Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9/5b1749b9-430c-33dd-8b86-5dc9268efa1b.roa
File:                     5b1749b9-430c-33dd-8b86-5dc9268efa1b.roa (raw, json)
Hash identifier:          IF9zHvlfp6SEO7Q3pnc6yoiDjHmcJidEuFsc0zjBXdk=
Subject key identifier:   B1:38:6A:6D:4E:B0:E9:7A:91:AA:C4:FF:65:5D:4D:07:C4:E4:3B:DE
Certificate issuer:       /CN=8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9
Certificate serial:       010D0C9F432858494B640EA7A0770978E1E26D80
Authority key identifier: 8D:C7:1D:9B:12:BB:F9:46:70:21:D3:1A:46:40:F5:27:20:ED:D5:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9/5b1749b9-430c-33dd-8b86-5dc9268efa1b.roa
Signing time:             Mon 24 Mar 2025 13:00:53 +0000
ROA not before:           Mon 24 Mar 2025 13:00:53 +0000
ROA not after:            Sun 22 Jun 2025 13:00:53 +0000
asID:                     396204
IP address blocks:        2620:22:a000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4b:64:0e:a7:a0:77:09:78:e1:e2:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9
        Validity
            Not Before: Mar 24 13:00:53 2025 GMT
            Not After : Jun 22 13:00:53 2025 GMT
        Subject: CN=d07460bc-60ba-46a4-ae36-77e6ea7fecfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:bb:1b:4d:57:bc:c7:02:4a:20:33:66:f9:ca:
                    0f:22:49:b7:1e:e3:e1:e6:af:2f:cf:1e:0b:74:95:
                    1c:66:a7:11:1c:05:71:5b:cb:56:c2:96:83:e2:eb:
                    9a:02:ab:53:bd:f7:6f:18:20:99:36:35:e2:1f:f1:
                    58:cb:b4:cc:ca:2e:61:85:4f:f4:27:67:26:5d:6b:
                    88:0f:f6:75:0d:b6:1d:31:1d:85:a1:08:a2:12:01:
                    ce:76:10:8a:49:84:24:9d:7a:ba:7f:cf:26:4e:b5:
                    c4:8e:1a:c7:a9:fa:6c:49:03:6b:3b:0a:71:eb:c6:
                    36:46:c1:d7:bb:e6:d9:9d:49:e7:e3:96:3a:6c:48:
                    92:da:8a:af:ce:9f:22:9a:a5:b8:f3:17:e7:ad:b7:
                    0f:53:25:ee:48:b7:31:0b:72:98:74:2a:e8:bd:9a:
                    10:a1:1d:3c:df:87:87:7a:de:48:90:5a:3b:d5:52:
                    4d:af:f4:b6:c3:23:49:62:b7:96:7b:0f:be:42:fb:
                    f1:e7:66:30:36:80:f1:df:3c:ca:34:ec:62:81:80:
                    6a:1b:bf:33:38:4c:e1:c6:83:d8:da:c0:03:69:e7:
                    c5:fb:17:65:e6:62:61:28:de:6e:15:71:ac:3e:64:
                    e0:1d:71:b3:d7:5a:b8:96:de:bf:15:e2:b0:83:c5:
                    09:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:38:6A:6D:4E:B0:E9:7A:91:AA:C4:FF:65:5D:4D:07:C4:E4:3B:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9/5b1749b9-430c-33dd-8b86-5dc9268efa1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9.crl

            X509v3 Authority Key Identifier:
                keyid:8D:C7:1D:9B:12:BB:F9:46:70:21:D3:1A:46:40:F5:27:20:ED:D5:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:22:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:98:9e:23:fc:a0:a9:50:24:cc:50:d5:8b:f6:a4:03:35:95:
         98:e1:64:19:9e:91:bb:22:b7:7c:c8:2c:af:a0:b7:5f:0e:b6:
         6a:70:ec:eb:f9:80:9b:da:cd:88:59:72:09:7b:07:a1:cf:c8:
         8b:0c:52:72:c6:70:30:31:54:8b:ca:2d:dd:11:04:c8:c2:2f:
         77:5a:93:13:3a:5d:d2:81:01:01:61:cf:2f:18:7a:0e:b9:bd:
         c3:ff:c0:aa:51:9c:2b:fd:d5:14:c1:7b:1d:ce:c5:2f:e2:27:
         7d:61:c0:9c:ca:c8:1d:0a:a5:37:c6:9a:45:7d:3f:b3:cc:b0:
         3f:2c:2c:36:6e:36:8f:a3:bc:43:5e:c7:90:b5:02:29:e6:f3:
         ce:57:49:c4:af:52:f4:36:c8:07:fc:d8:96:8d:f9:78:20:1f:
         c8:2a:ec:9a:66:0d:62:58:6f:97:bf:24:7d:bd:e0:ba:15:76:
         4e:83:95:c2:2f:2b:ab:cb:b8:09:56:9a:c3:5a:b4:f9:89:90:
         0f:0f:22:51:56:d5:5e:64:09:bd:5e:25:e8:74:fe:22:57:aa:
         61:01:b2:42:85:6f:ec:8e:4e:ed:4b:a9:4a:fc:07:67:af:b1:
         88:60:3d:45:70:7c:ed:66:c6:cb:1d:34:50:10:8b:f0:9f:2e:
         60:40:56:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----