Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/736df059-86cb-4a7f-b49e-44e0134dfbca/f9f523ad-9870-307e-895d-ed31d1359fce.roa
File:                     f9f523ad-9870-307e-895d-ed31d1359fce.roa (raw, json)
Hash identifier:          emPTeYFj/S5eGiDMHAw1t5kXTZioTWJs9Rwcq3L5C4M=
Subject key identifier:   CB:72:16:CB:F9:C8:97:22:9D:1D:CC:9B:2A:3F:F3:62:86:21:9D:BF
Certificate issuer:       /CN=736df059-86cb-4a7f-b49e-44e0134dfbca
Certificate serial:       010D0C9F432858493C09241EBC6867BEC5A1F700
Authority key identifier: 59:F8:F0:E7:94:84:3E:ED:71:41:6D:A2:1D:5D:FA:BF:A7:6B:18:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/736df059-86cb-4a7f-b49e-44e0134dfbca.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/736df059-86cb-4a7f-b49e-44e0134dfbca/f9f523ad-9870-307e-895d-ed31d1359fce.roa
Signing time:             Wed 19 Mar 2025 01:00:40 +0000
ROA not before:           Wed 19 Mar 2025 01:00:40 +0000
ROA not after:            Tue 17 Jun 2025 01:00:40 +0000
asID:                     23260
IP address blocks:        2604:8d40::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3c:09:24:1e:bc:68:67:be:c5:a1:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=736df059-86cb-4a7f-b49e-44e0134dfbca
        Validity
            Not Before: Mar 19 01:00:40 2025 GMT
            Not After : Jun 17 01:00:40 2025 GMT
        Subject: CN=fa25e973-4a63-4e56-a2e9-34bc137e30c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:41:35:7b:07:d8:5e:dd:3a:ee:62:e4:fb:35:
                    27:cc:7b:26:86:4c:db:82:cb:f7:e0:63:42:1d:5b:
                    fc:2f:8d:9f:f3:68:b8:22:07:aa:e3:e6:0d:3c:f4:
                    54:9c:41:5f:7a:13:75:c1:8d:e7:7f:5e:83:fd:af:
                    66:1d:fa:0c:ab:a5:28:30:18:d5:03:61:ed:5d:ee:
                    37:25:8f:63:75:74:d2:ae:98:26:e3:40:b4:c2:3f:
                    30:1b:db:ac:15:a7:01:43:d8:34:25:1d:76:af:25:
                    8c:5b:67:41:e7:11:85:f1:39:2b:0c:e3:91:f8:93:
                    a8:d2:ae:c7:83:74:75:93:60:63:17:96:19:3d:fd:
                    90:1b:e8:40:1c:32:95:3a:49:e2:8d:8f:b7:81:8b:
                    0b:2c:19:64:7d:e8:ba:fb:99:fc:e1:b6:8c:0a:f8:
                    a7:b2:d2:17:6f:3e:e8:60:18:8f:86:0a:8c:8d:c6:
                    cf:f7:5f:4b:b3:60:cf:bf:c9:3b:8e:13:75:11:63:
                    d9:c1:bc:e0:90:b3:09:22:26:2c:d9:82:92:20:ca:
                    1d:fa:64:68:03:e7:be:4d:62:76:3f:78:64:81:3a:
                    d0:08:e3:99:19:81:59:4b:6e:c4:24:bb:4d:38:2c:
                    ab:b7:b2:64:72:14:fb:e6:c4:05:d6:5b:db:c0:f6:
                    45:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:72:16:CB:F9:C8:97:22:9D:1D:CC:9B:2A:3F:F3:62:86:21:9D:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/736df059-86cb-4a7f-b49e-44e0134dfbca/f9f523ad-9870-307e-895d-ed31d1359fce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/736df059-86cb-4a7f-b49e-44e0134dfbca/736df059-86cb-4a7f-b49e-44e0134dfbca.crl

            X509v3 Authority Key Identifier:
                keyid:59:F8:F0:E7:94:84:3E:ED:71:41:6D:A2:1D:5D:FA:BF:A7:6B:18:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/736df059-86cb-4a7f-b49e-44e0134dfbca.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:8d40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:da:28:fa:a3:a1:6f:31:65:7e:6e:a0:b9:db:93:42:91:04:
         1e:6d:f5:cb:28:84:41:b7:a5:ba:3d:8b:3f:b7:3f:e7:3c:d7:
         58:17:72:78:06:8a:2a:ce:61:c4:d6:bc:02:af:3d:18:fb:de:
         cc:b6:00:a0:2a:a3:1d:50:01:76:df:14:37:b6:2b:06:05:ae:
         7a:ba:53:3e:aa:f5:60:65:c2:39:c1:56:b4:8b:c3:21:14:3b:
         bd:8d:b3:c2:c7:12:d2:4f:6f:8a:67:fa:7d:e3:6e:c0:6e:5b:
         81:7a:7c:ba:ba:ff:5e:c0:e9:a6:4c:73:1c:67:59:00:e5:2c:
         43:f6:ea:29:b7:dd:2f:06:38:6a:57:d1:5f:60:d6:40:21:5e:
         d0:79:17:c2:54:a9:29:ed:00:66:df:a8:bd:3c:47:81:c1:ff:
         6a:24:ab:f2:fb:90:c1:96:01:a8:7a:47:eb:d1:71:83:5a:1d:
         c2:80:41:63:0e:74:35:0b:e3:04:35:4d:e3:cf:a8:4f:fb:61:
         59:51:30:a3:93:64:d6:50:ac:3e:05:ce:a3:f0:57:92:da:37:
         cd:2c:c7:53:e5:41:0f:63:72:1e:0c:2d:a4:0b:55:8a:59:a8:
         a3:fe:cb:32:bc:8f:2c:70:04:23:53:a2:98:49:58:87:ef:44:
         a1:db:6c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----