Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/553adf4c-94fa-38fb-bce6-21adbbc2bf2c.roa
File:                     553adf4c-94fa-38fb-bce6-21adbbc2bf2c.roa (raw, json)
Hash identifier:          JvyYyVZJ34rdHKaI0vSobW/HhIoeC4m7Rcct+qhBASc=
Subject key identifier:   2B:10:9D:CE:36:0E:8A:BE:46:AF:D9:05:5A:83:82:96:17:90:7E:DB
Certificate issuer:       /CN=039cfe68-90bd-49ec-9597-6ac7ebfc0cf9
Certificate serial:       010D0C9F43285849088167422F6047D0E55B6A00
Authority key identifier: 68:4C:8A:9A:C3:36:3B:3A:06:FA:5D:6B:80:2F:49:44:EA:10:01:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/553adf4c-94fa-38fb-bce6-21adbbc2bf2c.roa
Signing time:             Fri 28 Feb 2025 14:00:52 +0000
ROA not before:           Fri 28 Feb 2025 14:00:52 +0000
ROA not after:            Thu 29 May 2025 13:00:52 +0000
asID:                     3663
IP address blocks:        2604:aa00::/32 maxlen: 56
                          2607:f430::/32 maxlen: 56

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:08:81:67:42:2f:60:47:d0:e5:5b:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=039cfe68-90bd-49ec-9597-6ac7ebfc0cf9
        Validity
            Not Before: Feb 28 14:00:52 2025 GMT
            Not After : May 29 13:00:52 2025 GMT
        Subject: CN=4681d1e9-d016-4a42-b21e-b5db510c15eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:41:2a:00:f3:b8:7c:f1:1e:a6:22:f7:43:5b:
                    82:b2:46:b4:f4:38:21:30:0b:21:1b:6c:43:ae:cc:
                    1c:06:8a:5d:79:ba:2c:95:79:01:f5:45:c1:55:98:
                    8a:31:72:12:a9:b8:b6:b7:be:28:69:d8:a4:f3:4e:
                    8a:0b:3a:5b:1c:6f:ba:3c:d1:d2:bc:89:40:d5:98:
                    24:f5:c9:98:4a:97:cc:b1:d3:0a:39:ca:af:96:0a:
                    8e:56:03:23:cc:79:ef:8e:6b:66:cb:5d:10:8e:4e:
                    b1:9a:c7:82:00:aa:f9:ce:ce:ca:8e:3c:6b:41:1f:
                    ff:37:0e:d2:37:14:ea:80:db:fc:53:c3:8c:72:02:
                    08:37:3c:dd:c5:10:5d:6c:69:ef:bf:64:d0:fc:ed:
                    22:88:f7:f9:93:ff:6d:c9:ed:ae:24:12:e0:33:7f:
                    27:6c:29:ff:35:c8:61:1a:2c:41:99:46:5f:5c:b6:
                    65:0f:c0:a0:7f:01:a9:11:a9:88:46:f0:36:93:c6:
                    f4:2a:82:e1:1c:d4:bd:b4:cb:f2:a2:5a:cc:12:2a:
                    c0:83:5b:47:92:39:e4:76:47:74:f5:21:48:9f:59:
                    17:6d:d2:1b:cc:22:37:bd:66:ae:b6:07:2b:fb:82:
                    dc:62:b2:a1:91:a5:ef:40:68:34:bf:40:55:a9:c4:
                    79:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:10:9D:CE:36:0E:8A:BE:46:AF:D9:05:5A:83:82:96:17:90:7E:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/553adf4c-94fa-38fb-bce6-21adbbc2bf2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.crl

            X509v3 Authority Key Identifier:
                keyid:68:4C:8A:9A:C3:36:3B:3A:06:FA:5D:6B:80:2F:49:44:EA:10:01:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:aa00::/32
                  2607:f430::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:c1:83:b1:21:f5:d3:ce:dc:fd:b9:91:1f:10:9d:73:eb:34:
         75:d3:8f:e0:90:c6:c8:f3:60:fe:86:81:1b:2c:85:63:90:d5:
         20:35:53:94:46:09:47:b6:39:65:f2:bb:bf:fc:7e:e8:53:a2:
         e3:13:2c:3b:e4:b9:54:f6:e8:e6:ba:34:ed:50:fe:88:4d:fa:
         f4:d5:d3:d1:41:81:d8:94:a6:58:ff:bb:16:36:7a:2f:50:29:
         d2:7e:43:5f:51:e4:2d:48:c4:1c:48:37:5c:80:7c:9c:a3:29:
         4d:6e:22:0a:96:0c:a9:0b:06:cb:13:8d:39:cb:d6:a0:25:39:
         fb:87:0d:ed:f3:ae:04:b5:f5:88:14:e8:99:a3:75:ed:44:ef:
         6e:9b:9f:a2:18:f6:1e:63:a1:51:f2:79:fa:44:a6:8f:e7:a6:
         fd:fd:48:ed:28:17:e9:bc:c5:9b:69:1f:d9:b9:9d:76:ed:cf:
         9c:45:4d:3f:48:33:c1:e5:86:54:47:3a:f6:b5:44:67:c3:ad:
         b2:39:2b:0f:91:f6:39:91:85:9c:f3:21:12:68:d3:8b:b9:5e:
         8f:8c:1e:c4:bc:45:cd:5c:77:73:17:ae:20:8a:be:66:ab:88:
         f1:03:fa:4a:a9:e3:97:61:37:07:c9:e8:62:38:0e:52:e7:8b:
         95:68:b2:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----