Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/2aa7585f-d51c-30da-a0fb-36d9463654ab.roa
File:                     2aa7585f-d51c-30da-a0fb-36d9463654ab.roa (raw, json)
Hash identifier:          eVzhK/UfUS1TfDlIyTz9t8o+f5P5s4cZMx3Nxjn0SCg=
Subject key identifier:   7C:E7:5C:47:C1:0E:80:E7:D4:3F:1E:3D:DD:C7:B1:44:95:6A:2E:2F
Certificate issuer:       /CN=aa2e344f-01a0-461d-9c0a-21ddbc70aa99
Certificate serial:       010D0C9F4328584909E6A59EAAB5D00C03D07D00
Authority key identifier: B6:9E:5A:3C:88:1E:BF:09:B7:25:CF:05:8C:C0:C1:2E:A9:C4:9F:CA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/2aa7585f-d51c-30da-a0fb-36d9463654ab.roa
Signing time:             Sat 01 Mar 2025 02:00:39 +0000
ROA not before:           Sat 01 Mar 2025 02:00:39 +0000
ROA not after:            Fri 30 May 2025 01:00:39 +0000
asID:                     0
IP address blocks:        2001:504:3d::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:09:e6:a5:9e:aa:b5:d0:0c:03:d0:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa2e344f-01a0-461d-9c0a-21ddbc70aa99
        Validity
            Not Before: Mar  1 02:00:39 2025 GMT
            Not After : May 30 01:00:39 2025 GMT
        Subject: CN=12e43441-6e1c-4d2a-9ec5-2a29df278cac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:1f:ab:f7:5d:3a:51:e8:fa:2b:e0:3e:21:c5:
                    ad:c9:49:41:e3:cd:8a:d7:ab:1d:db:4f:f8:93:75:
                    e7:37:66:7c:de:10:98:89:54:de:5a:07:a9:09:79:
                    73:83:34:4b:47:f7:79:5a:3f:78:e2:27:67:ba:3a:
                    e9:14:60:48:fb:59:ef:08:2b:0a:d5:4e:1f:d1:52:
                    1b:91:58:7f:f5:bb:eb:37:b7:0b:e1:bf:34:89:6b:
                    0b:8f:58:3a:ac:21:62:b5:1d:61:ba:31:b0:e3:93:
                    02:ed:e1:05:2f:9d:a1:af:10:c7:51:7a:5d:13:8a:
                    e9:1d:a3:4e:bc:ac:f5:33:04:bf:d5:83:45:ff:56:
                    e7:f1:b1:39:d4:3a:a5:9b:f5:16:26:84:a8:8e:3e:
                    20:48:f7:33:a5:b5:1d:fe:bd:68:98:7e:b2:42:41:
                    a3:f7:1c:5c:25:33:95:16:d9:6e:ca:79:0d:0f:f2:
                    10:88:16:da:04:d6:17:2b:87:96:4e:62:7e:39:cc:
                    d4:1c:12:62:4a:b1:53:9f:34:92:d6:fb:eb:dc:1f:
                    f2:77:52:d7:84:cc:55:23:a6:cd:97:5f:53:4b:df:
                    5b:8c:e1:17:e1:01:b1:e7:78:99:b4:16:5e:5c:82:
                    56:66:12:8a:13:e1:2f:1e:df:85:21:27:d3:77:31:
                    f6:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:E7:5C:47:C1:0E:80:E7:D4:3F:1E:3D:DD:C7:B1:44:95:6A:2E:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/2aa7585f-d51c-30da-a0fb-36d9463654ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl

            X509v3 Authority Key Identifier:
                keyid:B6:9E:5A:3C:88:1E:BF:09:B7:25:CF:05:8C:C0:C1:2E:A9:C4:9F:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:504:3d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:4f:93:d0:a4:b5:8e:7c:34:19:49:81:16:40:9c:5e:86:7b:
         ec:48:d0:e3:2a:d7:54:28:9c:13:da:33:68:02:28:f0:a9:3d:
         3a:86:fa:a2:13:60:51:05:e0:8c:b0:6e:e1:5f:d3:0c:9a:05:
         c1:7e:e5:b0:c3:f3:e5:de:6e:ce:40:4d:09:78:58:71:64:8a:
         95:1e:d3:e3:89:7f:5c:42:f5:1a:53:cd:e8:b2:ae:16:95:27:
         27:65:39:44:38:2f:d3:7f:02:de:d8:69:91:22:5f:cc:d0:f7:
         0d:b7:b1:f1:b7:d7:07:41:c1:42:4b:15:55:3a:e3:cb:31:3c:
         5f:29:6e:d3:45:3f:9b:ad:9c:4a:e9:70:b8:40:da:d4:77:2e:
         86:82:9d:97:f3:27:11:f9:63:18:e7:86:59:c9:a9:1b:b6:45:
         14:08:e3:83:14:56:f7:50:36:7f:e4:fc:b5:17:6e:79:6c:94:
         ab:de:98:34:a8:4a:bd:54:b6:11:a5:33:fb:57:a2:f9:9d:51:
         8d:06:8f:3f:24:56:4b:b3:f5:de:76:ec:e5:6e:a0:fd:a9:ff:
         f0:0e:4c:d5:c2:81:3d:4e:48:e7:2d:72:40:c9:7e:c1:03:3c:
         91:c0:c3:69:c5:25:39:06:b4:92:5e:e1:29:d3:c8:95:cc:f0:
         5f:7a:20:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----