Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4993a32f-136f-3cab-9d6e-80f2b8ce19dc.roa
File:                     4993a32f-136f-3cab-9d6e-80f2b8ce19dc.roa (raw, json)
Hash identifier:          ugtvCRJgH880D6Mmw0l5ITQxYQrTcFkyG95UjK1thSY=
Subject key identifier:   C1:49:26:2B:5F:6D:11:96:DA:6E:3D:EB:01:01:24:EA:6D:81:61:DD
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285848F926DF1E077863D0B98D1580
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4993a32f-136f-3cab-9d6e-80f2b8ce19dc.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     40523
IP address blocks:        2001:470:1c5::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:df:1e:07:78:63:d0:b9:8d:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=23745f44-f721-4743-898f-a998f5ec2496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:70:a2:3f:a1:c9:00:84:5a:26:34:a7:1b:10:
                    47:82:08:6f:d5:31:c1:fb:f7:9d:bf:8c:9b:76:b3:
                    ea:28:a5:cc:64:25:1b:33:31:c2:0d:49:d5:25:f8:
                    1b:33:83:b6:29:9b:7c:65:a2:6a:9d:93:c0:a3:1b:
                    72:2d:aa:fb:a7:98:bf:b8:50:5e:e5:fb:b9:9d:52:
                    37:be:52:8f:12:ac:5a:ef:2b:5f:86:c7:85:d8:00:
                    ba:88:41:3e:34:df:b1:c5:3f:1a:fb:c5:3e:c3:24:
                    9a:ce:81:52:03:5b:8a:6e:39:3d:e7:19:24:a9:36:
                    e2:2b:54:e2:ff:b2:12:b1:05:a9:03:9c:d6:89:ed:
                    62:3c:bb:59:d4:cc:b2:36:cb:6a:09:5a:ce:af:96:
                    ba:f2:4d:6a:80:45:2f:e7:8a:35:c3:93:29:83:cb:
                    2b:0b:96:87:c3:69:99:91:67:a9:03:9d:86:0a:26:
                    aa:2d:0d:6c:6e:8d:dc:1e:e0:7a:15:e8:b4:bb:17:
                    cb:e5:1e:b3:1d:54:45:36:5d:47:fd:5c:30:9f:7d:
                    de:c6:da:e1:79:cf:49:63:c2:85:37:82:c4:57:18:
                    59:5f:e7:4f:2c:63:d7:a9:97:e8:7f:81:4d:fc:3f:
                    c8:25:34:b6:4d:20:14:b9:06:3a:39:86:13:3b:41:
                    51:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:49:26:2B:5F:6D:11:96:DA:6E:3D:EB:01:01:24:EA:6D:81:61:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4993a32f-136f-3cab-9d6e-80f2b8ce19dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:1c5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:56:c1:c7:4a:05:b6:dd:68:0b:cf:17:5f:ac:a5:09:af:ff:
         41:db:d8:60:40:0d:5b:c1:b4:5f:80:e6:b2:80:45:05:bd:78:
         c6:79:c0:8c:d2:83:e5:ea:8a:ed:12:37:5e:23:68:81:a0:ca:
         f4:70:a0:0e:a7:b7:31:d6:73:3a:5f:fc:ba:22:e9:52:f8:6f:
         35:11:04:a9:17:c7:0f:98:5c:ca:fc:7d:ce:37:e8:c6:f5:4e:
         b6:f4:a8:fc:6c:96:88:4a:85:76:96:3d:76:ee:10:f3:e4:a5:
         07:7f:7f:3e:ca:c0:24:77:7e:e4:58:8f:68:7b:50:6f:b9:19:
         a8:4e:03:be:5d:18:62:26:22:b6:62:ec:80:11:93:94:80:70:
         30:8b:7d:32:d4:a5:7f:d4:fb:28:82:60:ae:8c:5a:17:8a:08:
         9c:dd:53:5e:99:e4:fd:cb:10:48:0f:e0:c3:1e:77:c9:34:e0:
         72:dd:19:bc:b1:e8:ae:20:40:04:6d:6d:5d:b6:af:37:52:a1:
         e2:89:02:8f:3d:36:62:5b:18:97:ce:81:d8:d1:be:c9:f5:21:
         d1:e3:ef:90:38:7f:af:2d:01:d9:14:32:cd:2e:1d:1a:07:ab:
         97:7c:3a:5e:3e:56:ce:91:a0:14:ff:19:a4:94:11:c4:dc:35:
         18:58:8d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----