Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b7464238-df40-3cec-856b-1eddd83f5760.roa
File:                     b7464238-df40-3cec-856b-1eddd83f5760.roa (raw, json)
Hash identifier:          zi/ND/09T68H9AAm6Mpx8Hl6Q2Z0NlVxZ7AiDA0ooIE=
Subject key identifier:   12:31:C0:B4:47:77:76:3D:49:A3:06:17:3C:06:04:4E:E0:45:0D:BC
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858492F87C3F77A223B9484C40040
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b7464238-df40-3cec-856b-1eddd83f5760.roa
Signing time:             Fri 14 Mar 2025 13:30:22 +0000
ROA not before:           Fri 14 Mar 2025 13:30:22 +0000
ROA not after:            Thu 12 Jun 2025 13:30:22 +0000
asID:                     34867
IP address blocks:        2001:470:427::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2f:87:c3:f7:7a:22:3b:94:84:c4:00:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 14 13:30:22 2025 GMT
            Not After : Jun 12 13:30:22 2025 GMT
        Subject: CN=bf21cd85-ccbe-434f-8f06-cc4cb540e90b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ae:7c:b2:d1:35:a4:af:fe:45:bb:d2:cf:ec:
                    25:13:6e:0c:a3:f9:65:72:3e:a5:6e:8e:85:cc:e2:
                    f0:af:af:9e:bd:02:e9:c2:a3:b4:e7:8e:a8:1c:d3:
                    0b:64:08:8b:06:f4:38:dd:f3:11:b4:6f:c8:13:53:
                    ec:78:61:13:a9:14:eb:3e:6e:4b:18:94:e5:99:bb:
                    ba:49:20:b7:51:8d:38:de:e5:bc:3e:58:bc:1d:64:
                    29:99:1a:f9:bc:24:4a:a1:e5:e6:f2:7e:16:8b:e9:
                    d4:ed:4a:0f:08:e6:2a:56:9c:04:fb:a8:ea:6f:e8:
                    42:43:bd:82:bc:30:32:ef:ea:cf:b8:ed:2b:01:3c:
                    b2:47:7e:8e:e5:a8:4f:cb:4b:2d:1a:25:06:5d:3c:
                    6b:53:40:5b:eb:85:63:a4:a4:69:72:b3:85:fa:12:
                    81:95:bc:a8:1c:c7:e6:5c:ce:06:99:94:cc:1c:af:
                    f2:c0:19:38:01:0d:aa:62:d6:95:1f:6b:68:5b:95:
                    9b:ef:0b:03:9c:2c:53:a9:74:6a:71:dd:8d:78:e6:
                    04:a3:a8:8f:5a:94:7f:87:fc:cb:25:e1:a2:a8:fe:
                    f3:74:04:99:81:d1:27:ff:84:c3:07:0e:34:26:81:
                    80:3b:b8:2e:db:1d:df:e3:6d:eb:05:63:d5:4e:f0:
                    b9:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:31:C0:B4:47:77:76:3D:49:A3:06:17:3C:06:04:4E:E0:45:0D:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b7464238-df40-3cec-856b-1eddd83f5760.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:427::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:c3:f4:7e:e1:4d:60:35:3a:b4:9e:d5:ba:b5:e5:96:3c:19:
         fa:7b:83:79:8c:a9:58:57:82:f4:ff:34:3d:70:72:98:85:3e:
         95:da:b3:2b:19:4c:85:a0:11:e3:00:d8:a8:40:9b:4e:f6:91:
         18:ce:65:7f:9b:04:51:34:0d:72:6a:9c:d0:c9:df:92:b6:69:
         99:b7:67:aa:d0:bf:00:2b:1d:97:fc:a9:95:45:35:29:33:0a:
         60:17:d7:8a:99:67:f2:ed:ec:75:c4:d3:91:86:61:af:3d:b9:
         ee:e8:03:fb:48:59:25:2d:bb:bc:f6:e9:da:3f:2f:72:81:d9:
         d7:99:6e:01:ef:3e:8a:04:8e:01:19:6a:b9:e3:5b:38:d6:c2:
         fd:82:e2:dd:d4:68:29:0e:8e:55:a1:81:e1:3d:99:50:15:75:
         91:2d:7e:39:22:cf:49:0d:7b:35:f7:b3:c3:4e:20:72:f8:b8:
         45:90:dd:96:ea:c8:0d:fb:01:7d:0b:09:b3:14:d4:d4:98:66:
         cb:08:00:a9:13:cc:f6:5f:d7:09:10:62:6c:1a:1a:ad:f4:36:
         77:c4:75:cf:04:72:bd:3e:54:29:40:f4:5d:c3:e3:e9:53:2f:
         33:1e:a7:2c:e9:ad:40:38:27:30:38:dd:48:b3:05:e2:34:63:
         8b:5c:80:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----