Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e3e6646-7c99-49c0-9cb0-54b8e45788b8/3b3af7e2-11c3-3e13-92cd-19c2d291b483.roa
File:                     3b3af7e2-11c3-3e13-92cd-19c2d291b483.roa (raw, json)
Hash identifier:          kRZFo15gcXAHc23wMttn0fgkRe/kDmv+WtD3vZdsJ6A=
Subject key identifier:   6E:52:C9:38:AE:07:F7:04:C0:8C:D1:5F:15:51:57:4D:45:9C:D5:99
Certificate issuer:       /CN=2e3e6646-7c99-49c0-9cb0-54b8e45788b8
Certificate serial:       010D0C9F4328584944693B907CF53B81D3E16CC0
Authority key identifier: 0C:C6:8F:60:53:31:AF:29:57:A9:ED:F1:D6:09:06:5D:47:66:84:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e3e6646-7c99-49c0-9cb0-54b8e45788b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e3e6646-7c99-49c0-9cb0-54b8e45788b8/3b3af7e2-11c3-3e13-92cd-19c2d291b483.roa
Signing time:             Sat 22 Mar 2025 01:00:40 +0000
ROA not before:           Sat 22 Mar 2025 01:00:40 +0000
ROA not after:            Fri 20 Jun 2025 01:00:40 +0000
asID:                     63178
IP address blocks:        2607:6840::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:44:69:3b:90:7c:f5:3b:81:d3:e1:6c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e3e6646-7c99-49c0-9cb0-54b8e45788b8
        Validity
            Not Before: Mar 22 01:00:40 2025 GMT
            Not After : Jun 20 01:00:40 2025 GMT
        Subject: CN=eabea1a2-adc9-409b-b300-6ed6dfa17c36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:21:c0:16:85:3f:bf:50:07:5e:8b:e0:86:a3:
                    1b:61:5c:35:f4:c5:60:b2:7b:eb:d1:be:5e:21:aa:
                    49:48:6b:3e:11:39:bc:06:05:f2:e0:e4:31:c2:ad:
                    61:be:2d:03:28:7e:94:4c:42:df:9c:7e:5a:26:25:
                    7e:13:d7:a0:e9:d2:2d:cf:e1:a7:0d:c9:2e:4b:a4:
                    5a:9d:56:58:68:7f:f3:87:e1:29:ff:6b:e6:10:f8:
                    44:ac:b3:83:80:5c:e4:31:ac:b9:8f:a0:18:4a:76:
                    7e:db:8a:06:b2:34:ca:45:31:66:ae:cf:fb:6e:2b:
                    58:95:1f:a3:3d:60:39:48:3e:2d:39:78:5c:a6:5f:
                    85:00:00:5a:a3:af:31:ba:4f:b3:30:ed:8d:bd:05:
                    88:db:70:68:6a:ec:64:da:36:04:d6:28:63:70:6c:
                    a4:10:16:f2:28:1f:d3:cf:c3:49:aa:87:ab:7d:85:
                    86:1c:44:42:16:65:5e:48:49:f3:07:25:82:df:9e:
                    39:98:6d:27:b4:1a:6a:69:41:b4:85:54:5a:f1:2a:
                    87:93:e5:95:00:5c:ec:57:a7:46:8f:51:57:53:11:
                    48:64:b5:62:cf:8b:da:1a:51:24:be:59:a8:da:c4:
                    87:b0:15:07:39:d2:a8:4b:40:9c:e6:84:c6:88:35:
                    fb:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:52:C9:38:AE:07:F7:04:C0:8C:D1:5F:15:51:57:4D:45:9C:D5:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e3e6646-7c99-49c0-9cb0-54b8e45788b8/3b3af7e2-11c3-3e13-92cd-19c2d291b483.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e3e6646-7c99-49c0-9cb0-54b8e45788b8/2e3e6646-7c99-49c0-9cb0-54b8e45788b8.crl

            X509v3 Authority Key Identifier:
                keyid:0C:C6:8F:60:53:31:AF:29:57:A9:ED:F1:D6:09:06:5D:47:66:84:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e3e6646-7c99-49c0-9cb0-54b8e45788b8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6840::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:f4:ea:ff:55:83:9e:3e:91:bf:48:e5:35:a8:54:a7:65:fc:
         e3:ba:c9:68:b2:f5:02:98:6e:84:c2:65:e2:7f:40:7b:5a:e8:
         9e:ed:d3:10:fb:51:26:ae:76:fa:5c:64:51:9a:eb:3a:96:cd:
         dd:70:0e:a4:82:51:c7:12:d7:a5:e3:36:1b:73:81:55:3c:6c:
         81:64:74:0e:4d:1e:77:4e:91:b9:0e:b0:df:68:a4:75:bc:3c:
         12:4d:f5:7e:85:78:68:25:25:e5:95:09:9a:c5:6c:b8:0c:f9:
         08:81:ab:0c:f2:93:cc:b9:26:23:84:01:29:20:1a:09:a4:8a:
         20:14:e0:9b:10:47:43:86:1a:91:6f:89:49:6c:1d:b3:0b:48:
         d5:a8:95:65:31:f6:92:09:71:06:7f:ac:be:21:0d:e0:5d:5f:
         58:c2:15:48:d1:67:b6:43:07:bc:e7:41:21:09:14:98:b6:4b:
         af:35:8e:79:37:84:e7:8a:47:9c:45:dd:fc:02:d4:7f:95:8f:
         61:e5:3f:79:d6:28:05:0a:06:c2:d8:36:01:27:0e:99:71:60:
         ba:18:ac:25:01:3e:29:c2:d1:41:22:5e:d9:85:4a:ee:cf:bb:
         e8:d7:5d:1e:34:30:f6:78:6d:f9:01:69:0a:3f:02:43:53:c1:
         0c:90:cb:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----