Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2fb495fa-b5b2-4d47-aab0-bb476ca61963/dba30138-3d5e-38b5-91a7-e87672ea0f44.roa
File:                     dba30138-3d5e-38b5-91a7-e87672ea0f44.roa (raw, json)
Hash identifier:          yk8PY8831ulhbNuerWb9bxMCjA6Tqu+CuKX0N6BUE4Y=
Subject key identifier:   79:BE:7A:41:76:70:D6:81:BC:4B:F8:95:C1:7A:7D:59:1A:5A:AF:D7
Certificate issuer:       /CN=2fb495fa-b5b2-4d47-aab0-bb476ca61963
Certificate serial:       010D0C9F4328584902EC0D9E4A771769B5724F00
Authority key identifier: 9C:27:42:85:58:D4:D6:AA:7D:F7:C5:8B:92:6C:36:9D:A4:85:7F:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2fb495fa-b5b2-4d47-aab0-bb476ca61963.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2fb495fa-b5b2-4d47-aab0-bb476ca61963/dba30138-3d5e-38b5-91a7-e87672ea0f44.roa
Signing time:             Wed 26 Feb 2025 14:00:51 +0000
ROA not before:           Wed 26 Feb 2025 14:00:51 +0000
ROA not after:            Tue 27 May 2025 13:00:51 +0000
asID:                     33194
IP address blocks:        2620:10:a000::/48 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:02:ec:0d:9e:4a:77:17:69:b5:72:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fb495fa-b5b2-4d47-aab0-bb476ca61963
        Validity
            Not Before: Feb 26 14:00:51 2025 GMT
            Not After : May 27 13:00:51 2025 GMT
        Subject: CN=4708decc-db76-4dbd-9d6d-f47340decbc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f1:b1:b7:bc:41:79:0d:b2:36:d5:2a:88:77:
                    d6:51:f6:c2:97:2a:55:46:4a:90:68:4b:cf:13:6a:
                    cc:40:36:38:b4:35:29:f1:01:2d:12:7e:32:dd:b2:
                    cd:e1:3a:2f:82:18:da:e7:5d:8f:0a:9d:a6:21:27:
                    5a:82:7b:88:39:e2:7a:5b:d7:7d:d6:eb:f2:cd:e6:
                    1b:73:04:ab:88:be:ed:04:20:cc:03:11:ac:3e:49:
                    44:da:ac:71:1a:ef:74:bf:9b:86:7b:1a:5a:17:e8:
                    77:60:5c:bd:2a:0e:35:4f:ce:d8:73:a2:cc:cd:b3:
                    a7:3b:ef:e9:d8:db:66:4d:e6:0a:13:31:5f:d7:d7:
                    61:f5:c9:bd:d9:fd:68:67:17:03:b4:fb:f0:3c:fc:
                    a2:92:f2:70:02:52:b0:f0:65:3e:e8:63:26:fb:2c:
                    e3:3a:f3:cc:be:63:62:2d:30:ba:83:af:e4:ae:9a:
                    c0:8e:7d:24:c9:b1:44:07:c0:5c:0c:87:ef:e3:7e:
                    83:12:ec:60:57:d2:70:db:ae:f2:45:2d:b0:d9:da:
                    3c:40:3c:b5:e6:c2:38:9f:be:0b:c3:15:01:e2:85:
                    b6:e5:42:57:97:08:a9:79:0e:6f:09:a5:b6:00:c2:
                    15:a0:90:53:d3:84:8e:dd:ca:dc:a6:57:05:69:89:
                    de:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:BE:7A:41:76:70:D6:81:BC:4B:F8:95:C1:7A:7D:59:1A:5A:AF:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2fb495fa-b5b2-4d47-aab0-bb476ca61963/dba30138-3d5e-38b5-91a7-e87672ea0f44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2fb495fa-b5b2-4d47-aab0-bb476ca61963/2fb495fa-b5b2-4d47-aab0-bb476ca61963.crl

            X509v3 Authority Key Identifier:
                keyid:9C:27:42:85:58:D4:D6:AA:7D:F7:C5:8B:92:6C:36:9D:A4:85:7F:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2fb495fa-b5b2-4d47-aab0-bb476ca61963.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:10:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:f4:78:b3:1f:fe:38:f2:3f:ea:e8:da:f4:90:1a:31:eb:46:
         dc:96:a4:1d:45:ee:55:4e:93:1a:8b:cd:9e:f2:99:f8:e2:b1:
         00:f2:37:05:f2:c5:28:9f:54:56:9c:76:4d:76:19:6b:d5:0f:
         d9:2f:c9:47:05:f6:c4:16:e2:20:28:5b:f7:96:25:4c:3b:72:
         da:df:a8:01:cf:c1:e3:9c:47:95:db:b8:81:c4:69:13:35:59:
         46:e2:66:fe:3c:37:eb:a0:1a:03:8d:ac:12:ea:29:39:04:49:
         f9:ac:5a:7f:8c:8e:5b:d3:93:36:0b:1e:de:9e:1b:ba:de:49:
         fc:22:1b:d4:dc:a8:4e:b7:ac:13:ee:4e:e6:cd:38:01:20:4e:
         1c:fe:4f:28:b8:f5:cb:a9:50:ec:19:aa:a6:9b:5c:50:d2:d7:
         91:9f:07:7a:49:34:cc:04:fc:ff:8e:bf:75:a6:91:cb:4c:f8:
         d2:c8:b5:94:e8:c0:83:80:a2:6e:41:5d:a9:2e:bb:47:34:31:
         76:d8:74:cb:33:aa:2f:e2:00:a3:5c:a4:c6:75:ee:e8:4b:da:
         72:cc:d8:f9:79:b5:12:75:8d:05:91:5c:2a:a6:95:8a:22:51:
         59:5d:22:35:30:73:5a:29:20:c2:3c:fa:d1:d6:c4:c5:9c:f9:
         eb:9e:75:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----