Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b/7fbf44bb-01b3-3fdb-9cf7-53443e9be4f6.roa
File:                     7fbf44bb-01b3-3fdb-9cf7-53443e9be4f6.roa (raw, json)
Hash identifier:          Jp4whYRItX0n/8rlPkC0qIFh99NwC5MESGSPD0wWSB0=
Subject key identifier:   FE:72:22:4D:B1:A5:EB:5B:EF:BA:CC:57:B0:ED:6F:B1:63:BB:D9:A2
Certificate issuer:       /CN=e175b8e9-bd62-4026-9a15-873e2b01713b
Certificate serial:       010D0C9F432858494CC94CDC7DA5DB2CD982F940
Authority key identifier: 2A:BC:D5:04:78:55:32:C1:D5:59:35:A7:6E:88:4A:4A:AB:9F:7C:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b/7fbf44bb-01b3-3fdb-9cf7-53443e9be4f6.roa
Signing time:             Tue 25 Mar 2025 01:00:40 +0000
ROA not before:           Tue 25 Mar 2025 01:00:40 +0000
ROA not after:            Mon 23 Jun 2025 01:00:40 +0000
asID:                     3464
IP address blocks:        2607:f808::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4c:c9:4c:dc:7d:a5:db:2c:d9:82:f9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e175b8e9-bd62-4026-9a15-873e2b01713b
        Validity
            Not Before: Mar 25 01:00:40 2025 GMT
            Not After : Jun 23 01:00:40 2025 GMT
        Subject: CN=1b4e0b1d-eb50-4a87-989d-ef388ead3fef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:21:47:79:36:a3:20:db:75:34:53:ac:a5:2d:
                    82:eb:44:15:04:1c:d2:14:88:d0:16:a2:60:2a:1b:
                    f5:bf:bd:a8:4a:5f:13:d2:32:0e:c9:c8:94:d2:fd:
                    59:89:11:39:6b:f0:19:7d:b9:4d:e1:c6:36:88:ea:
                    9b:30:1b:ed:ec:0d:cc:44:42:00:95:a8:cb:11:5e:
                    8c:c4:43:39:9b:6e:4c:ca:93:b0:25:e8:e7:b2:e2:
                    dc:22:9d:89:70:45:6e:4a:2c:91:d6:2c:9b:60:74:
                    c6:a1:6d:92:5a:eb:68:c9:23:eb:80:d5:f0:c5:f4:
                    8f:36:f7:8d:ed:b2:f2:13:7a:88:37:97:71:87:16:
                    14:4e:e0:e3:17:2e:75:e8:82:c2:54:12:99:93:62:
                    be:9b:d2:60:ec:09:ac:96:f0:b9:59:9d:a0:23:7d:
                    84:67:d4:f7:a7:59:90:d2:5b:08:c1:cc:5e:3d:28:
                    4f:d1:09:38:49:98:d8:21:b7:70:ee:58:da:f9:b9:
                    1e:81:7e:0b:39:f1:7f:b7:c5:0f:38:a9:8c:de:7b:
                    53:70:1e:ef:f8:e0:03:7b:67:a3:4f:2b:07:0c:3a:
                    bf:2d:e7:05:16:8c:0b:79:f5:4c:ef:5c:58:ea:4e:
                    a7:da:f1:67:f4:3a:ec:95:75:9c:5f:09:94:f5:d6:
                    26:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:72:22:4D:B1:A5:EB:5B:EF:BA:CC:57:B0:ED:6F:B1:63:BB:D9:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b/7fbf44bb-01b3-3fdb-9cf7-53443e9be4f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b/e175b8e9-bd62-4026-9a15-873e2b01713b.crl

            X509v3 Authority Key Identifier:
                keyid:2A:BC:D5:04:78:55:32:C1:D5:59:35:A7:6E:88:4A:4A:AB:9F:7C:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f808::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:f3:e1:3c:e5:3c:71:72:78:ec:11:e8:ee:c5:bf:8b:57:c1:
         7a:c9:49:ae:a9:ad:67:ed:e3:7c:ce:37:53:a5:2d:d3:dc:4b:
         5d:43:a1:5d:90:5b:fd:4a:ab:96:29:35:7b:d2:67:46:03:2b:
         b0:7d:85:13:f6:29:13:e0:28:02:f9:ad:21:01:ad:47:87:61:
         2e:d1:07:5e:f1:73:33:68:b4:c0:44:c8:b4:b8:f7:11:c0:fc:
         81:90:08:af:15:75:bb:83:27:96:2b:b8:82:fb:0e:41:6a:44:
         a7:fa:81:76:fe:d0:4e:15:2a:e4:ae:a0:71:6d:4d:65:4e:d1:
         a7:6f:2f:59:1b:c4:37:99:a9:bb:08:d4:98:68:19:41:c1:bb:
         69:30:75:17:ea:51:7f:e2:91:f0:de:a4:fa:2f:e8:28:40:cf:
         e6:1a:eb:ef:11:1a:88:1d:c7:ee:b7:e5:e6:63:9a:86:83:d0:
         8f:ed:cb:62:3f:91:ae:93:34:36:a0:2f:84:66:f5:7a:97:ad:
         4b:41:23:f0:e1:a1:23:76:08:20:85:73:a9:f7:6a:9a:31:ca:
         0b:9d:e3:ee:d0:23:90:cb:90:7f:67:52:e0:41:88:76:6b:c3:
         91:92:85:c9:41:c0:b0:45:d7:66:04:d7:1f:d7:ea:0c:eb:38:
         0f:b9:d6:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----