Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/a4989051-b709-3221-a7dd-d1ee2f63b9e9.roa
File:                     a4989051-b709-3221-a7dd-d1ee2f63b9e9.roa (raw, json)
Hash identifier:          Uf933UgIOhELOk+2GGHoR6n5yavNBte/LrMU79j9apo=
Subject key identifier:   C6:34:C4:32:4D:19:EA:45:EB:B8:12:62:10:D6:8F:4B:42:47:E1:67
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858491AA6CB2C0845E0261EBAD180
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/a4989051-b709-3221-a7dd-d1ee2f63b9e9.roa
Signing time:             Fri 07 Mar 2025 02:00:39 +0000
ROA not before:           Fri 07 Mar 2025 02:00:39 +0000
ROA not after:            Thu 05 Jun 2025 01:00:39 +0000
asID:                     15290
IP address blocks:        2001:4c8:10a1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1a:a6:cb:2c:08:45:e0:26:1e:ba:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Mar  7 02:00:39 2025 GMT
            Not After : Jun  5 01:00:39 2025 GMT
        Subject: CN=378042b3-38a9-4420-9884-a32904077e98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:1f:36:8e:08:f5:9a:2c:e9:31:23:91:9b:04:
                    01:7c:be:30:6a:92:56:35:03:b1:94:fd:be:7d:0e:
                    fc:8b:59:ae:d9:46:74:de:85:7c:58:45:71:c3:c5:
                    e7:96:0f:d8:e0:6f:8b:51:8c:aa:b7:19:a2:eb:82:
                    b6:4f:c7:9d:7b:21:62:80:22:79:4e:7e:e3:32:e2:
                    11:e0:d6:58:7f:e9:72:8e:7d:e8:6e:1c:f6:09:94:
                    d8:93:fd:cc:5d:9b:16:00:54:37:9d:b0:93:76:d4:
                    94:d5:02:2c:2f:7c:33:86:ed:1f:ea:bc:76:37:68:
                    1a:1f:5e:9e:dd:2b:82:18:33:de:8a:1a:d2:8a:30:
                    78:53:d5:2c:f5:ca:0c:55:61:71:04:9e:21:fc:29:
                    52:0a:88:2d:f7:ba:85:b5:5d:3f:f6:f4:0d:0c:f7:
                    45:0c:60:74:c3:6b:70:b5:90:7b:83:bb:36:c9:0d:
                    ee:90:e8:90:f0:ec:15:79:9e:23:91:6a:0d:ed:36:
                    0f:e9:da:45:5b:06:26:33:c2:65:66:b0:4a:53:31:
                    61:78:e9:43:94:20:e3:69:0c:57:35:0e:34:42:eb:
                    1e:fb:cb:60:fc:aa:a3:5f:75:1a:34:90:36:eb:c8:
                    1e:11:42:33:2c:d5:86:de:54:0b:9f:05:7a:2d:a8:
                    72:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:34:C4:32:4D:19:EA:45:EB:B8:12:62:10:D6:8F:4B:42:47:E1:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/a4989051-b709-3221-a7dd-d1ee2f63b9e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4c8:10a1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:69:81:a4:6c:06:c8:2d:fd:68:76:eb:55:20:a9:ff:0d:63:
         81:52:b2:54:37:56:2d:6b:b6:3f:c8:42:65:61:a8:84:59:11:
         20:f5:e5:0a:9b:0c:b9:54:2c:6d:41:29:e4:bf:22:37:24:89:
         e9:1e:22:a8:df:c1:49:ce:44:a7:40:2b:2b:72:82:4d:03:04:
         da:df:59:84:a9:e6:f7:9b:5b:a7:81:99:cf:f6:66:46:e8:4e:
         fb:e9:01:22:79:e8:ef:2d:d1:83:1d:ce:2e:52:c3:30:9a:2a:
         56:ce:85:c5:ab:30:d5:18:1c:48:a0:6a:10:9d:fb:81:7f:8b:
         3a:7e:ee:54:b0:89:57:af:29:f4:27:35:f9:73:d8:55:4a:e9:
         e0:da:10:21:74:ec:ea:0c:52:7d:92:9b:22:46:f3:03:44:88:
         99:54:e9:df:26:c9:e0:ce:21:0c:c9:d5:7b:7d:d6:15:dd:63:
         3c:ae:09:c1:a4:68:b7:b5:d8:8c:4d:a3:1e:76:b2:a3:5f:7b:
         c2:91:2e:aa:0f:de:28:24:f2:b9:ca:22:69:57:79:12:c3:46:
         23:33:1d:ab:ec:b5:61:20:1c:19:33:76:86:4d:9a:ee:4a:7c:
         ff:4f:4d:16:a8:e5:46:e5:61:3e:2e:c5:b5:a8:58:04:56:44:
         b8:1b:8e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----