Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/a0664a04-65f3-3769-8cf8-3417add96a9b.roa
File:                     a0664a04-65f3-3769-8cf8-3417add96a9b.roa (raw, json)
Hash identifier:          KElCmb2pPnR+PAF7jAqvVmbkRXm7EPuGlcKnUgaTWeU=
Subject key identifier:   1C:46:10:0F:48:72:83:83:E5:D4:7B:83:89:70:40:AF:32:47:AF:49
Certificate issuer:       /CN=afc9c4c7-de4a-4066-870e-383d770d6d47
Certificate serial:       010D0C9F4328584976A98F5801A45F2AE08BBE80
Authority key identifier: 5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/a0664a04-65f3-3769-8cf8-3417add96a9b.roa
Signing time:             Wed 09 Apr 2025 01:00:47 +0000
ROA not before:           Wed 09 Apr 2025 01:00:47 +0000
ROA not after:            Tue 08 Jul 2025 01:00:47 +0000
asID:                     14500
IP address blocks:        2607:72c0:200::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:76:a9:8f:58:01:a4:5f:2a:e0:8b:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afc9c4c7-de4a-4066-870e-383d770d6d47
        Validity
            Not Before: Apr  9 01:00:47 2025 GMT
            Not After : Jul  8 01:00:47 2025 GMT
        Subject: CN=f932a720-477e-4f64-b62a-0b569896580f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3b:59:9f:26:cf:ee:7a:65:87:ff:03:2f:34:
                    ff:73:6f:a1:71:17:46:29:8d:57:98:a3:d3:b7:43:
                    80:d9:00:45:c8:d3:7d:3f:5d:47:63:8a:d1:b4:a5:
                    a6:8d:e0:2a:f3:90:05:46:89:92:f3:29:2e:c5:27:
                    0a:16:57:76:df:51:a1:db:e7:e8:a5:8e:13:fa:70:
                    07:37:e1:13:85:ec:19:d9:47:c0:be:ca:20:30:dc:
                    f6:82:4b:28:26:4f:52:ee:e9:20:39:4e:98:c4:d4:
                    91:8b:39:b2:8d:c0:ba:f0:fe:a0:f2:1b:ad:63:9a:
                    25:35:cb:0f:aa:2d:d1:4e:e8:83:ac:96:c0:2e:02:
                    03:79:55:f9:d9:91:60:90:3a:11:68:32:b7:4c:50:
                    13:cd:5d:67:27:46:64:88:af:3f:c8:08:60:48:60:
                    7f:30:93:6e:c6:94:0e:b6:45:54:7c:74:7f:cb:3f:
                    7c:54:84:e5:69:f8:d0:21:22:ed:c2:a7:99:b8:91:
                    87:3b:9c:67:3b:f2:96:b3:36:91:6f:60:bf:79:8c:
                    09:c7:2f:88:58:00:e7:7b:08:fb:d8:72:5b:7a:2e:
                    69:50:74:56:82:80:a1:18:29:84:fc:d4:5b:f9:f0:
                    6f:ec:10:18:cd:42:ea:c0:ac:ad:55:4a:a1:8d:1e:
                    9b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:46:10:0F:48:72:83:83:E5:D4:7B:83:89:70:40:AF:32:47:AF:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/a0664a04-65f3-3769-8cf8-3417add96a9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl

            X509v3 Authority Key Identifier:
                keyid:5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:72c0:200::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:24:4d:99:ae:23:91:38:0d:97:33:38:57:f4:cd:a0:7d:ef:
         d5:a2:9a:6a:de:f3:01:6a:2d:19:d4:94:53:cb:72:c9:b5:64:
         10:12:3f:e6:5c:95:0f:e6:4a:6b:8e:bf:d4:13:88:c6:62:25:
         eb:5a:6e:d1:a3:b9:1e:9c:8d:48:90:4f:ff:79:bd:ca:d6:73:
         b8:9d:c4:70:b7:6c:83:e0:b8:f2:8b:1e:29:fe:b5:f0:de:a2:
         8b:44:51:82:0d:e3:3c:9d:7c:59:21:69:2d:06:15:2b:45:a3:
         ce:dd:af:c1:c0:e7:62:0d:ba:fa:97:7c:64:81:35:bf:1b:09:
         c9:e4:26:de:8e:87:29:cf:64:4b:91:a4:96:66:54:c2:cf:a3:
         2b:e6:de:f9:1d:98:6a:ab:8d:ae:b3:3f:09:e4:23:b1:30:b4:
         98:29:69:8c:f4:b9:56:a2:a8:49:33:c6:57:04:7a:58:eb:68:
         60:6f:2a:94:0c:9c:23:01:5e:8b:71:50:6a:35:0a:53:3a:18:
         50:b8:d8:c6:12:94:0f:a6:ff:9d:f6:2e:d7:f8:6b:f8:b5:02:
         bc:1b:0c:ae:7b:ca:c2:ff:8a:ff:dd:d1:f5:33:49:4e:b1:2b:
         ff:6e:5c:37:13:8e:65:bf:8f:40:69:69:b8:a1:84:86:3a:ac:
         2c:e4:4f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----