Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cff52492-5cc6-34c4-a3a3-b87713458a9d.roa
File:                     cff52492-5cc6-34c4-a3a3-b87713458a9d.roa (raw, json)
Hash identifier:          4zgbrA3mAG9iXkaUlW4RkUpEQ5f9J5Lg3cZuDaZIm28=
Subject key identifier:   7C:E9:A3:72:5E:FE:77:31:82:21:76:50:50:87:2B:B6:8C:27:C5:C6
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858493EE275730E17101442375C30
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cff52492-5cc6-34c4-a3a3-b87713458a9d.roa
Signing time:             Thu 20 Mar 2025 01:30:14 +0000
ROA not before:           Thu 20 Mar 2025 01:30:14 +0000
ROA not after:            Wed 18 Jun 2025 01:30:14 +0000
asID:                     25447
IP address blocks:        2001:470:224::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3e:e2:75:73:0e:17:10:14:42:37:5c:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 20 01:30:14 2025 GMT
            Not After : Jun 18 01:30:14 2025 GMT
        Subject: CN=2070958d-5e3a-4d92-89ce-fe4613ef56fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:48:c5:c8:25:7d:94:19:ee:91:4a:f4:c6:00:
                    b2:38:fe:de:37:3c:74:81:f7:21:df:83:93:56:be:
                    c7:97:f4:2f:71:4f:fe:0d:ef:6e:54:09:29:c1:27:
                    11:77:93:5f:09:07:8f:ca:53:5a:34:db:0e:3c:86:
                    f1:9a:f6:75:7c:ff:26:61:e6:86:3f:67:18:bd:93:
                    56:c3:85:88:c4:69:27:e3:dd:8f:5e:fe:c3:e9:53:
                    b5:f2:a6:51:95:27:11:9c:8f:75:34:1a:4f:96:41:
                    b8:73:71:f9:ee:4d:0b:fd:55:69:01:9e:9f:57:3c:
                    41:46:07:fc:75:07:d5:10:36:6f:d5:f7:09:30:16:
                    a2:45:71:60:27:3c:e8:43:92:0d:64:4b:cb:c8:24:
                    13:b4:5f:19:28:01:9b:48:a2:e5:28:a2:13:d8:cc:
                    a8:ba:d4:57:72:30:19:01:dd:1e:a8:0c:61:bd:f0:
                    93:a3:4d:57:61:3f:6d:79:b7:21:93:3b:c4:cb:ae:
                    b8:6c:fb:dc:93:9e:e8:2f:4e:0a:82:27:05:6f:fd:
                    3b:47:72:74:bf:f6:17:77:a2:ed:63:5a:7b:e6:32:
                    74:d4:f3:65:ec:37:13:77:d2:74:3c:4c:5b:1e:e2:
                    47:30:96:54:3e:9b:4c:b6:52:b6:d2:3a:1d:80:e2:
                    ec:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:E9:A3:72:5E:FE:77:31:82:21:76:50:50:87:2B:B6:8C:27:C5:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cff52492-5cc6-34c4-a3a3-b87713458a9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:224::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:36:86:97:c9:8f:7a:de:1f:9f:d5:b6:82:bc:12:a5:7d:d5:
         4e:c4:c7:66:bd:f5:70:ff:e4:29:4d:0a:f7:13:36:0d:95:7e:
         ad:d4:d8:e7:b0:00:9a:b2:3d:32:8b:62:1d:6f:af:11:70:c5:
         5d:2e:25:9e:51:a7:4b:e1:04:71:a5:0d:b5:18:a9:29:e2:b9:
         60:3e:93:8a:25:1a:2c:03:3d:d4:ff:3d:77:43:d9:27:b5:75:
         79:48:9e:c7:50:c7:8e:fd:86:cd:55:70:23:b0:3c:ad:9c:df:
         d4:34:56:06:77:76:7f:4a:6c:fc:fa:96:67:a2:ff:b5:6d:c3:
         10:d4:61:3d:0d:e3:ae:b5:b7:82:74:ff:d3:49:f5:5e:3a:22:
         da:9d:42:a1:62:a3:40:d1:f2:33:46:43:44:23:8c:b3:cb:f2:
         04:6a:4a:37:ca:d5:83:be:1c:bc:c6:f8:bf:57:de:d1:dd:fd:
         5e:55:bd:e0:75:75:3b:f7:77:ed:25:66:a2:ad:20:e3:c0:b4:
         1f:1c:27:27:e3:26:cb:2f:0b:b3:cf:6e:de:cf:43:20:af:7e:
         1c:7e:a6:58:10:00:3a:54:52:c9:0b:37:d2:d8:6d:2d:47:ec:
         2e:79:d8:c3:21:2f:b1:e0:34:27:44:60:03:52:86:fc:c3:1e:
         26:21:df:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----