Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/7349498a-3be6-3b85-8a16-9fc1413faabd.roa
File:                     7349498a-3be6-3b85-8a16-9fc1413faabd.roa (raw, json)
Hash identifier:          X6P6Y7Zs+Uk4nDYchgamMBP6oqLheNfFJ7ghyglbLIY=
Subject key identifier:   E4:16:C1:59:28:51:86:BB:30:1B:3A:FB:C7:BB:C3:87:93:85:2A:7E
Certificate issuer:       /CN=974309dc-20f5-4894-9707-f2e446573ea1
Certificate serial:       010D0C9F4328584981D45244462362FCCE170000
Authority key identifier: F3:0A:72:2B:C9:79:15:ED:6B:77:2F:DF:BE:AC:07:8E:2E:A5:D5:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/7349498a-3be6-3b85-8a16-9fc1413faabd.roa
Signing time:             Sun 13 Apr 2025 01:00:44 +0000
ROA not before:           Sun 13 Apr 2025 01:00:44 +0000
ROA not after:            Sat 12 Jul 2025 01:00:44 +0000
asID:                     401587
IP address blocks:        2607:e740::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:d4:52:44:46:23:62:fc:ce:17:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=974309dc-20f5-4894-9707-f2e446573ea1
        Validity
            Not Before: Apr 13 01:00:44 2025 GMT
            Not After : Jul 12 01:00:44 2025 GMT
        Subject: CN=3e69b779-d8a2-42a3-b2bc-b62ba640cdd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:4f:22:56:0f:c1:99:9a:2a:c2:8f:f7:76:de:
                    7e:57:27:48:7a:45:03:79:4d:46:d4:4e:bb:69:ab:
                    d6:94:6e:c7:71:85:89:30:be:a4:eb:0a:74:b9:7a:
                    67:5b:d2:d2:84:aa:4e:c3:8f:22:f1:3b:02:47:f9:
                    7d:14:31:94:3b:d4:8a:6b:02:92:63:c7:c4:85:d5:
                    6b:69:f6:38:f2:2d:64:39:62:33:02:1e:b0:48:d2:
                    90:68:65:10:0e:cd:bf:82:b6:c8:6c:c8:07:94:46:
                    e0:29:61:45:d3:eb:6c:2e:64:b5:17:3e:e5:01:c5:
                    b5:6b:aa:ed:20:eb:a8:2f:7c:fe:06:f1:45:48:53:
                    15:17:f8:31:38:17:e1:e4:db:72:e8:e0:5c:5e:16:
                    88:13:28:16:55:73:5d:1e:18:12:c7:15:60:68:22:
                    1a:4d:32:2b:05:59:df:66:e2:00:52:b8:bf:60:ac:
                    ef:7f:f9:a4:6b:c8:2b:cf:3b:be:98:49:d8:21:96:
                    e2:d3:27:e7:c5:24:a5:1e:c5:44:68:d9:c4:18:18:
                    1a:15:01:e6:0f:9a:76:89:53:5f:96:9d:8f:d6:09:
                    c4:15:67:61:38:8b:08:fe:c4:18:2b:e8:b6:82:b3:
                    d4:8b:44:4f:f2:d1:25:13:14:22:7d:e9:c1:b3:ef:
                    e6:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:16:C1:59:28:51:86:BB:30:1B:3A:FB:C7:BB:C3:87:93:85:2A:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/7349498a-3be6-3b85-8a16-9fc1413faabd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/974309dc-20f5-4894-9707-f2e446573ea1.crl

            X509v3 Authority Key Identifier:
                keyid:F3:0A:72:2B:C9:79:15:ED:6B:77:2F:DF:BE:AC:07:8E:2E:A5:D5:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:e740::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:95:79:45:f0:5b:06:6c:4c:83:0b:a4:13:10:0a:f2:77:ea:
         1d:d9:f3:02:81:22:7a:cc:9f:6f:c9:ea:2a:47:40:c4:74:3e:
         d4:78:64:02:2b:82:ac:3c:00:4f:c3:0d:97:16:6f:98:e5:4d:
         4c:77:15:b9:79:83:d5:3a:99:e9:92:90:b2:c4:01:21:c9:4f:
         8f:03:ec:9b:e4:65:bc:70:7d:47:00:e2:4f:84:11:f9:62:ed:
         39:d8:f2:18:93:cb:53:ce:59:59:b4:29:76:fb:26:1b:8b:a0:
         a3:60:1e:3b:5a:09:ae:88:81:17:8f:59:85:d4:b0:cb:51:7d:
         75:2a:95:00:96:b9:f1:a8:4e:13:cf:17:92:a7:a8:99:07:6a:
         d2:80:fb:27:f8:3b:bf:32:5b:81:32:69:fe:b9:06:d9:2b:92:
         56:76:04:2f:b7:d6:31:24:a3:41:55:b3:d7:e0:af:ea:f4:e8:
         94:14:92:94:66:e4:67:2c:d2:47:2e:b4:43:b2:a3:93:0b:9b:
         ec:e8:1d:ce:14:39:44:22:df:ba:37:bc:8f:c2:ea:0f:a2:6c:
         70:27:bf:8d:c7:3f:e3:7f:13:e1:1a:94:4d:70:1b:2d:85:90:
         fd:06:d1:5d:64:49:99:07:7c:fb:fc:32:94:0a:35:f6:84:ec:
         12:80:d2:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----