Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/175ad2b2-07c2-3132-bd39-ad9050a1af8f.roa
File:                     175ad2b2-07c2-3132-bd39-ad9050a1af8f.roa (raw, json)
Hash identifier:          7N033NjKkd7Mea9KZA68f0dL+5RjNGV1HXDYhr7KsBI=
Subject key identifier:   AA:5B:F3:83:8C:42:39:75:4A:5B:38:E7:26:F8:4F:40:61:01:24:4B
Certificate issuer:       /CN=35ccbd7e-0844-48b1-88d7-0a8ef46e8168
Certificate serial:       010D0C9F432858495C244692A3F7FBF0F3CDB900
Authority key identifier: 31:67:54:B4:BF:16:7E:AD:F1:F4:10:C1:D9:D2:FA:DA:AA:85:3C:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/175ad2b2-07c2-3132-bd39-ad9050a1af8f.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     14511
IP address blocks:        2610:188::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:46:92:a3:f7:fb:f0:f3:cd:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35ccbd7e-0844-48b1-88d7-0a8ef46e8168
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=3ba7002d-ca76-44bc-9ec9-55779df0ddcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ec:07:46:c6:21:98:bd:98:93:a9:cd:29:15:
                    aa:7c:8d:05:59:51:3c:1f:22:ad:a8:f9:c9:f2:ed:
                    8c:28:af:80:07:26:1a:d2:87:91:fc:9a:b7:92:91:
                    ff:f9:cd:bc:53:49:89:9d:44:7d:a4:ea:d7:c2:2a:
                    76:4f:b9:07:69:d7:d8:fc:4b:7e:4f:ba:74:6b:a6:
                    bc:dd:74:75:b5:ce:e2:68:52:17:ac:bb:2e:98:ea:
                    b9:77:16:f0:96:d6:38:71:80:af:4e:e3:a0:cd:cb:
                    78:34:3f:cf:2b:20:1d:06:dd:07:da:4d:d1:d2:0f:
                    e9:c2:f1:fb:e9:fe:1b:4d:79:b1:3f:95:96:ca:10:
                    aa:27:42:cb:7d:ad:a7:d8:dc:5e:94:14:a1:de:28:
                    e5:a5:2a:bb:24:21:ce:7c:6a:70:3f:ab:68:45:9d:
                    43:59:4b:a5:ca:0b:d5:4a:7c:6a:56:ef:d3:8c:49:
                    8d:10:d9:61:57:9c:42:d5:62:bc:73:10:98:fb:71:
                    55:ff:93:bc:e9:ca:ac:be:74:33:fe:c8:68:a7:66:
                    cd:44:57:1d:0e:55:07:43:c0:7c:56:c1:d9:c9:73:
                    f9:7c:9f:c5:3a:c6:10:39:d0:e9:27:45:1e:47:09:
                    89:21:2a:2b:5d:ac:75:b7:e7:30:ff:de:4e:04:2a:
                    cf:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:5B:F3:83:8C:42:39:75:4A:5B:38:E7:26:F8:4F:40:61:01:24:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/175ad2b2-07c2-3132-bd39-ad9050a1af8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.crl

            X509v3 Authority Key Identifier:
                keyid:31:67:54:B4:BF:16:7E:AD:F1:F4:10:C1:D9:D2:FA:DA:AA:85:3C:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:188::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:e9:15:ac:c8:f3:39:07:ca:8f:9d:2d:33:5a:ad:9b:c5:d2:
         d8:27:12:25:70:bd:1d:4c:f4:75:aa:08:e8:aa:dc:fa:2e:1c:
         b4:a4:d2:b5:87:54:5f:62:d6:4b:49:93:3f:3b:9e:b9:d2:99:
         5b:ba:8e:85:9c:1b:6a:d5:ff:8c:24:74:eb:d3:ad:06:c8:5d:
         42:a2:43:47:8a:a9:d2:1f:ac:13:9a:9f:fc:0f:a9:d2:3e:21:
         30:26:a4:d7:b7:65:20:78:50:c8:0c:73:14:a0:68:7f:dd:c9:
         a0:be:7e:67:24:a9:94:70:03:64:c8:89:00:0f:fb:aa:68:64:
         2b:35:c1:51:d6:01:e0:07:98:b5:b6:2e:43:92:20:e6:47:86:
         6c:e1:d8:2f:12:5c:0e:91:3f:6b:00:d8:60:2f:2c:3f:3e:2d:
         a6:18:16:d2:d2:a9:a0:ed:49:77:fe:24:4c:07:77:e3:34:2c:
         28:be:af:1a:41:94:cd:65:9e:a0:ec:ef:3b:6a:7b:5f:7f:77:
         6a:31:dd:68:80:3a:b0:18:64:41:db:c1:6e:e8:eb:0a:e9:dc:
         62:14:86:4f:bd:fa:58:1c:1b:ed:26:6a:18:15:f0:91:6d:24:
         d7:ae:61:61:99:49:fd:b6:70:7e:31:91:f1:b7:7e:52:0b:a4:
         78:73:50:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----