Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2cf4cb12-1642-3c7a-920f-da665acf4ab4.roa
File:                     2cf4cb12-1642-3c7a-920f-da665acf4ab4.roa (raw, json)
Hash identifier:          ru4knLLaWvNBJuJnbCcV16/eHeLhRd2eagMtPxwElqM=
Subject key identifier:   5E:58:C3:74:80:57:CA:40:FD:F4:5F:EA:3D:D0:2B:C8:9B:C7:E5:3B
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858493AA3E6B38035E319F073BE40
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2cf4cb12-1642-3c7a-920f-da665acf4ab4.roa
Signing time:             Tue 18 Mar 2025 13:00:50 +0000
ROA not before:           Tue 18 Mar 2025 13:00:50 +0000
ROA not after:            Mon 16 Jun 2025 13:00:50 +0000
asID:                     393301
IP address blocks:        2001:470:3e8::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3a:a3:e6:b3:80:35:e3:19:f0:73:be:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 18 13:00:50 2025 GMT
            Not After : Jun 16 13:00:50 2025 GMT
        Subject: CN=6067a79d-1ba0-44c7-bd11-2951a807cb7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:6d:22:40:69:35:7d:e0:01:fc:e6:dc:e6:dc:
                    e4:c4:e8:76:84:73:c7:5d:a2:cd:17:87:47:7f:3f:
                    ff:19:97:7e:bd:4f:61:bb:cc:05:d3:9b:50:60:5b:
                    c8:03:e4:cb:93:63:83:9a:50:48:91:ba:ff:c2:e9:
                    d4:e5:d0:fd:9d:d6:05:c3:39:f4:cf:31:81:bc:eb:
                    9e:f7:41:af:49:ea:35:20:59:bf:b1:7b:89:70:72:
                    df:c2:ef:3e:ff:48:05:ca:9b:7f:02:0b:2c:cf:f3:
                    14:d5:44:3b:0e:01:0e:ad:84:95:09:ce:87:7c:fc:
                    8b:ac:86:37:b1:74:d1:cf:5d:60:d5:de:08:8b:58:
                    76:1c:27:b7:5a:a6:cb:2e:78:2f:84:a5:2b:73:a7:
                    80:d8:5e:e6:f9:b4:85:36:9a:03:48:7e:f8:da:b6:
                    91:fe:42:32:bb:76:8a:ee:f7:71:08:c0:1f:0f:96:
                    e4:fc:4c:df:21:29:d9:f7:d8:05:34:ab:6c:a6:dc:
                    ef:55:d9:6e:a1:14:27:49:a8:d3:37:38:38:0b:1b:
                    11:08:95:52:90:4d:9f:ca:1c:ef:6c:0c:94:48:65:
                    2c:85:1f:02:a7:92:ce:0c:e8:5e:f2:3a:7f:81:14:
                    74:63:90:97:d2:9e:9a:99:44:06:c0:25:62:78:6f:
                    7b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:58:C3:74:80:57:CA:40:FD:F4:5F:EA:3D:D0:2B:C8:9B:C7:E5:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2cf4cb12-1642-3c7a-920f-da665acf4ab4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:3e8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:34:09:d9:62:cd:1b:44:ac:16:1e:2f:63:06:df:0e:b2:7a:
         b9:0d:5e:0c:30:ab:c1:63:08:12:76:98:4e:11:9e:8f:90:ef:
         df:08:32:6c:cd:59:7b:29:a8:57:07:03:72:93:7c:e3:fc:e3:
         ce:c6:eb:8a:bd:51:90:1f:86:cd:20:0d:65:bc:d7:e1:01:86:
         73:06:20:90:29:d3:32:7c:ef:41:33:68:b2:5b:7a:ed:76:06:
         79:0f:76:8e:27:5f:8a:36:84:5a:fb:37:8c:76:68:9e:a5:7e:
         f9:84:b3:e7:e1:29:7f:45:fb:2a:99:ab:ba:a3:fa:48:46:fe:
         27:6a:b1:30:8b:d2:97:d7:90:b7:a7:f5:86:0e:5b:9e:d1:a9:
         2c:09:a0:ed:72:29:59:7a:d2:1d:b1:62:ed:ed:33:67:f4:1d:
         e7:8a:39:d6:93:d4:0a:68:4f:4a:0f:ce:65:b8:5f:5b:9c:67:
         cb:7c:e5:66:a7:b4:56:73:74:40:80:55:7b:15:d5:8a:f2:6e:
         0d:e6:05:33:23:3a:10:6b:53:a0:14:56:86:90:d0:98:c6:23:
         7b:8e:8b:26:ae:7a:d8:16:97:58:ad:1e:bf:25:f0:00:ce:23:
         58:ca:78:9d:44:fe:af:0a:a4:b4:5c:88:5e:99:ac:f9:cb:13:
         d6:91:40:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----