Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ae290034-ca5f-35e8-93ce-18407f143586.roa
File:                     ae290034-ca5f-35e8-93ce-18407f143586.roa (raw, json)
Hash identifier:          m8A9j2OK9bWCYF9i+3UnccsCxyaCDsoqeg71w4BwY3U=
Subject key identifier:   64:B7:19:93:4D:82:6A:3E:1F:B0:8F:78:E7:8C:04:C2:BE:0F:50:FC
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858497544658F1AD5241D0FC6DF80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ae290034-ca5f-35e8-93ce-18407f143586.roa
Signing time:             Tue 08 Apr 2025 13:00:59 +0000
ROA not before:           Tue 08 Apr 2025 13:00:59 +0000
ROA not after:            Mon 07 Jul 2025 13:00:59 +0000
asID:                     20940
IP address blocks:        2600:140b:b000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:75:44:65:8f:1a:d5:24:1d:0f:c6:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr  8 13:00:59 2025 GMT
            Not After : Jul  7 13:00:59 2025 GMT
        Subject: CN=4eb409d6-1712-42fa-b05b-568073187ed7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:8b:e4:40:c9:b3:12:6d:cb:3e:39:39:c4:0f:
                    e2:e8:2b:bf:9a:75:0a:30:8d:04:50:d4:94:e4:a1:
                    14:2d:fc:05:1f:62:7e:18:98:e6:12:62:83:1c:7a:
                    46:75:a2:e5:a5:6f:89:fc:a8:f4:3a:1b:e3:30:5e:
                    55:fb:79:21:f7:58:8c:e5:3c:ba:e4:4b:bb:4c:d2:
                    b3:c8:9d:4b:ab:f3:05:e3:fc:c3:0c:35:90:5e:94:
                    65:e7:9c:3f:50:27:79:26:1f:ae:3d:9b:30:ad:cd:
                    43:e6:87:a8:5a:90:8c:84:0e:19:77:f3:89:70:c6:
                    74:a5:18:a7:79:de:03:5e:d5:7a:b6:44:00:b1:02:
                    92:e5:02:5f:25:09:d0:2b:86:25:8e:ce:3a:73:87:
                    84:b8:ab:b5:68:b6:fc:9d:87:59:f5:1b:02:78:36:
                    b4:7d:c3:69:8f:a4:dd:a9:c1:58:79:e4:1e:44:3f:
                    c4:19:fb:70:4c:dd:0b:ea:02:91:6a:ab:0b:68:93:
                    9d:80:77:1f:2e:6f:1b:e3:d8:e3:c3:4c:5a:d3:81:
                    ee:62:99:b6:af:fa:78:bb:de:1b:8d:96:9d:4f:ae:
                    09:57:08:1f:42:c0:4e:e8:75:83:df:57:b4:35:a6:
                    ea:d1:17:cd:71:e3:19:9a:78:1b:74:4b:4d:bb:28:
                    2f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:B7:19:93:4D:82:6A:3E:1F:B0:8F:78:E7:8C:04:C2:BE:0F:50:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ae290034-ca5f-35e8-93ce-18407f143586.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:140b:b000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:0d:40:d9:a3:d1:86:58:68:ed:2a:59:74:5b:b9:24:f3:e3:
         b1:38:ac:f4:dc:7e:c8:13:65:71:66:f2:a7:06:b6:52:ae:cf:
         9e:0d:18:85:21:dc:f9:21:f5:a4:81:1e:19:3f:60:b6:92:f9:
         c6:58:6a:17:11:68:42:fc:d4:b2:32:d6:52:a3:69:87:c4:95:
         a7:6a:86:df:0d:46:fa:ea:63:55:9a:19:88:ee:ef:72:fd:27:
         92:ef:2d:9b:ad:89:64:16:94:01:27:30:91:4a:bf:34:ff:35:
         f1:69:64:23:c6:6d:d5:0d:16:14:b5:fb:35:29:b3:db:05:a9:
         10:6d:97:62:47:62:08:7a:d1:6b:95:a1:3e:87:4e:c1:28:ec:
         1b:d4:ba:a1:a6:fa:56:81:21:78:8a:2e:4f:a6:00:8c:26:e9:
         dd:ac:dd:59:91:19:1e:09:a3:f6:4c:dd:33:8a:e9:ff:09:8d:
         7d:31:04:d9:5c:d7:a6:b9:65:31:6e:c0:84:bd:90:19:d1:81:
         b4:a9:14:af:7a:d8:23:3d:a2:de:ba:67:c8:b2:d3:7d:c4:10:
         4f:9e:60:c9:4d:5f:c9:f9:a9:3f:a5:92:5b:75:dd:35:a9:e7:
         c9:8d:88:5a:3a:6f:e1:d8:ae:9f:29:c5:1e:ea:be:66:19:3c:
         fe:fc:e1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----