Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/07137d18-ea2a-3814-9a59-8ee61677f7c2.roa
File:                     07137d18-ea2a-3814-9a59-8ee61677f7c2.roa (raw, json)
Hash identifier:          qp4ztrReWCiW+u7K91RUJph70B/NaJT8W8m9v+B+x+Q=
Subject key identifier:   AF:C3:B0:BB:EC:5A:37:F7:47:4B:99:A5:02:28:23:A3:9B:DD:08:97
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F43285848EEC906CEE89BC0B194CC8900
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/07137d18-ea2a-3814-9a59-8ee61677f7c2.roa
Signing time:             Wed 19 Feb 2025 08:54:19 +0000
ROA not before:           Wed 19 Feb 2025 08:54:19 +0000
ROA not after:            Tue 20 May 2025 07:54:19 +0000
asID:                     198260
IP address blocks:        2001:500:f1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ee:c9:06:ce:e8:9b:c0:b1:94:cc:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Feb 19 08:54:19 2025 GMT
            Not After : May 20 07:54:19 2025 GMT
        Subject: CN=44a53994-005e-411f-9a83-c78a32c080e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:10:cd:92:2c:f5:84:ce:99:19:72:ee:f6:6a:
                    11:e3:bb:17:be:9d:6e:d5:42:d1:b7:e9:61:10:81:
                    db:2a:1f:4d:99:32:f2:78:51:cf:b5:58:ea:09:39:
                    c1:6f:4e:07:59:c2:90:f4:98:23:ba:d4:9d:f0:d1:
                    c0:fe:54:c5:9c:38:fd:a0:7f:a3:ae:bf:3c:ab:02:
                    02:24:e9:0d:aa:99:9e:7c:a8:18:67:f0:9a:7c:6e:
                    ce:64:57:b3:3c:2e:bb:0d:f1:e5:4e:d8:b0:2c:f9:
                    c2:7f:b4:57:a8:5b:51:82:58:78:c0:bf:20:58:35:
                    1a:31:cf:47:e7:cd:31:76:e3:1f:48:88:36:40:b5:
                    9d:e3:56:84:b9:58:ca:25:9b:f2:10:ed:17:e6:49:
                    48:95:8f:45:b8:7b:c7:51:88:55:bb:9a:51:35:59:
                    66:8e:57:af:e1:fb:13:bd:b0:9e:67:e2:fc:17:85:
                    a4:b7:86:3f:74:fb:01:4e:db:cf:e6:24:4d:1f:50:
                    70:2d:67:24:4a:54:ba:9d:16:d2:f4:8a:22:bb:99:
                    a6:1b:3e:48:b5:49:0a:0a:0c:14:1b:de:90:81:0e:
                    e2:b4:60:4e:ee:55:1c:3c:71:bd:de:f8:82:b0:e7:
                    9b:98:cf:b5:31:cf:54:7f:d8:8a:fe:bf:cb:9b:96:
                    bc:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:C3:B0:BB:EC:5A:37:F7:47:4B:99:A5:02:28:23:A3:9B:DD:08:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/07137d18-ea2a-3814-9a59-8ee61677f7c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:f1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:cd:42:91:ec:42:74:47:94:43:8e:8f:15:5c:1d:47:22:5f:
         9e:1b:e7:97:1e:bc:da:ea:d5:c5:0d:66:6c:fe:d0:0c:9c:f4:
         48:de:5d:20:8b:c1:79:91:64:4e:5b:6f:8d:00:3c:de:dc:ae:
         5f:1f:a8:ba:00:cc:80:98:a6:ba:1a:ea:e8:21:bc:98:6e:04:
         ad:a9:87:5c:24:0d:a8:4d:12:86:06:a4:06:ab:a5:bb:2d:01:
         b5:bb:1a:12:5b:be:31:89:52:9d:a3:e5:e8:59:68:1b:c1:76:
         8e:88:5e:14:4d:f0:a8:f5:4b:c4:25:bb:c2:ab:ef:f5:82:13:
         23:97:c4:cf:f8:60:97:5f:fa:13:cc:e9:a5:53:58:aa:9c:0f:
         1c:5b:e2:9f:fb:d9:b8:02:96:08:9c:7a:02:a6:f1:74:51:bf:
         e7:12:c5:f5:be:e5:08:4a:a6:12:25:ed:20:67:6c:a2:20:21:
         c3:99:00:f1:9c:c5:1f:23:e4:08:7f:24:2c:82:60:a0:91:d6:
         c4:ff:2a:cb:f1:a8:c3:87:9c:29:c4:38:21:2d:e4:e0:2e:b4:
         4a:2c:3b:a2:80:84:d2:9c:c2:00:fd:cd:b3:f2:cc:26:56:83:
         29:9e:16:1b:f8:4c:55:1d:f1:a5:18:eb:69:2b:72:fc:d7:2e:
         63:9f:37:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----