Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/9aea7e75-54d9-315f-9691-1f25d6d35f7b.roa
File:                     9aea7e75-54d9-315f-9691-1f25d6d35f7b.roa (raw, json)
Hash identifier:          Xx2mXGDWPgiH4gAsPC31ABXtYO/emw5XJK8TrbbnUfU=
Subject key identifier:   EB:CD:90:46:A4:68:DC:67:F8:F9:C8:52:34:33:CD:95:73:20:5E:20
Certificate issuer:       /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial:       010D0C9F432858495EEEEAFE5CD01A69BFC30E00
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/9aea7e75-54d9-315f-9691-1f25d6d35f7b.roa
Signing time:             Mon 31 Mar 2025 13:00:59 +0000
ROA not before:           Mon 31 Mar 2025 13:00:59 +0000
ROA not after:            Sun 29 Jun 2025 13:00:59 +0000
asID:                     16417
IP address blocks:        2620:101:200b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5e:ee:ea:fe:5c:d0:1a:69:bf:c3:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
        Validity
            Not Before: Mar 31 13:00:59 2025 GMT
            Not After : Jun 29 13:00:59 2025 GMT
        Subject: CN=fd141a91-c9b5-46cb-b95a-2b7d32228640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:5b:a7:45:e9:97:27:7c:fa:c7:1d:5b:75:8a:
                    d9:f2:f1:60:7c:2a:64:fc:b1:db:06:04:5a:9c:f0:
                    f3:24:9b:d0:15:61:e6:4b:86:ae:dc:76:99:71:75:
                    c4:1d:b7:db:ec:e2:da:6a:bc:74:ac:45:87:2c:94:
                    64:dc:7d:e6:93:68:40:52:60:53:92:07:0a:4f:24:
                    e1:65:e0:6a:0b:b5:75:db:d0:c1:12:c7:99:f0:63:
                    08:4d:7d:82:d7:64:27:3a:f4:f6:32:6e:14:fa:55:
                    f4:dd:19:eb:a0:c5:01:0f:7e:aa:4e:1a:bd:ff:6d:
                    e4:83:9c:00:50:fb:a7:51:77:dc:59:35:56:f8:16:
                    91:44:5c:db:22:f1:e4:44:9d:c5:8e:a3:1d:fa:6d:
                    b4:94:50:09:11:ce:12:91:49:94:f8:65:6c:75:4b:
                    73:a6:12:85:41:07:83:ad:2f:41:c2:81:fb:af:7f:
                    89:91:f9:52:d5:66:33:e9:36:b0:65:fd:ab:3f:3c:
                    88:5a:03:5c:8b:29:aa:2c:4d:05:23:1d:3b:a9:bb:
                    fb:e9:ea:f4:11:74:b0:ef:f7:b4:dc:fd:d1:96:64:
                    ae:2a:61:e4:65:58:f9:06:1c:cb:78:3c:91:ae:b8:
                    5e:3d:00:82:64:21:de:bd:13:a3:2a:a4:42:de:37:
                    9a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:CD:90:46:A4:68:DC:67:F8:F9:C8:52:34:33:CD:95:73:20:5E:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/9aea7e75-54d9-315f-9691-1f25d6d35f7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:101:200b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:3b:e6:0e:22:a9:97:90:47:da:9a:95:4f:aa:90:62:93:ae:
         b6:58:cc:fc:e3:54:f0:c6:49:b0:e9:e7:81:2c:44:d5:6c:56:
         20:09:8e:11:08:62:74:57:9d:b7:ec:2a:c9:10:bd:6f:1b:c3:
         c9:80:2c:f8:ff:f9:4c:41:45:fd:5d:d7:81:f4:02:cd:f7:fc:
         7a:0c:40:49:c2:33:48:84:c5:dc:88:3f:1b:1e:b9:e1:fe:94:
         ba:19:3b:e2:5e:06:2f:9a:3f:58:88:38:f3:13:55:ea:dd:80:
         63:5a:03:6f:5a:63:64:4e:b3:f9:57:2f:69:86:0d:2c:ed:53:
         8c:4f:3d:9e:43:da:38:da:d0:d1:8e:f0:fa:0b:9f:a7:e8:46:
         04:66:db:d8:13:98:58:03:14:18:89:e3:e1:f7:23:bc:a7:28:
         c5:53:24:dc:c4:47:7c:52:dc:19:d3:d3:5c:9c:5b:f1:3d:da:
         32:b3:29:af:6b:c0:10:bf:b1:30:8a:92:cc:e4:5f:ca:01:82:
         ea:6c:fd:30:a3:ca:34:05:cc:a3:16:ba:6f:8d:27:f3:22:d8:
         ec:25:9b:c8:4d:d3:e6:41:58:91:21:24:9e:c2:cb:a3:2e:06:
         07:e1:ad:32:3d:b9:8d:1b:3b:1e:70:45:1e:d5:84:d2:27:f5:
         16:3f:ca:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----