Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bd0e94-6557-4459-b9ca-7bbf8fe73f58/4c04362b-fcf5-304c-9964-276c3f81f4f0.roa
File:                     4c04362b-fcf5-304c-9964-276c3f81f4f0.roa (raw, json)
Hash identifier:          U2oXnD171N5Q4RuJlxUWqXK3gwGO80IWLdP4psG8guw=
Subject key identifier:   B5:4A:9F:DF:C0:6D:A7:7C:8F:E4:71:70:BA:E0:29:06:22:E5:AB:61
Certificate issuer:       /CN=e4bd0e94-6557-4459-b9ca-7bbf8fe73f58
Certificate serial:       010D0C9F432858493C09217920CB9CFABF3D0380
Authority key identifier: C2:63:D8:50:63:80:22:7D:EC:2E:61:BB:35:1C:1F:AD:33:94:16:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bd0e94-6557-4459-b9ca-7bbf8fe73f58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bd0e94-6557-4459-b9ca-7bbf8fe73f58/4c04362b-fcf5-304c-9964-276c3f81f4f0.roa
Signing time:             Wed 19 Mar 2025 01:00:40 +0000
ROA not before:           Wed 19 Mar 2025 01:00:40 +0000
ROA not after:            Tue 17 Jun 2025 01:00:40 +0000
asID:                     36103
IP address blocks:        64.77.240.0/20 maxlen: 20
                          67.207.32.0/20 maxlen: 20
                          2604:76c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3c:09:21:79:20:cb:9c:fa:bf:3d:03:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bd0e94-6557-4459-b9ca-7bbf8fe73f58
        Validity
            Not Before: Mar 19 01:00:40 2025 GMT
            Not After : Jun 17 01:00:40 2025 GMT
        Subject: CN=b61af4cb-b136-467b-b093-7bad80846240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f3:1d:c8:b3:37:22:de:1c:79:f8:33:4a:2f:
                    ef:ee:7b:b1:db:ba:10:13:64:24:8b:ec:89:f8:ef:
                    84:50:e4:8c:2d:0d:45:aa:d8:4d:bc:10:e3:e7:1a:
                    e5:d5:25:cc:d4:37:b3:6b:a9:d7:60:f1:e3:df:6a:
                    2f:fd:8b:1c:c1:9c:04:2e:cd:f4:12:56:62:65:96:
                    29:09:8e:ae:11:fd:63:40:b3:92:32:0e:38:7a:ad:
                    0e:93:10:96:7d:a3:8f:ad:ea:bf:3d:c0:37:30:47:
                    ff:a4:96:a0:65:0b:04:e1:1a:30:24:68:98:c3:d2:
                    86:5c:3b:4c:c4:84:05:42:4d:7c:3a:e7:ce:2f:20:
                    61:06:45:69:f4:60:1a:5b:c7:71:eb:e2:c6:bc:64:
                    b4:89:95:b9:e6:cc:ae:ce:80:22:3b:f9:4c:8f:d0:
                    e3:0e:79:0d:1a:03:a1:5b:e7:36:09:a5:dc:66:58:
                    08:a5:6f:9b:35:2e:9a:08:60:f4:6f:61:4f:dc:fd:
                    24:37:6e:57:08:ff:0f:44:47:d7:c0:b2:09:84:d4:
                    ee:18:4b:77:96:e7:73:04:1e:26:82:4d:cd:c0:f0:
                    54:bf:8d:f2:54:a4:b7:6e:d8:58:da:3d:5e:9c:02:
                    5c:5b:dd:a5:79:62:98:d8:7a:b4:57:05:55:6e:ff:
                    23:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:4A:9F:DF:C0:6D:A7:7C:8F:E4:71:70:BA:E0:29:06:22:E5:AB:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bd0e94-6557-4459-b9ca-7bbf8fe73f58/4c04362b-fcf5-304c-9964-276c3f81f4f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bd0e94-6557-4459-b9ca-7bbf8fe73f58/e4bd0e94-6557-4459-b9ca-7bbf8fe73f58.crl

            X509v3 Authority Key Identifier:
                keyid:C2:63:D8:50:63:80:22:7D:EC:2E:61:BB:35:1C:1F:AD:33:94:16:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bd0e94-6557-4459-b9ca-7bbf8fe73f58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.77.240.0/20
                  67.207.32.0/20
                IPv6:
                  2604:76c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:f4:13:63:54:ac:78:8f:53:6a:1e:3b:85:e6:66:11:b1:74:
         cc:92:db:4e:92:23:02:3b:5a:8b:70:72:fe:e1:0f:d3:9c:1e:
         2c:df:96:53:9b:27:44:58:cd:28:cb:b8:fd:22:ea:81:e8:14:
         42:52:3d:c3:c1:17:39:a0:03:15:ce:a4:d2:8f:91:e2:1e:8a:
         f9:d2:1c:f7:a9:0d:e2:b2:70:a2:f2:c4:11:c1:cd:20:b1:f9:
         ba:07:cf:98:a3:ba:70:65:3d:0e:b8:74:72:3f:fe:38:52:1f:
         2f:73:a1:e7:01:26:aa:10:ae:d7:6b:f5:9f:c1:0d:f3:cd:15:
         22:05:58:25:a0:cb:3e:17:47:8f:a3:c1:d3:ba:b1:92:ef:2c:
         b0:8b:a5:81:3a:8e:53:54:3f:af:b4:fc:1a:e8:d2:cf:dd:8b:
         cf:7d:23:2d:71:9e:10:b9:09:86:9b:c8:d1:42:95:bc:e0:bf:
         c7:6c:0c:11:e9:4a:60:cb:6f:c5:13:d2:0b:80:72:33:94:3f:
         86:4b:cc:af:4a:73:29:a0:b6:f3:b0:69:52:42:48:02:c3:56:
         5a:d8:0d:24:1f:73:1d:d1:ca:bd:22:bd:38:8e:19:e5:25:db:
         ce:df:3f:e1:af:e7:b6:fd:09:06:bd:68:13:9a:8e:03:26:eb:
         8c:f8:fd:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----