Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/7ce447a3-834a-3b6d-bea6-c8f26f56cd5d.roa
File:                     7ce447a3-834a-3b6d-bea6-c8f26f56cd5d.roa (raw, json)
Hash identifier:          i7tgZb/T132mplBWhFLKmID3sj76Ah/bRoJeQ77MwU4=
Subject key identifier:   5A:47:71:7E:0B:B5:18:B6:F2:EF:BD:80:91:40:D8:5C:2B:94:B8:A8
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858491AA6CB4AE9E1ED7DC0E0DB40
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/7ce447a3-834a-3b6d-bea6-c8f26f56cd5d.roa
Signing time:             Fri 07 Mar 2025 02:00:39 +0000
ROA not before:           Fri 07 Mar 2025 02:00:39 +0000
ROA not after:            Thu 05 Jun 2025 01:00:39 +0000
asID:                     15290
IP address blocks:        2001:4c8:10fe::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1a:a6:cb:4a:e9:e1:ed:7d:c0:e0:db:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Mar  7 02:00:39 2025 GMT
            Not After : Jun  5 01:00:39 2025 GMT
        Subject: CN=af6c1e10-f087-48d0-a98d-fdb795fbfb66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:29:c6:21:ba:8f:3c:cf:44:67:cb:34:31:06:
                    91:c3:d8:57:36:bc:34:02:9a:69:ca:1f:c1:1b:88:
                    fd:4e:48:12:c1:55:7d:69:40:e6:72:80:13:9b:6a:
                    ab:6c:67:9e:9c:6e:1c:dd:33:ba:ac:ab:b0:7c:7c:
                    3a:90:c9:d2:8b:1e:2a:04:33:3b:16:b4:a8:99:33:
                    e4:6e:93:8f:58:20:68:7b:99:a2:6b:db:b2:27:52:
                    5e:62:82:17:54:cb:90:9a:4a:c9:1c:5f:7f:41:19:
                    bd:a1:3d:27:20:37:f7:7e:aa:15:bf:42:19:80:13:
                    dd:4b:cf:6d:27:3f:9e:48:e6:e2:58:30:3e:76:9b:
                    d9:aa:08:f9:9b:23:b5:b5:aa:97:c5:20:15:89:0d:
                    59:0a:ee:c0:1b:6b:0d:92:4d:4d:9f:e4:65:cb:b7:
                    81:a2:5e:8c:8e:04:63:38:a1:1c:b0:a3:9a:85:9f:
                    42:9f:5f:83:ee:c8:9a:b7:d4:4e:90:05:74:d1:d9:
                    57:db:6b:55:df:62:7c:be:b2:f0:ac:ff:c3:e4:7d:
                    43:2a:f7:0b:37:5e:6e:2a:d0:2b:36:49:31:ac:db:
                    0d:2e:ba:bc:c9:ea:69:a5:20:92:85:e9:79:77:c0:
                    5c:fb:8c:77:03:98:57:8d:52:ee:11:8d:2f:e7:8f:
                    14:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:47:71:7E:0B:B5:18:B6:F2:EF:BD:80:91:40:D8:5C:2B:94:B8:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/7ce447a3-834a-3b6d-bea6-c8f26f56cd5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4c8:10fe::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:08:ff:43:b7:bf:ed:9a:82:8c:0a:7a:7a:cf:ec:34:91:55:
         06:6b:ea:13:f9:85:82:fb:b3:3c:ba:79:92:9f:40:5d:56:d6:
         f3:1f:43:a9:c4:53:dc:c6:1e:bd:ed:19:6e:a2:a6:47:64:77:
         8a:f4:f1:df:39:c1:78:ac:fb:58:a5:09:e7:fe:0f:4a:30:ad:
         17:20:3b:e8:0f:0a:75:78:f8:da:93:fc:3f:9e:64:1b:7e:90:
         17:e6:b3:94:3c:48:d8:0d:d3:05:d6:7e:13:85:df:5b:77:05:
         dc:10:0e:a4:ac:e2:d1:90:32:ab:cf:ea:f3:02:14:a1:ce:22:
         d4:6c:75:ff:9f:c3:11:38:f4:85:a1:8c:7d:82:c3:ce:2a:7d:
         ff:b7:a6:8d:7f:b6:94:69:8a:a9:38:61:d0:b7:62:99:f3:24:
         b7:76:1a:66:e6:76:9b:76:22:f7:a6:38:64:e0:eb:d3:3a:e9:
         14:6a:77:e4:8b:e5:3e:36:9c:9a:d0:a6:aa:81:53:3b:75:51:
         e9:05:d3:ac:ff:02:50:ab:0a:cd:5e:8b:21:a5:63:58:3c:13:
         7e:63:11:cf:be:2a:99:8e:f3:8a:ec:d8:88:9f:ee:4d:74:ef:
         0d:d4:7d:11:30:97:51:98:8e:b2:78:f8:07:c2:9e:8a:48:db:
         72:57:f4:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----