Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ddb71113-1076-356e-9ae6-7ad953a944c3.roa
File:                     ddb71113-1076-356e-9ae6-7ad953a944c3.roa (raw, json)
Hash identifier:          oAyYLk4AM9ZEWzhnS0zQGtNFHFgOPghVOWAQ8+ZeCyA=
Subject key identifier:   C3:C5:EB:E9:0D:8B:01:9E:C5:53:88:FA:E4:96:C9:B5:14:7F:8B:CE
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285848F926D00E10186451561DAD80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ddb71113-1076-356e-9ae6-7ad953a944c3.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     397409
IP address blocks:        2001:470:2db::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:d0:0e:10:18:64:51:56:1d:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=6d9b6f6b-2a15-42c4-b94b-bb6e8a51ef3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:09:e2:a6:05:3a:a6:0c:ad:9f:59:1c:2d:18:
                    07:6c:67:07:bf:b5:cb:62:62:38:d7:d7:d9:88:03:
                    6a:21:a6:19:cb:fa:17:33:3e:9f:06:b3:1b:0c:a1:
                    c6:26:00:f0:de:94:b6:70:91:0f:2c:a7:65:ce:8c:
                    07:7a:7f:9d:51:ce:9d:52:c9:63:79:8a:a6:59:d6:
                    5b:35:7c:7e:ac:22:cf:79:5f:1a:7e:a3:53:dc:87:
                    06:51:fb:6d:3d:27:92:da:79:b9:ba:c3:3e:10:ab:
                    8c:0e:82:11:d4:8a:4a:96:75:65:1a:6b:c0:a8:fd:
                    57:89:20:26:af:25:9e:55:c6:df:b4:ff:ea:2f:e9:
                    29:17:11:3d:4a:57:0f:4a:b8:3f:10:aa:5d:95:95:
                    e5:fe:d7:cc:2a:c5:31:52:a7:8d:31:a6:76:fe:e5:
                    7f:f5:34:3e:68:19:7a:c0:99:2c:fc:50:b7:7c:ea:
                    95:4a:f6:5e:85:8b:f6:9e:23:02:3a:3e:4d:20:cb:
                    23:7d:20:ce:f3:ee:7f:7a:11:61:79:08:16:79:5b:
                    b6:16:ef:87:8d:cc:ea:45:65:3a:c0:6e:99:8f:63:
                    39:79:64:d8:62:bd:8a:bf:a8:64:93:61:82:8f:89:
                    c4:da:3a:59:86:1c:13:26:14:54:24:aa:87:68:50:
                    22:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:C5:EB:E9:0D:8B:01:9E:C5:53:88:FA:E4:96:C9:B5:14:7F:8B:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ddb71113-1076-356e-9ae6-7ad953a944c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2db::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:f3:5b:37:f5:71:25:b6:f7:5c:f2:fe:28:fb:c2:8e:cb:5c:
         2c:03:1c:13:0e:b6:ec:90:a9:19:b4:a2:f0:19:d0:09:b9:26:
         6f:a7:4a:c9:39:d3:19:dc:55:95:ba:be:d7:49:85:87:97:10:
         4c:f1:cc:10:0e:d3:a7:c1:cd:40:32:91:87:7f:f2:81:25:b2:
         6f:81:3f:82:dd:38:9d:51:44:07:89:30:f5:a5:cf:4a:31:bd:
         ff:61:92:33:53:20:fe:f6:32:9c:7b:2e:76:53:68:d5:b5:a9:
         d7:c7:7e:6e:90:ba:5b:f9:9d:1f:3d:e2:ce:ca:6c:7f:ab:b3:
         8d:57:6d:b3:88:42:47:1a:53:ec:90:2f:82:f3:54:0c:04:c6:
         3d:f5:23:95:52:b3:3b:13:5d:91:bd:4e:d5:64:06:1b:35:69:
         70:af:6e:ff:f0:54:8a:42:51:0e:07:9c:44:be:37:e7:65:f8:
         bd:ab:93:a4:c0:d1:d9:04:dd:7e:20:7c:a9:d8:64:5f:22:7f:
         30:5b:2c:b4:fe:a9:dc:26:ce:b4:87:53:21:4f:7f:b2:c6:44:
         70:f0:0d:fb:49:b9:1e:eb:e7:7e:2b:22:f9:ad:79:a5:80:9e:
         bf:f7:ea:e6:72:93:f2:26:85:d7:55:eb:f7:d2:5e:eb:70:92:
         70:75:52:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----