Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4e8e990-50f4-4284-bfc0-1878a5fbc0f0/9ef82791-0187-3292-ac80-d098483e41c9.roa
File:                     9ef82791-0187-3292-ac80-d098483e41c9.roa (raw, json)
Hash identifier:          ZmwSh4SsE83eHTRtAqGJP5XD7rUjpOwsT4rRvEv/DzM=
Subject key identifier:   EE:5D:C3:79:85:9C:F9:B7:8D:D7:4A:6E:8D:50:1E:B8:84:83:81:31
Certificate issuer:       /CN=b4e8e990-50f4-4284-bfc0-1878a5fbc0f0
Certificate serial:       010D0C9F43285848FD56BA95C95B871DB8A20B80
Authority key identifier: 50:54:33:D5:86:6D:3C:3B:51:47:9A:52:14:A6:2C:A3:03:14:2E:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4e8e990-50f4-4284-bfc0-1878a5fbc0f0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4e8e990-50f4-4284-bfc0-1878a5fbc0f0/9ef82791-0187-3292-ac80-d098483e41c9.roa
Signing time:             Mon 24 Feb 2025 14:00:52 +0000
ROA not before:           Mon 24 Feb 2025 14:00:52 +0000
ROA not after:            Sun 25 May 2025 13:00:52 +0000
asID:                     26042
IP address blocks:        2602:294::/36 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fd:56:ba:95:c9:5b:87:1d:b8:a2:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4e8e990-50f4-4284-bfc0-1878a5fbc0f0
        Validity
            Not Before: Feb 24 14:00:52 2025 GMT
            Not After : May 25 13:00:52 2025 GMT
        Subject: CN=14bd0426-6287-4da1-b85e-89e803068a26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:30:cc:60:8a:ee:9f:fa:98:c2:6b:49:d0:3c:
                    32:da:ab:0a:c6:b5:aa:51:d1:13:8f:44:ca:8a:ce:
                    38:62:d0:12:98:05:ce:f8:e4:65:3e:e5:68:57:ae:
                    b2:99:98:24:e3:3c:29:55:e6:62:18:f4:a7:b9:3d:
                    e3:bc:d5:93:c6:18:22:25:7e:aa:08:89:a5:9c:b9:
                    24:ef:a8:71:97:27:0c:1b:92:83:a2:23:f1:e4:4a:
                    a9:b2:44:2e:3d:22:b8:61:c8:13:23:68:68:63:60:
                    49:92:18:7b:6d:b7:34:2e:70:f6:ad:08:a9:a3:44:
                    ea:99:a1:87:a6:96:1e:e5:9a:cf:9c:6c:01:55:07:
                    1c:2d:cf:6f:fb:f6:64:85:7c:bc:19:7c:42:57:b2:
                    e3:73:09:33:00:08:83:c5:e6:6a:ce:36:fe:59:4c:
                    ab:2b:98:64:3e:c5:0e:4f:39:d4:ec:43:8e:9f:8a:
                    ae:5d:91:f6:78:8b:69:1d:a2:af:90:53:f5:b8:4c:
                    c3:b5:68:97:2f:10:69:ba:fb:73:af:1c:44:9c:c5:
                    be:2e:8a:30:34:29:62:10:c5:e7:b8:28:bd:ac:10:
                    c9:eb:da:a5:fa:99:28:56:2b:e4:03:48:b2:eb:63:
                    82:ee:b4:33:f5:00:ef:ef:7d:a1:6d:93:96:a8:e7:
                    df:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:5D:C3:79:85:9C:F9:B7:8D:D7:4A:6E:8D:50:1E:B8:84:83:81:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4e8e990-50f4-4284-bfc0-1878a5fbc0f0/9ef82791-0187-3292-ac80-d098483e41c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4e8e990-50f4-4284-bfc0-1878a5fbc0f0/b4e8e990-50f4-4284-bfc0-1878a5fbc0f0.crl

            X509v3 Authority Key Identifier:
                keyid:50:54:33:D5:86:6D:3C:3B:51:47:9A:52:14:A6:2C:A3:03:14:2E:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4e8e990-50f4-4284-bfc0-1878a5fbc0f0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:294::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:66:99:bf:1e:ec:86:c9:32:74:47:2b:19:bd:ff:f0:d2:ae:
         05:95:7c:10:60:33:1c:02:ab:07:e3:4b:44:28:bc:79:54:de:
         db:25:07:7e:fe:71:00:35:c0:04:77:b4:cb:3a:46:38:d4:7c:
         25:61:78:7a:71:9d:0f:6b:e3:78:bc:43:fc:93:9a:2f:60:7b:
         7b:bc:95:ed:d0:74:68:0e:ad:50:1e:bc:67:a4:97:ca:ed:3b:
         c7:31:c7:32:e7:2f:a5:b2:f6:32:2f:dc:3c:b2:e6:a8:f8:8a:
         61:8b:25:23:2e:91:a4:38:23:19:1a:ba:da:a4:d9:d8:ad:d2:
         61:19:8e:ab:c5:40:4f:73:c7:e7:8e:be:e1:7f:d1:85:da:64:
         cb:a1:d9:f0:34:ff:b4:95:38:90:2c:65:c4:19:54:d5:b4:43:
         9d:59:8d:35:64:3d:35:7f:d5:3f:79:5d:29:a5:d7:80:52:f0:
         07:0f:2b:3e:c6:39:85:7b:97:b8:74:e9:cb:c1:56:86:98:a4:
         b2:ee:1a:26:d9:2e:ce:b0:cf:2f:98:1c:f9:dd:48:20:a3:c9:
         2d:e5:39:7c:b7:e6:57:0d:ee:8d:d6:e0:80:92:03:e0:83:ce:
         f0:66:a9:61:d4:e4:55:c9:1e:f0:20:55:2f:b5:f2:51:09:45:
         0e:6b:b6:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----