Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/df87bb72-dc52-3639-a0af-dcba3509be30.roa
File:                     df87bb72-dc52-3639-a0af-dcba3509be30.roa (raw, json)
Hash identifier:          yHyUb40WFRQt//WeNj6i/JAs1JD5tDbyagT2DH3rkm0=
Subject key identifier:   98:D3:18:F3:85:A2:F3:50:28:B7:42:78:8C:31:4B:AF:0F:A1:E0:79
Certificate issuer:       /CN=d00749ed-70ef-447c-b17c-da6be8d7f312
Certificate serial:       010D0C9F4328584930DE6B44B2AF70976B328400
Authority key identifier: F5:20:15:87:33:58:C5:12:78:64:66:F3:B0:E3:5D:8A:F4:78:79:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/df87bb72-dc52-3639-a0af-dcba3509be30.roa
Signing time:             Sat 15 Mar 2025 01:00:39 +0000
ROA not before:           Sat 15 Mar 2025 01:00:39 +0000
ROA not after:            Fri 13 Jun 2025 01:00:39 +0000
asID:                     36236
IP address blocks:        2620:49:4::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:30:de:6b:44:b2:af:70:97:6b:32:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d00749ed-70ef-447c-b17c-da6be8d7f312
        Validity
            Not Before: Mar 15 01:00:39 2025 GMT
            Not After : Jun 13 01:00:39 2025 GMT
        Subject: CN=3fb5b005-df5b-4899-99ea-80d6f4ec339f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a8:fe:55:7e:6d:57:35:f9:f8:83:14:d4:f9:
                    58:aa:11:98:06:66:45:de:b7:10:09:66:5a:a1:52:
                    07:8d:6c:a7:b5:7d:96:e4:fb:23:61:9a:6f:5f:39:
                    da:ab:1d:13:35:54:57:c7:8b:32:49:33:e3:b1:e3:
                    14:df:9b:8e:df:a9:e7:37:2d:a1:03:73:6a:24:14:
                    c3:4d:ce:d2:16:1e:32:6e:98:07:4b:38:2d:3e:09:
                    eb:b1:58:c4:0a:81:4e:87:5e:0a:10:c3:e1:f6:a9:
                    c8:9a:ed:09:82:ec:f1:cc:cc:b9:cd:ff:c7:b9:48:
                    41:c9:75:04:d7:43:f4:bf:f2:83:08:3b:45:18:a9:
                    b2:6e:8b:8a:2d:7d:5a:80:47:ae:f6:23:cf:0b:35:
                    17:57:03:c2:5b:69:74:a5:b2:6a:45:8a:a7:6a:95:
                    72:27:0c:14:be:98:fe:37:89:44:6d:21:16:50:ff:
                    72:89:73:16:05:6d:97:89:62:3f:08:8a:be:c3:1b:
                    73:6a:33:d8:60:55:03:6f:96:df:26:4d:d6:df:ce:
                    72:6a:6b:02:57:a1:fb:3c:f3:6b:99:c4:8d:ba:93:
                    6c:74:73:16:7f:90:7f:ba:4c:6a:27:93:f9:42:68:
                    c7:82:9f:4a:f8:03:65:cb:25:de:f9:fe:36:3c:20:
                    74:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:D3:18:F3:85:A2:F3:50:28:B7:42:78:8C:31:4B:AF:0F:A1:E0:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/df87bb72-dc52-3639-a0af-dcba3509be30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.crl

            X509v3 Authority Key Identifier:
                keyid:F5:20:15:87:33:58:C5:12:78:64:66:F3:B0:E3:5D:8A:F4:78:79:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:49:4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:c9:12:4d:f3:5e:56:d3:40:e7:8b:f5:8b:d4:60:e1:73:74:
         b7:92:32:28:7a:e5:de:04:47:81:c0:de:03:d6:7b:0f:7b:9e:
         7d:74:5d:b1:eb:93:a5:e9:4a:0c:68:f3:77:59:36:48:9a:73:
         c2:36:6f:f8:c7:c7:c4:6b:a8:5e:06:77:e7:3a:36:2e:ce:7b:
         8c:4a:82:4e:2b:52:a3:d9:51:65:69:1f:fd:89:fd:ab:3e:22:
         9a:91:79:c9:32:be:96:f3:67:b9:68:fd:02:e8:72:99:1c:90:
         71:e6:90:70:ae:42:7a:fa:b3:ae:5c:28:3f:11:65:94:f4:7a:
         44:95:21:a8:92:d5:fd:ba:69:dc:78:3b:22:cf:0b:c4:51:93:
         03:67:3a:9e:f3:c1:ef:c1:27:8a:42:02:d0:5b:d0:c0:a3:38:
         9b:e0:ce:68:cc:e9:be:52:74:24:98:6c:20:6f:b5:49:ab:a8:
         8d:0b:ec:a6:f5:40:5e:92:93:72:62:6b:8f:99:60:6a:1b:ca:
         31:c0:b3:65:a4:be:a7:06:a4:bb:4f:4e:13:57:43:86:c5:0c:
         af:9c:17:6a:14:8c:9a:7e:61:39:2b:0e:12:dd:16:8a:d5:57:
         6d:6a:dd:0d:7f:51:f8:77:66:0e:9b:8b:d3:75:1e:16:0d:84:
         f1:b1:08:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----