Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d3ceedb7-9aff-343f-9b84-cfb141f266f0.roa
File:                     d3ceedb7-9aff-343f-9b84-cfb141f266f0.roa (raw, json)
Hash identifier:          GZ0wBKJqitHyQrnBm0/7Jb7J2UT8bOgSXUNt0eHvmD8=
Subject key identifier:   F3:65:C2:C9:BE:42:F0:E3:8F:AF:D7:34:44:BC:F5:CB:0B:79:E8:2E
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285848F22C735DED6E20EFEC0795C0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d3ceedb7-9aff-343f-9b84-cfb141f266f0.roa
Signing time:             Thu 20 Feb 2025 14:00:52 +0000
ROA not before:           Thu 20 Feb 2025 14:00:52 +0000
ROA not after:            Wed 21 May 2025 13:00:52 +0000
asID:                     33363
IP address blocks:        2605:a40c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f2:2c:73:5d:ed:6e:20:ef:ec:07:95:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 20 14:00:52 2025 GMT
            Not After : May 21 13:00:52 2025 GMT
        Subject: CN=e22fa5fb-6aa3-4674-ba7b-e3dca8a77f60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b8:3a:6d:35:da:b7:16:dd:ce:58:87:fb:3e:
                    55:29:33:d3:17:21:fc:e1:86:1e:79:84:78:b7:56:
                    7a:dd:e5:23:e2:85:d1:03:bb:89:7e:52:cf:2e:26:
                    2f:5d:0d:40:6f:8a:af:b0:78:e4:2f:e6:3a:17:d6:
                    4b:9a:af:af:f6:8b:d3:b6:8a:85:92:ad:bf:1e:b7:
                    a2:b7:46:bc:6d:de:77:9c:7e:1d:85:e5:87:7e:a8:
                    dd:d5:d6:33:ad:a6:10:0e:e1:b2:a3:11:d3:c3:4b:
                    43:65:1b:ff:fa:b3:a5:ea:53:62:49:aa:c4:de:f5:
                    93:4b:ea:9f:64:5e:ca:fb:c3:b9:a0:e3:ab:8e:c5:
                    6f:57:a4:26:01:ee:83:12:b8:f0:88:5d:6b:b7:b7:
                    a6:b6:c2:e6:5c:7e:f8:99:06:03:da:57:84:a7:bc:
                    5a:b2:9f:6e:16:88:c9:ae:28:f6:c2:1e:e6:86:83:
                    b2:10:b9:31:f7:cb:ad:8d:b9:ed:8e:58:b6:b9:fe:
                    bc:cd:da:2c:21:70:b5:e1:ae:04:1f:52:08:1e:02:
                    48:cb:75:c8:f5:2f:23:b9:0a:20:21:b0:4b:3e:2c:
                    40:fe:76:c7:7f:09:c0:b0:d1:0a:50:8d:37:54:38:
                    f2:af:f3:9f:e3:54:f7:0e:c9:12:d6:b0:22:8d:f3:
                    27:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:65:C2:C9:BE:42:F0:E3:8F:AF:D7:34:44:BC:F5:CB:0B:79:E8:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d3ceedb7-9aff-343f-9b84-cfb141f266f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a40c::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:b9:86:43:83:bf:41:e0:6c:9c:40:02:75:5f:0c:ba:60:32:
         5c:f7:b8:97:26:6e:39:50:62:38:43:a7:f1:bc:13:32:56:61:
         bb:d5:2e:36:63:7e:07:6a:b5:ae:40:4d:33:6d:3e:97:c9:90:
         d8:7a:a3:17:6a:9d:4e:34:bb:22:88:c7:15:27:dd:2e:67:a0:
         44:e6:6c:84:66:14:78:36:c0:a0:b4:59:31:16:85:4c:61:4e:
         72:57:67:f3:dc:91:88:18:46:d3:c6:9b:e8:61:30:f7:f3:4e:
         04:05:e7:7c:8d:51:5c:02:28:09:86:86:56:d7:1a:2d:6e:25:
         56:11:06:15:57:14:3b:06:1a:4e:bf:63:a4:51:1f:43:6a:93:
         cf:f9:94:9e:64:c3:e6:d6:4e:c0:70:4b:25:e4:f3:aa:a2:b2:
         01:97:1c:6c:b5:56:5b:b4:65:fd:3e:e3:84:3d:74:71:2e:97:
         76:04:80:89:ee:07:cd:27:76:ef:5f:86:4d:01:90:81:ac:aa:
         9c:fd:50:b8:8c:2d:6a:7b:43:05:5d:cc:ca:92:2a:b4:4b:bd:
         fd:58:52:9d:66:a5:3c:cd:2d:d3:c7:4b:e1:eb:c7:fc:82:32:
         7b:ec:01:a2:9d:49:08:3c:27:ad:e3:71:37:90:be:8d:9f:08:
         60:ce:86:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----