Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fe2b1d0e-8ee9-3ce7-9ea7-1ed129ddf55c.roa
File:                     fe2b1d0e-8ee9-3ce7-9ea7-1ed129ddf55c.roa (raw, json)
Hash identifier:          hKiMcjr4PKsk2ou6WpIIdZ3caqSZZXFUYU68TMonU/k=
Subject key identifier:   DF:8C:3F:EC:9C:01:D2:7D:E0:93:02:65:A8:AE:C6:27:99:00:E4:F7
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858497279C47689C25FC981FD7980
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fe2b1d0e-8ee9-3ce7-9ea7-1ed129ddf55c.roa
Signing time:             Mon 07 Apr 2025 13:00:59 +0000
ROA not before:           Mon 07 Apr 2025 13:00:59 +0000
ROA not after:            Sun 06 Jul 2025 13:00:59 +0000
asID:                     140577
IP address blocks:        2001:470:3b8::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:72:79:c4:76:89:c2:5f:c9:81:fd:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr  7 13:00:59 2025 GMT
            Not After : Jul  6 13:00:59 2025 GMT
        Subject: CN=21911b96-37ec-4ff2-8ff5-c7572a4be9ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:65:b8:98:cf:8c:ed:ca:18:5f:89:d7:74:86:
                    f5:8b:14:f9:f5:8d:3e:49:d9:69:32:c4:63:53:b0:
                    0e:4e:ea:a9:ad:9f:11:f3:61:66:2d:2b:7f:e9:49:
                    8c:16:28:20:b6:77:81:ba:e0:f3:06:6a:d7:e7:9e:
                    20:43:0a:fa:0d:7f:4f:f8:4d:42:7e:42:36:41:60:
                    b8:2c:40:4b:97:e2:c6:11:e3:6b:a8:6d:db:d0:72:
                    f6:8a:7e:6f:2a:a9:54:91:a4:eb:6e:35:ea:76:b2:
                    70:39:79:39:7a:29:47:45:c1:44:17:cf:90:de:c8:
                    ad:33:0b:90:a8:7a:93:d0:5a:5d:1f:83:60:c5:15:
                    ac:84:d2:95:e2:c7:7e:aa:4e:66:73:0d:07:47:44:
                    31:24:e0:1e:bf:f8:78:95:54:54:3e:22:b0:e3:3f:
                    32:8d:15:2d:bb:d6:47:00:f4:cf:e3:75:55:18:db:
                    7c:43:b0:2b:a5:65:da:01:13:84:67:d6:19:e4:be:
                    e7:fe:fc:3b:0a:4d:98:23:36:ff:8f:91:70:51:3d:
                    e4:b5:c6:31:be:81:f3:61:17:d0:4a:aa:50:3c:6a:
                    93:46:9f:82:59:f8:0a:f6:40:2c:5f:26:ca:4c:30:
                    33:51:dc:57:a8:6e:42:5e:78:4e:53:b3:40:bf:54:
                    1f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:8C:3F:EC:9C:01:D2:7D:E0:93:02:65:A8:AE:C6:27:99:00:E4:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fe2b1d0e-8ee9-3ce7-9ea7-1ed129ddf55c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:3b8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:1d:39:e6:5d:17:9b:fc:25:c7:43:9a:4e:d4:9a:55:7d:9f:
         df:f5:f5:b6:96:a6:85:ad:6b:3e:f9:65:66:cc:97:a6:2d:66:
         0b:a5:62:85:2d:9d:38:81:f7:61:cd:f2:33:99:cd:6d:3d:e7:
         73:18:81:aa:f0:14:05:46:33:0e:bd:57:7f:de:18:f1:04:4c:
         d6:29:55:3a:b6:bb:fd:ab:6d:5f:b1:38:33:42:81:aa:98:ab:
         e5:57:c0:66:57:9d:7b:99:ea:3a:5b:d1:3a:7d:eb:b9:d4:69:
         57:79:66:c9:7e:ad:e1:4b:c0:10:ba:ed:fc:d8:25:f2:69:ea:
         70:e6:a9:70:92:63:17:cf:85:f8:9b:d4:f5:f4:ed:58:91:23:
         7b:9f:d3:88:8d:9c:65:82:5d:22:44:8c:f1:7f:b0:fa:76:48:
         11:34:ac:f1:77:5c:3d:96:e3:f6:79:92:ac:9f:bc:cf:05:6b:
         6f:36:fc:cf:e8:92:fd:6a:5e:05:66:97:95:0c:ff:ae:e0:e8:
         66:a6:42:9e:f9:79:47:38:8e:b1:04:41:20:b3:32:f3:b7:8f:
         62:1a:47:e3:d9:b6:74:ab:07:80:e3:be:d4:2d:f9:7c:b0:82:
         25:f8:a9:53:63:3f:d4:d9:e5:c6:60:3a:e4:23:93:81:5d:a8:
         2d:7b:2b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----