Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d50d9265-ed86-4e53-88b9-cd56c607704f/f1da8eef-2bc0-3710-a530-fd8280e346c5.roa
File:                     f1da8eef-2bc0-3710-a530-fd8280e346c5.roa (raw, json)
Hash identifier:          Sm8IJfLrGnTOm6Ui4Batr2gZ0s9pkC/qkWJPrHb+/n0=
Subject key identifier:   3E:EE:5F:71:3F:FE:83:E7:24:F3:7A:8F:D2:ED:C2:E1:0F:42:8B:C3
Certificate issuer:       /CN=d50d9265-ed86-4e53-88b9-cd56c607704f
Certificate serial:       010D0C9F432858497C3EEF75113DDFFEB37C0AC0
Authority key identifier: 00:3E:48:1C:9F:3C:E7:78:9A:9E:67:A1:A2:9D:92:EC:17:A5:52:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d50d9265-ed86-4e53-88b9-cd56c607704f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d50d9265-ed86-4e53-88b9-cd56c607704f/f1da8eef-2bc0-3710-a530-fd8280e346c5.roa
Signing time:             Fri 11 Apr 2025 01:00:48 +0000
ROA not before:           Fri 11 Apr 2025 01:00:48 +0000
ROA not after:            Thu 10 Jul 2025 01:00:48 +0000
asID:                     400438
IP address blocks:        2606:afc0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7c:3e:ef:75:11:3d:df:fe:b3:7c:0a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d50d9265-ed86-4e53-88b9-cd56c607704f
        Validity
            Not Before: Apr 11 01:00:48 2025 GMT
            Not After : Jul 10 01:00:48 2025 GMT
        Subject: CN=82bd0061-1662-4a1f-8bc2-d8a46b1884dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:65:cb:1d:69:47:14:6f:b0:12:ce:74:fc:12:
                    61:5b:61:cb:bf:1d:78:50:c0:5a:f1:dc:5e:ad:f8:
                    c5:1f:71:80:87:b2:42:44:0e:24:2f:a1:21:c4:02:
                    b5:bd:2c:19:82:e8:ac:04:de:a4:60:48:bb:dd:90:
                    d8:1d:78:28:70:ce:51:64:96:eb:7a:5e:d1:87:b3:
                    8b:f9:81:3a:e1:c8:d8:cd:79:34:88:b0:89:0c:8c:
                    99:c2:8f:66:f7:7d:56:dc:5f:51:be:88:fa:85:c7:
                    a8:16:f1:88:27:80:62:4d:2b:67:db:de:00:bb:83:
                    75:6d:10:32:c2:e3:ef:a0:6b:94:14:d2:d7:da:b2:
                    fb:88:05:1f:14:b0:8f:f6:48:99:ec:66:7e:fc:b2:
                    fb:83:cb:c4:e1:b2:92:e6:5e:5e:f9:0f:04:9b:4b:
                    30:3e:4c:c3:e5:0a:37:fe:6d:b9:3a:95:ce:d1:3d:
                    c9:07:f0:53:65:8b:0b:ab:b4:46:cb:a0:c1:c8:27:
                    c4:a8:d2:c0:c4:72:78:ba:67:71:3e:6e:27:0f:b8:
                    28:72:7e:4a:f4:c9:86:ce:e7:d4:54:c2:42:6c:b3:
                    bb:c4:59:86:71:d6:8d:83:fb:70:c5:ee:05:39:ed:
                    86:31:f1:f2:9b:26:86:77:d3:85:dc:ed:5b:a1:11:
                    66:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:EE:5F:71:3F:FE:83:E7:24:F3:7A:8F:D2:ED:C2:E1:0F:42:8B:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d50d9265-ed86-4e53-88b9-cd56c607704f/f1da8eef-2bc0-3710-a530-fd8280e346c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d50d9265-ed86-4e53-88b9-cd56c607704f/d50d9265-ed86-4e53-88b9-cd56c607704f.crl

            X509v3 Authority Key Identifier:
                keyid:00:3E:48:1C:9F:3C:E7:78:9A:9E:67:A1:A2:9D:92:EC:17:A5:52:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d50d9265-ed86-4e53-88b9-cd56c607704f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:afc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:62:2f:b3:b4:90:3d:01:31:b1:cc:b6:4a:b5:4d:13:74:68:
         98:5a:5c:51:f5:2a:75:c1:75:71:f1:ea:0b:5c:c8:8d:73:8a:
         4a:e4:36:12:89:df:a5:64:15:b3:3f:31:f6:96:09:16:b6:49:
         fe:2b:83:cd:0d:31:06:58:63:1f:a7:0c:e0:c6:07:22:a6:3e:
         0a:6b:37:82:3f:3b:66:68:2c:ce:80:6d:a7:93:d0:ab:92:bc:
         fa:cd:0f:62:ad:ec:24:df:1f:ff:c7:40:49:4d:2e:e3:cd:11:
         55:f0:21:c5:d4:98:f1:75:19:a4:1c:5e:6d:5d:01:78:e8:64:
         5a:18:c1:3f:44:0c:97:27:ca:4c:18:49:80:28:e0:91:bc:d4:
         62:f0:10:3c:0d:68:71:4a:58:d9:8f:06:25:f0:40:cd:01:de:
         89:60:ed:e4:d8:16:c6:03:5b:0a:f4:ee:7e:02:e3:18:bc:46:
         fe:00:ba:9d:01:4a:be:40:d8:11:a9:c9:1a:c4:6a:1f:46:1a:
         6e:e7:b2:67:ed:5f:85:a4:f7:f3:fe:2f:95:b8:db:16:f6:b6:
         a7:18:d6:ac:52:5a:ea:fa:23:fb:1b:99:87:51:33:64:a7:20:
         4b:8e:11:44:a9:82:49:7c:f0:d3:8c:fa:73:b1:f2:7c:65:0d:
         40:43:c1:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----