Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/bf7b5d04-a693-399c-bd4b-0f7752c6e42f.roa
File:                     bf7b5d04-a693-399c-bd4b-0f7752c6e42f.roa (raw, json)
Hash identifier:          LW7ms8r/LlXeHGa0W1mzeT4b9MnKVv3EP9rPIo0KtOI=
Subject key identifier:   F6:92:4B:40:69:3E:FE:32:E2:65:B0:EA:65:54:B8:D4:82:B9:8B:CE
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D14937CD13AF5C584C1C00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/bf7b5d04-a693-399c-bd4b-0f7752c6e42f.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     12271
IP address blocks:        2604:2000::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:49:37:cd:13:af:5c:58:4c:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=35f7c5bd-404c-4cec-8342-dcbf210994ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:2d:23:50:8b:f1:7d:0f:90:ba:6d:2d:ea:d4:
                    36:73:35:0b:25:1a:f2:4e:ba:cf:3f:f3:ff:68:cc:
                    76:37:4a:25:23:89:37:92:fe:90:f8:1e:b1:7b:74:
                    cd:b8:41:69:b4:45:32:95:8b:46:ee:04:d6:4f:1d:
                    be:fa:d3:ed:bf:00:6c:ac:79:26:fb:0d:df:79:ea:
                    3a:27:33:0a:2a:e2:92:ad:56:d9:7a:fb:36:c8:7b:
                    6e:4f:60:44:39:30:27:2b:e9:e9:8c:b2:b3:f8:a1:
                    49:b7:00:d1:4d:90:9b:7a:7f:c5:a0:83:a0:09:25:
                    01:82:e3:cd:d4:9b:64:82:25:c4:0f:91:12:2a:ca:
                    ac:7c:00:82:fa:20:e9:2c:f4:f0:61:8b:27:6c:a3:
                    e4:32:80:44:66:f8:bf:38:63:fd:42:43:46:41:30:
                    f3:cd:1c:d8:44:28:24:7d:f3:b4:df:cd:c7:0e:0f:
                    54:44:33:5b:e2:8c:ff:79:23:69:f6:e4:79:d3:83:
                    18:c3:f3:4c:f4:c6:55:b5:4a:89:3e:fe:34:e3:0a:
                    fd:1a:ec:88:a6:86:72:f8:86:7e:64:29:18:8d:59:
                    4f:61:25:0e:6f:c3:f0:ee:86:e5:e7:3e:5d:83:d3:
                    d9:54:bd:d3:6b:63:30:98:ec:df:5d:12:be:8f:f8:
                    6c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:92:4B:40:69:3E:FE:32:E2:65:B0:EA:65:54:B8:D4:82:B9:8B:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/bf7b5d04-a693-399c-bd4b-0f7752c6e42f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2000::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:de:16:83:68:d9:3b:b9:59:72:85:bf:ca:3c:b0:88:1d:8c:
         9c:77:e6:9c:e2:d0:00:97:9e:44:5c:6a:10:61:9a:9e:9c:01:
         44:a8:7f:cd:44:41:f6:72:e8:4a:02:d2:88:47:7d:40:15:4e:
         96:87:b0:4f:d1:f5:99:15:4d:5b:35:1e:26:80:1b:a6:c2:f1:
         a7:e1:fa:86:d2:a0:57:9a:af:32:bd:23:e4:32:6a:99:3c:be:
         03:8c:d3:24:6b:60:96:81:d3:bd:12:38:1c:c2:07:3c:57:6a:
         29:bf:a9:76:98:a0:cc:8c:1b:6c:b1:ca:5e:e5:30:27:35:0a:
         5d:90:04:c6:9b:fb:46:3f:16:62:6b:0f:5d:a5:c2:c8:1e:24:
         24:9c:dc:68:d8:33:95:71:08:46:ce:7a:62:a3:2c:71:ea:db:
         b5:0c:56:41:d2:3a:80:04:99:db:09:e9:87:02:68:82:04:30:
         4a:91:0f:dc:52:48:5c:6d:bd:fb:85:d6:61:4c:a3:d9:04:27:
         dc:9c:a9:ca:fd:11:20:c4:6a:93:c2:85:66:5c:b6:fb:1d:b6:
         1c:4e:00:1a:8e:b8:19:6b:d6:3f:c7:55:24:5d:9e:4f:f8:f2:
         94:41:64:75:9f:e3:2b:c7:2e:60:87:c4:fe:64:8c:05:67:27:
         df:18:f0:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----