Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/f70d9506-a4e9-3287-80d3-3e488fad71c4.roa
File:                     f70d9506-a4e9-3287-80d3-3e488fad71c4.roa (raw, json)
Hash identifier:          nK5lJExi3pjr8zsY6/Q6SLBYLvX2MpNDbhnYC7zmbDA=
Subject key identifier:   4F:6D:3B:3D:7D:DE:88:7D:0E:63:0D:FD:0C:ED:E0:CD:9B:86:3B:47
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584964843A7FB7FF9533D1A7F5C0
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/f70d9506-a4e9-3287-80d3-3e488fad71c4.roa
Signing time:             Wed 02 Apr 2025 13:01:01 +0000
ROA not before:           Wed 02 Apr 2025 13:01:01 +0000
ROA not after:            Tue 01 Jul 2025 13:01:01 +0000
asID:                     31898
IP address blocks:        2620:123:208b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:64:84:3a:7f:b7:ff:95:33:d1:a7:f5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Apr  2 13:01:01 2025 GMT
            Not After : Jul  1 13:01:01 2025 GMT
        Subject: CN=2efcf384-b719-4953-a660-414151edfd61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:29:8a:5f:b5:f0:d9:7b:58:6b:b3:26:c6:29:
                    cf:e4:e8:58:86:33:3e:4c:4d:47:26:8d:de:6d:c6:
                    75:7e:92:8b:f8:1c:b1:ca:ff:3b:79:af:29:97:b8:
                    51:ca:7c:a5:35:52:36:38:b4:3b:f1:e5:78:ba:0c:
                    65:14:43:0d:fd:33:4f:fd:91:12:92:91:bb:49:50:
                    47:11:f8:b1:3f:c2:2a:64:05:fc:c7:de:04:71:61:
                    97:f9:f4:0b:53:30:f6:eb:2a:72:a3:91:59:13:38:
                    47:fb:4b:20:b5:64:a8:e4:c2:99:98:91:04:2d:99:
                    4e:68:5e:1e:f5:76:13:0f:6a:61:69:1c:7d:01:53:
                    2e:92:61:09:48:c4:fc:f2:2a:cc:42:ca:e9:cb:3d:
                    66:82:fa:c8:47:11:7b:7d:b0:af:1e:d2:13:d6:7b:
                    db:a0:c5:81:f2:96:32:3f:d2:99:23:02:92:1a:f6:
                    2f:c7:aa:6c:3c:21:e1:65:fc:0a:ef:38:59:70:f4:
                    88:4d:ee:7b:b9:96:96:01:b7:b0:7f:f9:ef:a7:e4:
                    bf:d8:1a:04:d2:5f:c2:0f:14:df:fb:bc:c2:c8:88:
                    66:2d:84:38:6a:aa:2a:35:bd:b1:90:94:dc:2a:ef:
                    61:ec:14:d9:c6:e7:c2:34:2d:ff:de:63:dd:2e:92:
                    96:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:6D:3B:3D:7D:DE:88:7D:0E:63:0D:FD:0C:ED:E0:CD:9B:86:3B:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/f70d9506-a4e9-3287-80d3-3e488fad71c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:123:208b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:59:99:74:b8:8c:4c:a3:90:6d:f5:57:23:df:2d:6b:88:c1:
         70:f3:ea:16:52:7f:69:91:f9:e6:95:c7:0e:d2:66:e2:2a:8f:
         2e:e2:3b:24:9a:82:4b:8f:98:54:47:9e:70:05:87:40:b4:b1:
         82:01:18:70:d5:80:f7:00:c2:f4:19:00:2e:7b:1e:e7:59:17:
         a0:0a:eb:7d:a5:cc:ef:23:b7:c7:f3:89:85:f8:36:45:6f:da:
         c4:21:3e:dc:20:1e:d5:40:e9:44:a0:6b:4c:85:5f:17:79:13:
         01:0d:52:a9:66:49:14:49:9f:62:2d:ae:e1:54:5b:31:e3:fd:
         3b:23:50:6f:76:77:62:a1:a6:ff:2c:11:da:33:e1:7e:cf:3f:
         e4:28:22:89:98:eb:0c:c5:f9:3c:ae:c7:1e:9e:89:17:6c:26:
         ad:5f:87:87:6f:f2:67:04:ca:53:8a:22:05:af:d5:d7:2b:b7:
         13:d0:74:a9:0c:db:a9:75:7f:c6:26:4e:47:a3:6f:db:61:b9:
         02:19:7c:f9:60:33:7f:0a:d5:d1:b8:00:ac:b3:cf:77:bc:12:
         55:e5:9d:12:b3:21:5f:27:21:18:93:2e:f1:6d:6d:77:4f:88:
         3f:91:69:8f:b1:e3:92:ba:4c:c5:e0:33:3b:8e:71:15:ff:59:
         ad:d3:69:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----