Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/7711e710-d931-3d65-aa3c-e7e676c7e85e.roa
File:                     7711e710-d931-3d65-aa3c-e7e676c7e85e.roa (raw, json)
Hash identifier:          ke1xzKIGCg1KGlD7rlwM9ORxhgclTH4zDeex7e7AFfk=
Subject key identifier:   72:0A:21:50:5B:80:F2:95:6C:98:71:72:91:9F:D6:F4:5D:1B:06:DD
Certificate issuer:       /CN=da0b54d4-921a-405a-8c7a-6aa1dcb263ea
Certificate serial:       010D0C9F43285849806F17C85F0B7A9B3217F980
Authority key identifier: 04:BF:3B:6B:DE:61:C1:E7:75:29:6F:0B:70:E8:23:14:D8:1B:BC:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/7711e710-d931-3d65-aa3c-e7e676c7e85e.roa
Signing time:             Sat 12 Apr 2025 13:01:01 +0000
ROA not before:           Sat 12 Apr 2025 13:01:01 +0000
ROA not after:            Fri 11 Jul 2025 13:01:01 +0000
asID:                     395403
IP address blocks:        2620:4d:400e::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:80:6f:17:c8:5f:0b:7a:9b:32:17:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da0b54d4-921a-405a-8c7a-6aa1dcb263ea
        Validity
            Not Before: Apr 12 13:01:01 2025 GMT
            Not After : Jul 11 13:01:01 2025 GMT
        Subject: CN=7bd7626a-3a64-4919-87a5-be186f4be6f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e3:06:c5:a3:01:67:a5:f8:67:5d:fb:af:ca:
                    8b:69:26:15:34:b8:ed:f2:bf:f5:0e:8b:0c:be:23:
                    26:49:c3:00:8b:86:a3:78:f5:a9:41:02:ce:ab:fc:
                    9d:d3:7b:48:e5:02:b2:f7:1c:d3:67:4e:69:d2:73:
                    04:6b:af:de:b0:27:54:f7:fa:fd:d7:d4:8e:77:52:
                    a2:c0:d7:80:e4:ce:2a:33:12:d5:bd:d1:c9:62:43:
                    6d:ec:40:92:5d:13:a4:b0:7c:be:5f:94:f0:62:1b:
                    30:7c:48:f0:a8:e4:ea:e0:1e:0e:f4:c0:a8:8b:8d:
                    cc:ed:52:43:33:02:5e:22:99:9d:44:4f:9c:62:d1:
                    38:da:ad:7b:2c:8f:cb:f0:c8:1d:c4:50:5f:fb:40:
                    cf:f1:c7:fe:c7:7a:e7:23:8c:ad:3b:5a:f8:58:60:
                    60:16:28:3c:25:b3:13:5e:a1:9c:98:4e:15:4e:f6:
                    c5:8e:bc:5e:3b:db:0e:86:00:a7:44:c5:10:93:26:
                    88:bf:01:35:ce:40:66:e9:ea:ca:37:c4:7b:60:82:
                    64:c4:9d:9d:45:97:11:05:a9:44:8e:fa:de:3a:45:
                    0c:d0:77:28:d7:e8:be:84:1e:91:94:e5:3f:4a:8d:
                    5a:7d:9b:87:8b:dd:04:3a:b2:b2:7a:9b:48:dc:4b:
                    9d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:0A:21:50:5B:80:F2:95:6C:98:71:72:91:9F:D6:F4:5D:1B:06:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/7711e710-d931-3d65-aa3c-e7e676c7e85e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.crl

            X509v3 Authority Key Identifier:
                keyid:04:BF:3B:6B:DE:61:C1:E7:75:29:6F:0B:70:E8:23:14:D8:1B:BC:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:4d:400e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:8a:65:e5:e8:59:c4:e9:94:35:26:84:d6:fe:19:ee:42:9c:
         97:77:08:cb:1c:fb:68:52:f4:91:cc:94:73:8e:fc:b9:35:c0:
         96:14:35:9e:66:80:c3:2d:fe:be:58:92:8c:13:cf:b7:9c:39:
         17:b8:a1:af:f2:54:97:d1:95:50:c3:2e:35:dc:d3:2b:be:c9:
         cf:a6:53:79:81:12:ad:9f:9e:d0:3a:cf:4d:bf:01:98:02:2a:
         b1:41:bf:47:28:f7:f5:f8:aa:67:ac:58:b9:ae:e6:19:ee:2f:
         f2:dd:28:ad:af:a6:f4:63:d5:01:b8:c7:67:1e:18:14:7d:44:
         a3:ef:7d:5d:88:e4:6e:c2:3d:ef:d8:b8:3b:c3:02:41:47:e1:
         32:02:6c:7a:37:ba:45:0a:ba:01:15:89:fe:e4:24:8d:1e:fd:
         1b:17:b4:16:d6:bb:05:46:06:14:06:f7:ed:53:b0:1e:42:d2:
         72:fb:d5:b7:8e:f3:b1:85:c4:06:cc:54:36:a4:09:ac:01:e2:
         dc:4a:04:bc:fe:c1:45:fe:b6:56:6e:8f:c8:aa:e9:f4:20:b0:
         f0:9a:c3:59:69:9d:15:59:e8:5d:ee:00:fe:76:fc:4b:00:38:
         64:45:7e:19:f4:85:e9:2e:28:3b:ab:ba:96:c8:b6:e8:53:0f:
         44:d1:15:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----