Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/35aa9498-4065-364f-a0b8-2aab0ab04cd1.roa
File:                     35aa9498-4065-364f-a0b8-2aab0ab04cd1.roa (raw, json)
Hash identifier:          yRXjpskulhXCpG5RNNom8MkfcGOimMT1bUcL8pUd0GU=
Subject key identifier:   82:5A:7A:31:7A:BB:95:76:F2:46:C9:4B:B5:52:3D:13:93:33:08:8C
Certificate issuer:       /CN=d106a247-9308-46e9-9d88-ae987a6bdace
Certificate serial:       010D0C9F432858498339F148EDDABCFECAABDD80
Authority key identifier: E7:DC:3B:E5:56:FF:1D:5F:DF:CA:F4:65:1C:3D:2E:6C:FD:FE:82:3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/35aa9498-4065-364f-a0b8-2aab0ab04cd1.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     50131
IP address blocks:        2604:9cc0:1000::/38 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:f1:48:ed:da:bc:fe:ca:ab:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d106a247-9308-46e9-9d88-ae987a6bdace
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=be6670f7-ff97-46cb-a860-734c05428cad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:21:60:38:0d:71:33:1c:b5:2f:4a:b2:43:78:
                    68:11:bd:69:17:83:9d:41:ec:59:31:95:88:7b:fe:
                    42:9c:61:63:d3:bd:ee:7d:87:ca:7c:7b:25:bf:22:
                    de:ed:63:87:a3:eb:38:7f:cd:d2:b2:fe:18:6f:e4:
                    56:6e:6b:0d:5d:43:0b:01:89:11:44:4e:67:d9:eb:
                    ec:c0:ba:a4:ec:53:a4:d4:a5:06:c5:3f:4a:43:99:
                    b8:56:12:56:2f:52:5d:2b:ae:91:aa:06:64:e8:f5:
                    c0:05:07:86:09:dc:24:dc:a0:9c:ff:96:46:c5:ff:
                    6c:52:f4:89:18:c8:1b:37:c8:df:61:59:31:ab:93:
                    5f:81:3f:91:91:81:07:2e:cf:bd:28:62:33:0e:0d:
                    07:81:7e:95:dc:05:51:3a:29:e5:2c:19:1f:6a:73:
                    0a:9f:37:22:3d:c6:6f:5c:3a:c4:eb:a5:4a:34:c5:
                    21:e7:bb:19:f6:96:04:f5:ce:5f:9c:9b:ce:3d:6e:
                    38:11:24:4f:12:27:4a:d4:29:86:f9:31:24:64:fa:
                    c4:29:2d:20:cc:fe:42:07:43:a1:97:94:d2:47:80:
                    dc:c0:47:f8:ee:58:74:ab:29:ed:c4:06:2c:a2:e7:
                    c4:54:e5:a4:73:65:3a:84:f8:6f:ed:7c:ba:ef:3c:
                    ff:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:5A:7A:31:7A:BB:95:76:F2:46:C9:4B:B5:52:3D:13:93:33:08:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/35aa9498-4065-364f-a0b8-2aab0ab04cd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/d106a247-9308-46e9-9d88-ae987a6bdace.crl

            X509v3 Authority Key Identifier:
                keyid:E7:DC:3B:E5:56:FF:1D:5F:DF:CA:F4:65:1C:3D:2E:6C:FD:FE:82:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:9cc0:1000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:8c:7f:2d:d5:a7:b0:ef:b6:6a:e6:b6:cd:25:bb:c3:71:54:
         7f:3b:92:23:98:a8:d7:1d:09:7d:d2:c7:f2:9b:ae:e0:ed:c6:
         36:c1:2d:f4:12:77:1c:b0:70:0b:f8:44:e0:96:ae:83:4f:0c:
         ce:cc:26:38:ef:d5:6f:7a:e8:0f:42:4f:bb:00:f3:e1:fe:f9:
         55:7d:4b:93:f9:a7:8b:31:78:8e:b0:3c:fa:45:8e:7f:05:d9:
         10:f0:fc:52:d8:6f:11:a2:b3:46:86:11:63:21:2c:12:b3:c6:
         32:ac:9e:03:eb:13:b1:51:06:92:f8:d3:23:e7:50:56:ce:5b:
         2c:00:a9:6d:8a:1c:9e:99:9c:4a:6f:83:06:c6:36:dd:54:1d:
         c1:42:50:98:7e:3c:4b:2c:07:cc:8c:b3:b5:b9:7c:44:06:33:
         4e:f4:26:62:b9:5c:94:40:41:64:7e:9c:3e:e7:de:ec:32:95:
         a2:1f:01:69:f6:fd:7a:7b:83:f9:40:99:3f:f5:34:cf:22:d8:
         db:84:4c:e1:71:7b:2b:e9:c2:97:dd:30:ba:22:46:bd:6b:db:
         a5:14:ff:01:a2:7c:bd:26:c9:b2:a0:0a:c7:3d:8f:c9:eb:d6:
         3d:ac:4b:d4:44:5e:7b:eb:01:d9:af:15:db:67:8a:ea:a5:32:
         5a:f4:14:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----