Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/631036c5-3cea-3dae-9c08-96cf6e790c65.roa
File:                     631036c5-3cea-3dae-9c08-96cf6e790c65.roa (raw, json)
Hash identifier:          uf4EeowC7yXoW7eNBXuHU7otsyimC9zK1/LujjYVkWY=
Subject key identifier:   43:04:6D:C5:EF:F7:04:DA:CB:56:BA:33:01:50:0C:88:50:8E:FC:2C
Certificate issuer:       /CN=895b91dd-3a1f-46e8-88e9-1a06a1c88756
Certificate serial:       010D0C9F43285849631EC24B380C9C61BD18E820
Authority key identifier: 8B:A3:70:CC:C8:96:6C:14:AB:9C:B7:BF:2E:DB:F1:66:BF:63:A8:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/631036c5-3cea-3dae-9c08-96cf6e790c65.roa
Signing time:             Wed 02 Apr 2025 01:00:46 +0000
ROA not before:           Wed 02 Apr 2025 01:00:46 +0000
ROA not after:            Tue 01 Jul 2025 01:00:46 +0000
asID:                     53486
IP address blocks:        2607:eb00::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:63:1e:c2:4b:38:0c:9c:61:bd:18:e8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=895b91dd-3a1f-46e8-88e9-1a06a1c88756
        Validity
            Not Before: Apr  2 01:00:46 2025 GMT
            Not After : Jul  1 01:00:46 2025 GMT
        Subject: CN=0bd84484-eeb3-430f-9f77-e59a3952f595
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:3f:07:cf:cc:00:2c:3d:49:39:1c:7d:d0:52:
                    6e:c4:e3:38:79:43:93:70:f1:a0:8d:ce:c9:a9:89:
                    54:f4:3e:30:96:36:e5:05:7c:68:1f:37:73:dd:7f:
                    88:de:62:e9:90:f4:dc:b2:82:b1:ed:8b:d2:51:61:
                    8d:16:80:b7:11:3d:bb:7b:d5:e0:fc:ac:ba:95:72:
                    6f:74:8d:97:8a:40:dd:2b:19:96:15:bf:6e:ea:07:
                    d9:e9:36:b5:e3:40:32:df:7f:07:2c:ab:60:f3:8c:
                    17:78:76:0f:81:25:78:38:31:99:bb:ce:a1:65:85:
                    85:2b:ed:e6:d7:ca:e9:6a:5b:eb:59:0a:2a:cf:ac:
                    5d:65:2a:7d:14:74:8e:28:3f:7c:f9:45:fd:f0:0c:
                    6e:cb:0d:04:07:ea:be:44:50:e2:b2:c0:6c:25:42:
                    71:5c:fc:00:56:c4:ec:d3:cf:8c:ef:a7:0b:7d:03:
                    48:97:7a:ee:2a:0a:b3:3c:c6:d3:6c:2e:c1:f8:54:
                    2f:18:78:6d:d2:e5:98:11:ec:14:3d:48:e3:c7:4e:
                    78:f7:3c:31:07:ea:e5:e8:c8:f3:15:5a:d3:7e:61:
                    68:42:12:14:37:5a:df:e7:a3:e9:92:f4:f3:8e:9d:
                    cb:78:09:de:9f:30:d2:63:6b:56:a9:af:5f:1c:ac:
                    61:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:04:6D:C5:EF:F7:04:DA:CB:56:BA:33:01:50:0C:88:50:8E:FC:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/631036c5-3cea-3dae-9c08-96cf6e790c65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/895b91dd-3a1f-46e8-88e9-1a06a1c88756.crl

            X509v3 Authority Key Identifier:
                keyid:8B:A3:70:CC:C8:96:6C:14:AB:9C:B7:BF:2E:DB:F1:66:BF:63:A8:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:eb00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:44:a1:c6:d3:59:8d:60:9b:85:14:63:6d:3e:3a:78:78:2e:
         60:6e:cd:c0:ad:ab:d0:1d:44:8b:1c:a2:05:37:50:84:aa:b0:
         44:c5:7e:8c:8a:06:ca:50:72:07:1e:3e:1f:bb:09:1e:72:88:
         50:a8:7e:19:92:ee:3b:fc:d6:27:19:a7:a0:32:46:e2:82:b7:
         35:e2:42:ce:d4:f9:16:e0:f2:a3:84:43:05:89:25:ea:2f:4d:
         7e:f5:8a:d8:8a:c9:8a:75:ae:67:26:1f:d1:7a:44:1e:77:66:
         03:8a:b8:29:76:49:6c:12:3a:67:b5:89:cb:56:50:a9:49:50:
         a4:05:d0:03:34:62:96:b2:2e:d8:89:3a:9a:4b:99:02:25:d0:
         71:2f:81:95:7d:5b:df:6f:ed:c4:77:9c:7c:b8:b1:10:5c:c2:
         0e:e6:01:0e:ce:c9:a6:05:23:5a:68:9d:d2:a3:1c:41:40:6a:
         7b:b4:ae:0f:a8:4b:e5:5b:79:81:0b:ef:4b:08:3c:86:9d:38:
         07:83:73:c8:bf:19:97:39:ad:cf:be:50:ba:40:b3:74:70:a3:
         a6:52:af:b0:b3:7a:5f:d6:e9:de:37:e5:68:61:67:83:de:34:
         e0:94:70:3b:d0:ae:3e:13:a8:2a:02:e1:ed:df:d1:8c:c1:45:
         ec:75:cf:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----