Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/47bf5d33-51dd-3c34-a11c-252123b2256a.roa
File:                     47bf5d33-51dd-3c34-a11c-252123b2256a.roa (raw, json)
Hash identifier:          TwM5UGY19O3m9aoGqngWr2oHzHVQwPxKoICH9nWxSUk=
Subject key identifier:   09:7A:B4:DB:E4:91:73:63:C1:4E:22:DC:50:3A:F9:DC:79:D2:C2:25
Certificate issuer:       /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial:       010D0C9F43285849674EF7A47237FB25BFC279C0
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/47bf5d33-51dd-3c34-a11c-252123b2256a.roa
Signing time:             Thu 03 Apr 2025 13:01:02 +0000
ROA not before:           Thu 03 Apr 2025 13:01:02 +0000
ROA not after:            Wed 02 Jul 2025 13:01:02 +0000
asID:                     9009
IP address blocks:        2607:740:5e::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:67:4e:f7:a4:72:37:fb:25:bf:c2:79:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
        Validity
            Not Before: Apr  3 13:01:02 2025 GMT
            Not After : Jul  2 13:01:02 2025 GMT
        Subject: CN=9f252c6f-9266-4bff-892a-fadcb547949b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:27:a8:78:71:88:1a:c7:28:c7:7e:0b:a3:fe:
                    e9:d4:75:53:1c:c5:b8:fd:98:8e:2b:69:88:cf:73:
                    2f:5c:08:c1:c7:3e:e3:2e:84:11:f2:42:da:95:ee:
                    78:9a:e5:3a:57:cc:95:b6:90:d7:cb:73:19:77:0f:
                    0b:fa:00:87:ac:02:53:09:44:38:4c:dc:ac:5e:8e:
                    84:50:55:94:06:d1:41:2c:90:03:e8:a2:78:46:21:
                    c7:37:88:93:fb:0c:1d:ef:b8:ba:f3:e7:06:5c:2d:
                    e1:54:68:44:b7:da:fe:fd:b7:77:22:a8:18:f3:de:
                    f1:93:ec:95:0e:b4:9f:06:0c:be:67:bc:61:f3:03:
                    d8:e6:2d:0c:42:2c:43:bd:20:9d:e4:31:13:23:a2:
                    24:02:61:65:68:60:73:36:43:a9:73:78:94:f8:fb:
                    91:9a:61:df:1d:2a:0e:cd:be:da:e5:49:5c:5d:39:
                    a3:67:9b:d2:d8:2e:b2:d4:1c:e9:60:20:48:2a:58:
                    a5:bc:c5:cb:fe:ee:1f:32:ef:44:5c:04:b2:2a:e1:
                    fc:63:f0:8f:e7:32:89:2a:8d:d5:29:54:91:35:c7:
                    d6:82:2c:1e:1b:e5:11:82:6c:10:d8:8a:06:1e:12:
                    52:d9:87:c5:4e:11:f4:5f:6c:e5:0c:e4:11:f6:58:
                    d6:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:7A:B4:DB:E4:91:73:63:C1:4E:22:DC:50:3A:F9:DC:79:D2:C2:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/47bf5d33-51dd-3c34-a11c-252123b2256a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl

            X509v3 Authority Key Identifier:
                keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:740:5e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:27:cf:9f:24:8e:2a:8a:58:f8:73:6d:26:5b:eb:b5:17:35:
         c5:e9:2f:7e:a7:cd:2e:b5:a0:7b:ec:f2:a5:d7:68:24:c4:d5:
         7d:87:3e:02:39:21:24:02:c9:ed:28:82:3a:6d:79:7e:a9:26:
         d9:04:ea:a9:21:4d:15:e6:d1:46:17:75:be:b5:69:48:64:57:
         ac:e3:a1:2d:c2:52:74:1c:c8:ed:21:93:3c:02:de:25:09:d5:
         16:66:af:6c:25:16:a4:c1:b9:b2:b2:29:53:e5:70:98:ed:03:
         4f:3c:b8:3d:60:ec:ee:e3:b0:6e:77:7f:1c:1f:0c:6f:ca:4c:
         83:fe:42:ae:1d:67:2e:d8:15:b3:46:58:97:71:5d:99:e3:e6:
         b7:c8:eb:a2:99:37:a5:73:93:88:9f:61:b1:3d:6d:65:8f:68:
         b0:66:b4:0a:d4:50:60:bf:0c:7f:fa:56:bb:6b:e8:42:a5:8e:
         8e:27:32:91:58:f3:64:07:3a:d9:c0:8a:04:45:59:00:0a:da:
         54:a5:28:44:73:8d:2a:97:06:b4:fd:0b:dd:ce:ff:f2:c8:aa:
         66:22:43:71:b0:4f:44:60:af:01:42:fd:a1:c9:b7:62:9f:8d:
         0b:b2:ca:c2:63:ec:bb:0b:42:84:29:60:e0:97:1f:ee:d0:61:
         65:f2:99:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----