Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1dfa4246-82d6-3553-8fbc-92c8d6b572ac.roa
File:                     1dfa4246-82d6-3553-8fbc-92c8d6b572ac.roa (raw, json)
Hash identifier:          eC4BLTE76BqolM/zQDg3qQ1KvXKM1I7yK9oU8STQEZM=
Subject key identifier:   F5:6D:30:6A:49:C1:17:C1:A0:EE:BA:BE:A3:7A:CE:29:95:FE:4D:F0
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858495802985B856B6C171C155980
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1dfa4246-82d6-3553-8fbc-92c8d6b572ac.roa
Signing time:             Sat 29 Mar 2025 01:30:11 +0000
ROA not before:           Sat 29 Mar 2025 01:30:11 +0000
ROA not after:            Fri 27 Jun 2025 01:30:11 +0000
asID:                     22690
IP address blocks:        2001:470:112::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:58:02:98:5b:85:6b:6c:17:1c:15:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 29 01:30:11 2025 GMT
            Not After : Jun 27 01:30:11 2025 GMT
        Subject: CN=f7d3ed11-0e4a-479b-966a-abb3bfc8bfb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a4:19:9b:a5:d4:9a:bf:86:b5:4b:30:c7:45:
                    1a:fc:05:9c:bc:ee:e3:f8:65:7a:07:61:88:d7:50:
                    f7:d0:01:68:08:12:fa:33:5e:e6:ba:a0:e4:a1:8e:
                    84:fe:b0:9a:d1:ae:ce:ea:f5:f5:55:32:eb:2a:9c:
                    16:ac:b5:97:23:df:3a:e1:84:03:a8:f5:4d:bc:c3:
                    65:87:54:35:32:2c:56:d9:18:49:96:1e:13:07:77:
                    c9:f7:48:00:d8:81:ca:18:d2:63:22:e4:b9:be:21:
                    95:50:59:26:2f:5d:ca:47:22:b7:6d:43:71:4f:91:
                    7f:4a:32:ec:9f:7c:90:b4:5a:85:fe:06:fc:56:f2:
                    39:10:11:a0:85:69:67:7d:00:40:94:a4:0c:e3:f2:
                    8e:b8:f8:18:0d:f3:16:3c:1d:94:86:ad:79:da:e0:
                    e8:ff:b5:2c:b6:1c:f9:0e:29:27:c4:14:30:06:ae:
                    54:2c:18:47:fd:59:39:dd:1a:0b:90:bf:be:12:06:
                    cd:a9:c1:f5:f3:d2:d8:9e:a9:a0:39:c0:fd:5b:77:
                    3d:d8:5b:e0:02:bf:f9:81:d2:f9:ad:ec:75:7b:17:
                    16:9e:47:20:f9:46:95:6f:6d:37:80:ca:52:aa:86:
                    33:ae:7d:81:00:60:20:44:54:df:52:81:c9:03:51:
                    d4:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:6D:30:6A:49:C1:17:C1:A0:EE:BA:BE:A3:7A:CE:29:95:FE:4D:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1dfa4246-82d6-3553-8fbc-92c8d6b572ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:112::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:9c:ed:0c:14:7f:21:18:f7:f7:49:a7:0a:76:c3:a4:bb:02:
         18:14:da:98:f2:84:65:5b:8c:53:7d:e0:75:38:1b:6f:ba:b8:
         2a:53:9f:b1:15:fa:cd:8f:fe:3b:9a:6c:8d:04:b2:5a:a1:08:
         36:e6:c1:39:bb:76:6f:96:5d:a1:46:65:b2:92:e1:67:35:3e:
         21:bb:21:3b:c5:b5:4e:88:de:3c:ac:e2:b6:cd:b3:2e:76:46:
         de:4a:3b:a6:92:b0:9f:dc:64:b6:61:ec:2e:4e:85:43:f6:53:
         60:70:7d:07:e8:6c:f0:8f:98:8e:db:c8:fe:1c:a4:cf:eb:57:
         09:ad:90:93:2d:9a:e4:52:1b:10:b0:84:7e:01:95:76:ef:b6:
         f8:ce:7c:8e:d7:5a:33:6e:eb:93:c8:52:67:a7:ea:54:53:01:
         84:c8:7d:a1:ad:d8:86:99:ce:8c:d3:50:86:cd:6a:dd:1f:f1:
         69:6a:a6:b8:ce:3d:e8:82:56:93:8c:fb:ca:fa:14:61:3a:80:
         85:4c:fb:78:b9:b8:5f:f9:09:c5:0d:78:9f:87:c9:3a:38:31:
         d6:73:58:ec:2c:a4:f5:73:5b:71:c4:44:8d:d9:98:9f:aa:bd:
         b0:e2:86:30:3c:10:11:8c:51:bc:47:dc:9a:45:de:cf:a2:6b:
         28:37:8b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----