Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e48dc9aa-413f-45f8-9a4e-20346bdcca64/ab70b155-c31f-3dfa-b48d-947689c8f9df.roa
File:                     ab70b155-c31f-3dfa-b48d-947689c8f9df.roa (raw, json)
Hash identifier:          LN7nL1/CFxvub4FSCpS4U6BEgK4BDv8J0UlZarcZ6kk=
Subject key identifier:   D9:B9:65:A3:E7:6F:57:42:2A:FC:BB:F8:16:D2:83:20:FA:22:14:85
Certificate issuer:       /CN=e48dc9aa-413f-45f8-9a4e-20346bdcca64
Certificate serial:       010D0C9F432858497279B82D3C12219221D18280
Authority key identifier: 73:F2:EF:9F:7B:AB:1D:FA:60:EB:45:BD:F6:94:39:DA:68:7C:31:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e48dc9aa-413f-45f8-9a4e-20346bdcca64.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e48dc9aa-413f-45f8-9a4e-20346bdcca64/ab70b155-c31f-3dfa-b48d-947689c8f9df.roa
Signing time:             Mon 07 Apr 2025 13:00:59 +0000
ROA not before:           Mon 07 Apr 2025 13:00:59 +0000
ROA not after:            Sun 06 Jul 2025 13:00:59 +0000
asID:                     29770
IP address blocks:        2602:faae::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:72:79:b8:2d:3c:12:21:92:21:d1:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e48dc9aa-413f-45f8-9a4e-20346bdcca64
        Validity
            Not Before: Apr  7 13:00:59 2025 GMT
            Not After : Jul  6 13:00:59 2025 GMT
        Subject: CN=e87eb917-3775-447d-be7d-5a999997c205
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:79:b3:46:6f:ed:af:e0:09:23:9c:2b:76:81:
                    f7:1c:f1:c5:2d:b3:8e:4b:0e:7b:8b:0b:f2:e2:b3:
                    2b:ba:27:68:67:5a:13:72:a1:dc:c3:55:14:06:a0:
                    a1:5f:54:35:0d:17:1c:94:45:1f:da:19:03:77:d2:
                    0c:d4:d2:f9:ef:05:89:2f:81:f5:f0:46:cf:01:38:
                    6c:8e:39:70:2e:1f:f8:0f:b0:ba:5a:f4:67:49:af:
                    5c:49:d7:9a:02:4c:2a:28:b7:dc:58:da:dd:40:90:
                    03:b9:3c:7d:75:b4:16:ba:b9:99:de:0e:0e:4a:a7:
                    84:ae:7f:5f:dc:56:db:de:fd:01:01:85:ed:1a:95:
                    af:94:d7:52:85:a3:cd:69:c8:34:4d:a0:e5:4b:f3:
                    b8:5c:81:3e:8f:54:bc:03:be:4a:b1:d5:58:7b:2c:
                    93:ef:37:8a:06:6f:e4:90:38:d8:b7:68:2c:2c:e0:
                    41:ba:22:8a:0e:de:e6:50:e4:d8:8a:b4:9e:44:ab:
                    70:12:ca:8c:24:b4:21:f8:73:2b:56:bb:93:b2:cf:
                    aa:a0:8c:70:75:21:f7:8d:86:16:a8:80:1d:56:b5:
                    42:8d:5b:c3:a9:25:1b:25:df:da:bb:8f:80:44:99:
                    5a:c2:b3:60:91:25:6a:a8:68:e5:1c:c2:0b:c0:0e:
                    a6:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:B9:65:A3:E7:6F:57:42:2A:FC:BB:F8:16:D2:83:20:FA:22:14:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e48dc9aa-413f-45f8-9a4e-20346bdcca64/ab70b155-c31f-3dfa-b48d-947689c8f9df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e48dc9aa-413f-45f8-9a4e-20346bdcca64/e48dc9aa-413f-45f8-9a4e-20346bdcca64.crl

            X509v3 Authority Key Identifier:
                keyid:73:F2:EF:9F:7B:AB:1D:FA:60:EB:45:BD:F6:94:39:DA:68:7C:31:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e48dc9aa-413f-45f8-9a4e-20346bdcca64.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faae::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:6c:f1:d2:9b:d9:b4:b7:33:9f:48:c6:7f:7b:72:74:d6:ed:
         d7:d8:9a:2e:ff:d9:ec:ab:94:23:f8:f9:91:9d:0c:e1:5a:6b:
         45:12:64:19:e1:06:49:ab:60:d6:20:fd:81:c7:b4:29:e6:8c:
         ad:40:ae:e8:d7:ba:92:b3:70:c6:14:76:48:3f:8d:6f:32:0e:
         f3:c1:0f:a2:30:36:94:c8:fd:10:f1:4c:27:c5:02:11:7c:f4:
         d1:0f:aa:dd:ee:45:43:11:c7:62:35:de:f9:89:00:07:e2:cf:
         6d:8d:74:cf:0d:75:fd:86:3b:eb:7b:b4:d6:ee:1e:9c:20:55:
         f9:15:c2:f0:3f:81:9c:5e:68:ec:f2:e0:64:f3:23:9f:24:db:
         68:ed:a9:10:ee:98:fa:0f:6c:be:80:f3:2c:4f:b0:ad:e7:80:
         26:b6:e6:fd:ff:40:4b:c6:2a:4c:ba:2d:63:cd:4f:a8:e4:1f:
         15:a9:0a:ca:86:42:49:d1:75:42:31:3e:bb:38:06:b8:9e:63:
         a3:df:e2:7a:4d:18:5d:da:4e:16:7d:46:ee:c2:f5:7d:18:fe:
         2a:fa:e1:c6:84:01:5d:86:98:b8:b3:5d:13:5d:41:22:36:f3:
         6b:08:21:15:80:5d:08:1f:11:8d:71:75:79:f3:10:c3:15:ce:
         bb:6d:39:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----