Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a/43c5549b-dc14-309e-bf49-854015bbb2ec.roa
File:                     43c5549b-dc14-309e-bf49-854015bbb2ec.roa (raw, json)
Hash identifier:          iOV31UQADHUNPgtxRr8UJmJSt42LdNrVVWRWgo9ZURQ=
Subject key identifier:   C8:C1:9E:97:CA:66:E5:D3:63:61:13:7B:F2:D5:A6:4C:23:21:EE:FD
Certificate issuer:       /CN=9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a
Certificate serial:       010D0C9F4328584981D45ACCECA8B34B45A21EC0
Authority key identifier: E1:C1:D3:7A:4C:9C:9C:5B:88:AA:59:1C:49:70:60:9B:47:48:6A:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a/43c5549b-dc14-309e-bf49-854015bbb2ec.roa
Signing time:             Sun 13 Apr 2025 01:00:44 +0000
ROA not before:           Sun 13 Apr 2025 01:00:44 +0000
ROA not after:            Sat 12 Jul 2025 01:00:44 +0000
asID:                     40864
IP address blocks:        2604:840::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:d4:5a:cc:ec:a8:b3:4b:45:a2:1e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a
        Validity
            Not Before: Apr 13 01:00:44 2025 GMT
            Not After : Jul 12 01:00:44 2025 GMT
        Subject: CN=4460c376-3faf-486a-9ede-0b94243a9623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b4:f4:53:96:4c:87:b1:4d:d5:a1:49:6a:0b:
                    cb:c0:93:04:92:18:0f:ae:74:03:dd:0c:07:c9:15:
                    6c:aa:6f:bd:aa:16:a9:dc:d9:8d:8e:20:13:50:dd:
                    3e:d5:a8:12:0e:74:9b:c8:61:7c:f1:46:2f:99:a2:
                    8b:65:92:82:14:40:1b:55:b5:11:cc:f1:38:09:16:
                    b0:ba:ed:80:85:4f:92:dc:3a:ac:b3:20:2b:c3:60:
                    7f:cf:f0:5b:90:57:4a:9b:34:ba:12:cb:82:4d:30:
                    e8:5c:34:ca:f2:37:79:5f:ef:d2:2b:01:09:a7:5e:
                    f9:77:a4:f3:30:67:4a:a6:80:41:ac:17:b2:15:a6:
                    97:c7:8f:42:e4:a9:33:bc:c7:a7:20:f4:62:cc:ba:
                    e9:cd:3a:35:7c:b8:98:75:2b:3c:d0:97:98:d9:d9:
                    6a:4a:d9:c9:ba:6a:c5:85:89:e9:9d:4c:ac:bc:ad:
                    20:dd:f4:2c:5d:a8:7c:d8:46:0f:9c:a2:97:80:9a:
                    e4:52:72:ec:b2:5f:b6:07:d4:3e:c0:3e:a0:a8:74:
                    eb:ca:0d:c7:69:3f:37:f4:38:29:36:8c:69:6a:98:
                    3d:56:2f:2e:46:eb:ea:d2:07:eb:d9:ab:df:7b:2d:
                    04:58:3e:24:6d:ce:4b:e9:e1:f9:c8:bb:ad:4a:d8:
                    90:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:C1:9E:97:CA:66:E5:D3:63:61:13:7B:F2:D5:A6:4C:23:21:EE:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a/43c5549b-dc14-309e-bf49-854015bbb2ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a.crl

            X509v3 Authority Key Identifier:
                keyid:E1:C1:D3:7A:4C:9C:9C:5B:88:AA:59:1C:49:70:60:9B:47:48:6A:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:840::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:69:74:24:d5:25:68:87:e2:53:53:a0:09:6e:c5:95:60:ca:
         7a:c9:ed:dc:d4:c2:78:48:f6:6b:c4:2e:3e:1b:f2:83:e0:f9:
         b4:f2:db:7a:de:75:ed:f3:31:60:ef:e5:e8:89:21:f6:43:a2:
         e0:42:7f:6a:5e:d2:c0:aa:6c:8c:d0:29:ff:da:31:49:6b:44:
         bb:a9:46:d3:de:ee:37:ce:61:98:41:fa:42:c3:a1:05:f8:33:
         c2:6b:93:66:f9:ce:d7:3a:b5:06:4c:a8:d5:a9:0f:d7:49:5c:
         37:d3:50:89:95:89:24:74:76:5e:0e:85:eb:63:d8:89:31:e8:
         53:07:d3:dd:5e:00:8e:1d:cb:f8:cf:41:b4:0c:2c:a5:b1:9d:
         18:4d:4f:95:bf:f9:0f:a4:f3:60:bb:49:44:ec:81:17:e2:96:
         78:e8:7f:d7:ed:a6:6e:e6:25:fd:e4:54:4f:3b:52:d0:23:c0:
         af:33:cf:a6:94:4d:64:96:ab:72:1b:4f:f2:34:61:07:34:53:
         25:0b:98:ea:de:b2:44:78:30:04:8d:eb:e0:93:f1:c5:a5:2e:
         8b:f4:16:71:76:d4:7b:76:f4:d3:dd:9f:be:24:62:35:4c:5f:
         aa:3c:8b:a1:d8:e9:84:87:e7:d7:b0:64:91:2a:42:c1:39:1c:
         08:c8:4d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----