Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6/3eeee4d3-e250-340d-9b70-0dfe3a06b37d.roa
File:                     3eeee4d3-e250-340d-9b70-0dfe3a06b37d.roa (raw, json)
Hash identifier:          w/6JsEVVLY2gwgoJvpllDfqZx27YZc60AyUiZmXPF+E=
Subject key identifier:   8D:17:4C:4B:41:A1:CE:38:26:F9:E5:34:AD:B5:58:B0:2C:01:44:F1
Certificate issuer:       /CN=ebff2bbd-fab0-4f48-a625-d53c63f1bbe6
Certificate serial:       010D0C9F43285848DA73B3850531EACE38174350
Authority key identifier: 43:DE:DC:F8:9F:C5:8D:6E:3C:61:F8:80:3F:72:0E:D5:0C:74:A6:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6/3eeee4d3-e250-340d-9b70-0dfe3a06b37d.roa
Signing time:             Wed 12 Feb 2025 02:06:14 +0000
ROA not before:           Wed 12 Feb 2025 02:06:14 +0000
ROA not after:            Tue 13 May 2025 01:06:14 +0000
asID:                     18604
IP address blocks:        2604:1a0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:da:73:b3:85:05:31:ea:ce:38:17:43:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebff2bbd-fab0-4f48-a625-d53c63f1bbe6
        Validity
            Not Before: Feb 12 02:06:14 2025 GMT
            Not After : May 13 01:06:14 2025 GMT
        Subject: CN=f21e9e35-7efb-4f58-a2ea-4f96a622428d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:17:de:04:59:8d:51:90:e2:00:f0:a1:e9:d1:
                    63:ad:21:fc:7d:b0:4e:9c:98:e2:08:a2:59:dc:c9:
                    97:f5:00:a1:0f:67:af:69:06:ac:2e:1e:a7:30:a5:
                    7e:93:28:60:71:07:3d:31:35:7b:da:aa:72:c2:75:
                    67:9a:eb:ad:37:a3:6f:10:11:4b:e2:b3:e1:85:d6:
                    99:e7:25:ab:a9:61:39:59:a1:33:d6:92:77:9d:18:
                    54:28:53:29:e3:fd:e6:87:a8:20:d3:c8:92:98:63:
                    bc:93:5d:a2:3c:24:e8:f1:64:58:41:92:8f:49:a3:
                    18:36:75:7e:99:8d:be:f8:a8:47:2f:a5:20:36:64:
                    00:00:99:34:ed:18:e6:00:81:f1:06:90:0c:7a:9b:
                    01:1b:df:5e:83:a3:2e:99:ea:1b:f7:97:55:43:32:
                    d5:a1:aa:62:58:d9:d8:73:20:1f:9f:a9:77:4e:b5:
                    3c:86:9f:90:db:09:7e:f7:65:47:33:5d:77:61:79:
                    1c:2b:a9:19:6c:c3:1e:f0:aa:50:7c:4e:05:c6:9b:
                    d0:95:d3:ee:e1:1a:73:03:b7:38:4a:83:05:07:60:
                    5b:df:6d:91:75:3f:39:6d:c1:0d:69:f5:1b:51:ff:
                    df:03:aa:ae:94:88:46:fe:63:b5:e3:10:f5:da:df:
                    20:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:17:4C:4B:41:A1:CE:38:26:F9:E5:34:AD:B5:58:B0:2C:01:44:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6/3eeee4d3-e250-340d-9b70-0dfe3a06b37d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6.crl

            X509v3 Authority Key Identifier:
                keyid:43:DE:DC:F8:9F:C5:8D:6E:3C:61:F8:80:3F:72:0E:D5:0C:74:A6:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:1a0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:ba:c8:37:ff:e5:a2:89:24:4b:ad:0a:d0:46:e6:ec:dd:ef:
         66:c2:2d:f8:41:d5:c9:c9:e1:1f:70:4a:88:57:eb:c4:9b:9e:
         2c:5e:89:10:49:a0:f9:d2:14:08:42:96:05:92:ea:67:a0:ee:
         bf:eb:8b:0a:7e:47:f5:56:f3:ab:da:bf:8a:d1:62:08:a4:74:
         bb:c3:d7:42:f9:c8:ad:1c:ab:7a:be:2a:18:8f:81:9b:a4:da:
         c4:9f:46:ca:74:6a:b3:eb:c2:ad:2d:9c:20:dd:59:f7:ae:94:
         a9:8a:3b:fa:66:51:32:80:42:16:63:43:8b:db:5d:e0:a7:bc:
         ed:f6:68:47:ae:cc:07:8a:46:44:3d:c1:1f:a0:e7:7f:08:66:
         51:4c:7c:1e:5b:7e:5f:e3:d5:d8:de:58:5b:4d:bb:88:09:2c:
         12:37:f7:c8:95:05:a0:86:26:6e:0a:10:22:99:fb:7c:92:87:
         55:a3:aa:54:2a:bc:15:c4:9f:84:70:e4:2e:4d:37:61:55:4d:
         80:37:40:b0:61:e8:59:25:79:f6:2e:13:85:da:19:a1:d0:f0:
         1b:24:75:1a:2b:5e:e3:46:3f:5c:d6:19:a2:61:05:b3:ce:2e:
         fa:38:7d:35:53:82:48:5f:06:61:28:e2:13:7d:fc:be:1c:47:
         34:e1:2f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----