Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/85985089-2f5a-32ff-85ee-dc5151c11388.roa
File:                     85985089-2f5a-32ff-85ee-dc5151c11388.roa (raw, json)
Hash identifier:          ZWmDZQYYcurb4uDKArGxmaj0AtgxLM8tx30SkQ9eL98=
Subject key identifier:   C1:03:10:F4:CB:42:2C:BE:6D:0E:33:6C:24:C7:E1:9B:F4:C1:AB:9C
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285848F926C7763202727B622CFC40
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/85985089-2f5a-32ff-85ee-dc5151c11388.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     135069
IP address blocks:        2001:470:1d9::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:c7:76:32:02:72:7b:62:2c:fc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=bd00f733-8699-4fd2-9164-60e6d807706c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:7d:96:e7:14:0d:92:e5:eb:8a:90:9e:b5:3d:
                    90:e6:a0:bf:29:b1:d3:77:93:55:e7:4a:7d:4e:bd:
                    f2:91:5a:53:4e:fb:32:14:c8:ae:b8:68:c3:5a:c5:
                    a6:41:8e:2b:f2:52:4f:c4:61:40:96:27:d1:bd:e5:
                    e0:83:f4:46:06:66:f4:d2:5b:8d:5d:43:dd:fa:3b:
                    99:a7:a1:25:b6:44:f4:f1:ec:f0:0b:e1:13:30:7f:
                    68:70:8e:fb:70:d4:26:a0:d5:d2:9f:9a:12:31:06:
                    87:d2:72:4e:ac:50:4d:e8:0c:c4:b3:e2:b4:5f:e7:
                    dc:9f:63:e5:a0:88:21:79:49:d1:d6:92:5f:e6:ba:
                    6b:2c:43:98:42:a1:e7:e4:a0:3f:0c:da:b7:38:52:
                    a4:d6:97:6d:4b:c3:5a:72:0d:78:86:3d:e5:ec:8e:
                    f8:3b:b0:8d:a2:ca:34:89:ef:3d:c8:2a:20:b3:63:
                    c2:3d:7d:d9:bb:78:1c:13:e4:c1:35:36:d8:bb:a3:
                    13:e2:15:3a:3d:7d:7e:18:d9:52:12:8a:9e:10:55:
                    c9:f9:ea:7c:1e:22:8d:2d:90:ee:d1:0f:8c:1d:26:
                    34:d1:fa:60:f8:b7:a8:07:6e:8d:3f:8c:b1:bb:cf:
                    0c:f2:af:9f:08:c4:a7:1d:35:1d:63:71:e3:18:31:
                    6b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:03:10:F4:CB:42:2C:BE:6D:0E:33:6C:24:C7:E1:9B:F4:C1:AB:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/85985089-2f5a-32ff-85ee-dc5151c11388.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:1d9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:19:a1:d8:b3:91:50:d4:bc:b8:8e:dc:d6:ea:88:8e:22:f4:
         eb:c8:09:89:74:33:51:b5:03:b2:58:21:6c:5b:e8:60:5a:8c:
         d3:a7:11:74:33:ef:be:ac:68:f8:62:ea:d6:a3:29:4a:5f:90:
         49:a1:24:f3:b3:53:09:cf:da:b9:92:75:c0:1b:ae:ca:65:5e:
         11:9f:dd:36:34:95:1c:a8:1c:dc:d8:63:ce:b3:17:a7:e1:c4:
         38:9f:5d:02:75:98:5e:0c:96:b8:f3:cd:d2:2a:ef:69:1d:8b:
         83:fe:13:63:b1:87:63:a3:c3:e8:d6:1e:f2:15:2b:a6:2a:60:
         99:ad:11:49:26:50:81:80:63:59:2c:12:81:9e:11:51:f3:84:
         cd:3d:c1:da:0a:dc:53:ec:22:af:7e:dd:a2:ee:bf:68:b1:9e:
         c5:64:01:be:81:2d:2c:cb:e6:8c:47:91:ac:3e:fb:f6:57:6d:
         b2:16:e9:d4:5a:a0:ee:17:b3:f0:da:cb:08:8d:69:64:b4:a8:
         dc:55:c3:20:fa:7b:13:76:f1:eb:90:f4:e0:8a:f4:cd:f1:36:
         8d:b4:52:74:15:5e:64:ce:12:83:0b:5e:35:74:be:b0:12:b4:
         77:83:95:b5:7e:2e:48:c5:cf:26:54:fe:92:de:28:79:4e:95:
         66:5b:35:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----