Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a2235d90-d905-4ef7-9447-870904044658/29a80573-100a-3a8b-bb64-eb056360a689.roa
File:                     29a80573-100a-3a8b-bb64-eb056360a689.roa (raw, json)
Hash identifier:          JPs0ozghSwuKW5bodDtAp0QcLpfdbUixODsvCPxATOQ=
Subject key identifier:   5C:EF:16:95:D0:A7:C0:DC:50:C0:60:AF:17:AE:09:57:23:69:5E:F3
Certificate issuer:       /CN=a2235d90-d905-4ef7-9447-870904044658
Certificate serial:       010D0C9F4328584913AC3A877A6AD78C9D89EF80
Authority key identifier: 12:9D:20:82:1C:89:AE:7B:FE:2D:45:F0:6A:9E:F2:78:8B:0C:1A:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a2235d90-d905-4ef7-9447-870904044658.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a2235d90-d905-4ef7-9447-870904044658/29a80573-100a-3a8b-bb64-eb056360a689.roa
Signing time:             Tue 04 Mar 2025 14:00:52 +0000
ROA not before:           Tue 04 Mar 2025 14:00:52 +0000
ROA not after:            Mon 02 Jun 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        2607:5ac0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:13:ac:3a:87:7a:6a:d7:8c:9d:89:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2235d90-d905-4ef7-9447-870904044658
        Validity
            Not Before: Mar  4 14:00:52 2025 GMT
            Not After : Jun  2 13:00:52 2025 GMT
        Subject: CN=77795e47-39d6-445c-9bc3-7cab05d3f7f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:13:3b:5f:bf:10:83:b5:ea:ca:b6:a1:14:97:
                    92:15:b4:2d:d5:b4:07:2b:4f:db:56:61:0b:f5:ed:
                    25:14:a6:df:24:04:c5:2e:b1:32:75:a1:19:d2:0b:
                    39:5a:4b:a3:0e:7a:a6:99:07:18:b8:3e:95:ec:14:
                    e1:0c:96:60:1e:97:3f:00:03:58:4a:90:80:29:8b:
                    52:d0:be:32:1c:78:29:83:c1:78:e7:36:c4:6d:0c:
                    a6:a5:46:8d:b5:eb:66:95:c1:af:da:8a:c7:b2:73:
                    2c:7e:6a:86:7b:34:d6:bc:40:a6:89:a4:71:2d:62:
                    ee:2c:ef:25:72:db:32:e2:40:47:90:3c:ef:42:8a:
                    5b:89:25:a0:90:a6:71:8b:f3:4d:c6:28:3e:88:f1:
                    e5:ce:29:95:87:05:b8:54:77:90:d7:a5:1c:ad:16:
                    19:1a:07:ee:43:5c:6d:10:5e:d8:b0:67:85:f0:fe:
                    d3:90:13:2b:2d:39:1f:23:9e:4c:d4:18:74:3f:86:
                    81:a9:60:9e:47:dc:98:3e:4d:53:02:d6:9c:31:81:
                    31:a1:bf:70:e3:7d:2a:7d:64:b4:f1:fe:07:1a:49:
                    08:61:de:14:39:7a:00:ec:a7:62:12:db:56:47:3e:
                    46:e8:be:74:5d:f8:47:82:d9:eb:2f:2b:31:aa:58:
                    ef:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:EF:16:95:D0:A7:C0:DC:50:C0:60:AF:17:AE:09:57:23:69:5E:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a2235d90-d905-4ef7-9447-870904044658/29a80573-100a-3a8b-bb64-eb056360a689.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a2235d90-d905-4ef7-9447-870904044658/a2235d90-d905-4ef7-9447-870904044658.crl

            X509v3 Authority Key Identifier:
                keyid:12:9D:20:82:1C:89:AE:7B:FE:2D:45:F0:6A:9E:F2:78:8B:0C:1A:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a2235d90-d905-4ef7-9447-870904044658.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:5ac0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:83:98:ce:b3:e2:83:b2:40:09:fa:0e:15:c3:44:ef:6d:a2:
         d8:44:f0:ed:0b:74:d4:79:e5:4e:ec:f1:f9:66:e2:72:61:6b:
         34:fa:c4:32:ff:d9:86:2d:d3:e7:fc:2a:ee:77:95:01:ba:71:
         b7:67:03:b6:3e:03:05:56:cb:33:24:a3:1f:31:bd:47:ee:8e:
         6e:13:26:eb:7f:24:13:b1:54:73:22:0b:48:59:6a:e7:77:0c:
         f1:d1:53:e6:eb:2f:1a:66:f8:5d:f6:8e:98:a8:0d:ae:6c:36:
         03:4c:46:c6:d2:e7:ec:4f:d1:34:73:ca:a4:49:ba:b6:ed:0a:
         06:06:a6:0c:23:7b:3b:c6:37:2d:fd:e4:3a:25:f3:0d:50:4c:
         52:83:e0:f2:c2:03:6b:1e:9e:e7:e1:b2:f0:02:fe:8a:3c:12:
         7d:3a:40:de:89:75:5c:3b:0c:b9:8b:3a:9d:35:c0:36:9e:2b:
         a4:35:8f:da:5d:81:05:d4:fd:27:56:07:ac:8f:9e:8c:f9:ad:
         ef:43:04:dc:c5:68:c0:8a:e7:96:fe:9d:f6:98:9b:81:52:7e:
         a5:66:29:76:55:55:46:d0:8e:a3:9f:db:b0:49:d9:8d:b8:be:
         40:f7:bd:2f:19:bc:13:fd:95:24:95:cf:99:47:ad:fc:20:d0:
         bc:9a:26:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----