Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/035f33ac-38bc-3011-8e40-3914196bba37.roa
File:                     035f33ac-38bc-3011-8e40-3914196bba37.roa (raw, json)
Hash identifier:          7cHsVBNcIw0LcqDBhUyFx13nvlF/5We7Q2uoe/bx23E=
Subject key identifier:   09:E2:9C:F6:C6:63:B1:6B:8D:A6:4E:E9:7A:E2:8E:8D:29:57:77:16
Certificate issuer:       /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial:       010D0C9F432858494B6419A49CC930578768A600
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/035f33ac-38bc-3011-8e40-3914196bba37.roa
Signing time:             Mon 24 Mar 2025 13:00:53 +0000
ROA not before:           Mon 24 Mar 2025 13:00:53 +0000
ROA not after:            Sun 22 Jun 2025 13:00:53 +0000
asID:                     394285
IP address blocks:        2606:a100:f000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4b:64:19:a4:9c:c9:30:57:87:68:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
        Validity
            Not Before: Mar 24 13:00:53 2025 GMT
            Not After : Jun 22 13:00:53 2025 GMT
        Subject: CN=d24023c6-303a-4d14-81ef-e48f21a58cb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:cf:7e:9b:b3:7a:10:2a:b7:b8:25:65:ab:da:
                    84:1f:8a:ef:ca:ac:ed:e7:87:4f:22:c4:3f:8e:a3:
                    de:7d:06:8f:da:04:88:ec:5a:67:d5:fc:e7:39:02:
                    89:8c:ea:16:b4:23:b8:9f:27:37:6a:1b:f2:f1:61:
                    c2:ad:93:ec:55:4b:d6:2f:2a:ae:50:b1:8c:b3:1d:
                    fa:aa:e7:f4:1f:34:4b:fe:b3:e6:41:85:80:ee:b2:
                    82:f6:1c:ca:82:b1:04:1e:55:bd:8a:c0:13:f7:d9:
                    1c:ba:a9:7f:da:cb:6d:12:54:f5:0f:06:18:ef:70:
                    1b:85:82:49:14:c9:a0:db:4e:63:37:e1:28:e1:b1:
                    7d:76:e2:fb:bd:80:41:ea:df:42:04:45:4f:2d:82:
                    fc:a0:3f:54:5b:b8:b8:64:a8:dc:68:86:16:f2:83:
                    3f:aa:5f:71:a5:8b:d7:61:a3:37:eb:5d:05:f2:2b:
                    05:c2:5a:22:81:69:75:df:b4:34:2f:da:0a:3a:3c:
                    44:3a:1b:50:30:56:f1:e0:37:4d:1c:75:2e:f6:64:
                    ad:ab:bf:63:55:28:02:27:47:1d:93:ff:05:2c:9b:
                    f6:4b:bd:8c:06:70:5b:3f:fc:cd:d5:d0:06:53:e6:
                    25:16:1d:2c:63:f3:19:34:57:86:ab:31:73:f5:bd:
                    cc:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:E2:9C:F6:C6:63:B1:6B:8D:A6:4E:E9:7A:E2:8E:8D:29:57:77:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/035f33ac-38bc-3011-8e40-3914196bba37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:a100:f000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:75:b3:a5:37:22:6d:16:f6:b4:44:14:61:d2:ab:21:cc:63:
         ce:68:eb:bf:47:ef:7d:f9:a2:d7:7a:a9:5e:58:45:97:1c:fc:
         60:0d:1b:0d:90:9f:5a:93:0c:a9:5b:1c:75:ac:80:0c:16:11:
         68:af:75:7a:77:2f:a3:95:c4:6c:20:67:17:86:cb:6e:5e:0a:
         74:53:14:42:f2:41:fa:31:1c:c9:69:cc:6f:2b:37:1f:f2:82:
         fb:78:e9:71:14:ef:07:bd:bc:f1:b3:22:12:ef:33:96:d3:30:
         85:a4:f4:53:29:53:32:6d:5b:c5:81:1f:27:8c:64:2d:f5:4d:
         da:f2:68:21:e5:dc:2e:c3:3a:81:13:12:de:f9:4f:b3:eb:1f:
         ba:c6:03:ac:e6:f8:66:42:9d:55:25:40:60:16:6a:28:df:93:
         c4:5a:b5:33:80:f5:3c:9d:01:e8:48:26:97:8d:41:46:f1:c8:
         27:c1:ac:08:9b:7f:71:30:a4:e1:25:1d:47:48:82:03:57:95:
         c6:fd:e9:04:d3:c5:93:2a:d2:70:c5:e7:f4:9b:70:b1:47:f1:
         1b:cb:44:a1:21:13:5e:ad:e9:72:79:34:a1:74:cc:9d:56:dd:
         58:77:d6:ff:23:15:64:c1:a1:e7:a8:4a:16:f3:b0:03:3b:01:
         59:6e:39:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----