
                    68:49:d9:b3:e8:48:dc:f1:37:46:f8:94:4b:d0:5d:
                    77:bc:72:54:b0:20:9b:a9:54:ec:5e:d5:e0:08:e1:
                    d9:92:e7:d1:d5:b5:9b:f4:b0:4d:57:8c:8a:41:94:
                    8c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:AA:BC:E8:0B:14:B4:5C:23:BC:93:76:FB:09:16:E1:91:DB:42:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/b20b8405-c0e6-324c-b6f1-03d0a83140b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/7bbee9b1-1b33-4951-a617-ecb80d9bad99.crl

            X509v3 Authority Key Identifier:
                keyid:29:22:F7:E2:F2:74:93:2B:5F:CC:A4:03:B3:FC:52:65:E7:86:C2:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:9f40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:3d:61:e2:b0:83:95:bf:f9:89:55:05:de:9c:d8:2b:a1:6a:
         3b:e1:25:0d:f9:db:9d:7a:47:ee:66:3e:5d:89:cc:45:13:91:
         13:47:17:76:eb:1f:ac:86:49:9c:d9:c9:fd:0e:8d:4d:74:98:
         bb:ed:ef:b3:ee:fc:44:90:ef:9f:96:6a:ca:36:82:11:bc:67:
         7a:e3:3a:86:67:c8:34:fb:0a:d4:a1:26:be:13:2e:10:9e:2b:
         55:c9:8d:82:42:bb:6a:a6:29:8d:f5:6e:3f:78:10:12:80:c5:
         31:1b:0e:18:96:2d:b9:65:df:fa:84:bd:3b:a0:ba:dc:d0:80:
         a3:1b:a9:fd:6b:8b:55:bd:05:00:3f:69:47:06:28:9b:37:8c:
         25:55:2f:aa:6a:a6:b9:fe:0e:e3:9f:31:fc:8b:4c:e2:4c:7e:
         ca:bf:4b:53:84:21:ac:50:59:7b:06:3e:d4:92:13:5e:a1:de:
         2a:e0:74:d0:23:19:e2:ac:37:77:42:00:91:79:f0:d0:7e:ff:
         73:8d:0f:73:72:03:c0:ef:7a:7a:2a:bb:24:b6:05:13:10:7a:
         fe:08:16:b5:3d:36:41:29:1c:bc:37:98:28:a4:99:ac:e1:98:
         ed:e5:cf:fd:d2:f2:0b:a3:89:6a:6b:01:97:2d:2c:ec:2a:a7:
         17:47:33:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----