Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/2ae8c72b-d5e7-3405-bc70-83de00dbcc38.roa
File:                     2ae8c72b-d5e7-3405-bc70-83de00dbcc38.roa (raw, json)
Hash identifier:          CzK+zFtdae2a5ddokk6oS5fAm4Z+V1+HWDvtobg7DLg=
Subject key identifier:   C6:E4:D0:5D:F3:C9:01:22:F9:B5:48:3C:22:3A:1E:30:9E:4D:47:A7
Certificate issuer:       /CN=ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11
Certificate serial:       010D0C9F43285848E59BCD212854B4AF05524A00
Authority key identifier: 68:EF:90:87:C1:F1:88:55:CE:5E:3A:B7:FF:84:47:3B:C8:59:E9:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/2ae8c72b-d5e7-3405-bc70-83de00dbcc38.roa
Signing time:             Sun 16 Feb 2025 02:00:40 +0000
ROA not before:           Sun 16 Feb 2025 02:00:40 +0000
ROA not after:            Sat 17 May 2025 01:00:40 +0000
asID:                     35847
IP address blocks:        2606:a300::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e5:9b:cd:21:28:54:b4:af:05:52:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11
        Validity
            Not Before: Feb 16 02:00:40 2025 GMT
            Not After : May 17 01:00:40 2025 GMT
        Subject: CN=1e963f30-15a8-4db3-aaea-48562efa864b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:af:ee:71:4d:b2:23:a5:2a:f8:4e:e3:5a:27:
                    74:5a:8e:1e:33:91:5e:74:65:50:0e:57:3d:7f:3b:
                    32:64:a5:41:c3:6d:bd:5e:62:59:23:2e:4b:e3:f3:
                    60:df:c1:3b:fb:07:68:e0:d5:4d:a2:4c:72:db:cf:
                    b9:05:7b:9f:03:80:a2:e4:b9:a9:8d:2c:ab:5c:bb:
                    e8:ff:c3:be:90:2a:26:4a:99:53:54:3f:6a:a9:fc:
                    c8:10:01:1e:f2:c9:eb:99:aa:f2:f5:d1:5f:ed:fc:
                    a5:14:3c:50:4d:6a:4e:b6:e9:2b:eb:7c:7a:f9:9d:
                    ff:bd:b5:49:ff:0f:ab:07:a4:37:67:99:ed:d4:de:
                    e7:e7:fe:70:3d:3c:93:f2:4d:a8:f3:ca:38:c0:91:
                    44:86:8b:38:d4:6d:9c:f9:09:75:2c:89:49:1f:7e:
                    44:a2:f3:7a:3f:ba:0b:2e:8b:46:de:60:70:bf:1d:
                    a6:c6:90:8c:66:a9:b2:f1:9c:f2:76:42:c9:ba:0f:
                    52:3c:c5:2d:27:0c:6d:07:a0:04:54:73:98:aa:b2:
                    76:f4:c0:61:87:39:16:66:72:82:d3:0e:a6:24:a2:
                    62:53:f5:a7:17:23:dd:41:e2:f1:74:87:c3:d4:d4:
                    60:a3:0f:c8:f4:d7:f7:b8:b8:8e:24:e9:48:90:3d:
                    2a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:E4:D0:5D:F3:C9:01:22:F9:B5:48:3C:22:3A:1E:30:9E:4D:47:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/2ae8c72b-d5e7-3405-bc70-83de00dbcc38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.crl

            X509v3 Authority Key Identifier:
                keyid:68:EF:90:87:C1:F1:88:55:CE:5E:3A:B7:FF:84:47:3B:C8:59:E9:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:a300::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:6b:5c:79:63:96:a7:a8:f6:3f:43:04:e3:6f:d7:6d:d7:69:
         23:e2:06:d1:28:68:4b:a2:cb:d4:c5:01:ad:db:a5:62:93:76:
         99:a8:94:22:79:5c:c8:d6:b8:9f:49:7f:ca:05:bc:0d:4d:99:
         29:43:6d:f9:01:43:3a:35:51:5c:6a:06:48:41:36:8b:e4:75:
         fa:27:5e:0b:31:08:35:3c:9d:fe:05:f0:e2:69:b4:2e:32:c6:
         9b:24:f4:87:7b:45:2f:22:3d:a1:09:d3:e9:9b:c6:ff:16:30:
         51:e8:32:86:cd:dd:c8:b8:6d:a7:76:cb:b3:c2:12:0f:7d:5d:
         ab:6f:43:0c:64:2f:25:4e:1e:63:c2:88:26:a6:fb:c7:0a:bd:
         00:e2:f8:da:c8:8e:69:61:e7:cb:32:b9:31:25:18:1d:ad:ac:
         bd:72:03:27:55:1f:32:e0:a0:fd:b8:24:a3:2f:68:e8:b2:5c:
         4e:0c:4d:35:0c:75:79:cb:9c:e6:c2:fb:ec:4a:f9:1b:44:c2:
         53:ed:91:8a:52:f1:f5:50:f3:ac:d8:45:ec:d0:c6:ef:db:b6:
         72:c0:a0:34:f5:24:ac:ed:94:bc:ae:d1:c1:4f:97:63:d5:7f:
         fa:1d:0d:9d:e3:91:51:14:37:de:55:e1:a6:36:30:08:9b:d6:
         d8:45:74:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----