Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/5aa51862-3d2c-39bf-be77-93452e666607.roa
File:                     5aa51862-3d2c-39bf-be77-93452e666607.roa (raw, json)
Hash identifier:          ETMx7d7Z+jLO8xEBQtJ+kttISpcrgF3Bw9leUmd1mME=
Subject key identifier:   27:D5:8B:C0:42:A5:2A:0A:79:93:68:55:23:D6:DD:6E:19:FD:86:4E
Certificate issuer:       /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial:       010D0C9F432858495EEEE827617763A539E0D900
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/5aa51862-3d2c-39bf-be77-93452e666607.roa
Signing time:             Mon 31 Mar 2025 13:00:59 +0000
ROA not before:           Mon 31 Mar 2025 13:00:59 +0000
ROA not after:            Sun 29 Jun 2025 13:00:59 +0000
asID:                     133480
IP address blocks:        2607:740:41::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5e:ee:e8:27:61:77:63:a5:39:e0:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
        Validity
            Not Before: Mar 31 13:00:59 2025 GMT
            Not After : Jun 29 13:00:59 2025 GMT
        Subject: CN=60ed8903-b444-475c-97fe-06885911b2de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f2:88:e5:3b:11:dc:30:b6:6b:04:d9:5d:1e:
                    4d:de:39:b5:a6:d1:f3:cf:66:c0:a8:b7:7f:13:75:
                    0c:1f:51:78:ae:ac:8a:1e:4f:64:df:2e:a7:74:e3:
                    3e:c2:fc:a4:74:e3:ba:68:5c:ca:8d:91:29:d4:d3:
                    6e:34:28:f4:87:ef:3c:8b:cb:63:2c:c1:97:33:07:
                    65:fa:13:6d:6a:b8:bb:c2:cb:ff:75:ef:0f:a1:e8:
                    f1:09:6a:45:98:a5:e8:94:fe:95:8c:de:78:5e:d4:
                    db:50:47:77:00:a3:68:b2:34:99:01:b6:0f:29:0b:
                    fa:c9:1e:16:bc:88:6b:61:39:ce:b9:44:be:97:86:
                    4b:c0:42:3f:7e:39:87:c4:98:a0:ca:4f:86:19:07:
                    71:3b:95:d5:57:e0:93:8f:45:ef:20:d7:7e:ab:65:
                    63:8a:a9:ce:81:7f:37:a7:44:8d:fb:2a:8a:96:e9:
                    2f:e0:84:45:08:dd:a7:97:6f:a8:cf:c0:e4:5c:14:
                    a7:75:13:20:0b:db:73:45:5e:4c:85:a3:b7:16:75:
                    34:03:29:96:55:95:ee:52:2b:24:08:93:92:d6:3f:
                    76:05:c3:3e:5c:f9:13:e2:e5:d1:d4:73:f1:94:05:
                    e1:66:16:8a:d1:25:7b:14:2e:f5:9e:3a:c4:99:5d:
                    6f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:D5:8B:C0:42:A5:2A:0A:79:93:68:55:23:D6:DD:6E:19:FD:86:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/5aa51862-3d2c-39bf-be77-93452e666607.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl

            X509v3 Authority Key Identifier:
                keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:740:41::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:16:30:91:6e:c3:a3:12:7a:4a:d6:d8:c5:f8:bd:cc:71:f7:
         30:b3:33:8c:51:40:92:33:ca:79:47:e6:1b:b2:2e:cf:32:c3:
         73:ed:ef:3f:df:3c:a5:3e:76:f0:94:7c:db:65:7d:f4:b9:e7:
         6a:56:c2:b8:19:1e:a8:50:bd:49:54:30:63:56:54:5c:b3:62:
         83:d4:fd:53:8f:d2:7c:f9:2a:d4:46:fe:1f:54:61:01:89:3a:
         be:e5:78:06:3f:8d:c8:a2:fa:c7:a0:c3:a9:cf:75:5d:e6:16:
         62:99:d6:80:a9:32:92:37:7c:ec:0d:53:25:d5:72:e5:d9:37:
         d0:4b:95:d6:cf:e9:91:e0:72:55:9d:aa:dc:3e:de:7a:c9:17:
         ee:c1:3a:1b:77:59:73:b2:fb:41:9d:e8:6a:6d:7e:b2:92:a7:
         3d:f7:47:d6:ea:c8:29:07:b6:ec:68:45:4c:6b:c3:f6:aa:e2:
         f1:6f:03:e3:e0:98:04:69:6f:d1:d3:a6:9e:ca:a4:b5:ee:34:
         42:8f:80:3d:a1:d0:b9:fb:9a:ad:75:94:32:31:76:3c:85:c8:
         67:f2:5a:38:c9:33:51:13:03:25:fd:33:3a:8f:2e:98:87:9f:
         f4:4c:de:fc:50:7c:6f:f2:1c:04:59:0d:d5:91:50:ec:cc:0f:
         fb:ef:50:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----