Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/428e2f0c-a32e-4e4e-ad35-70fa967d8c2c/1ff20024-f28b-3553-98cf-d9f10bad3203.roa
File:                     1ff20024-f28b-3553-98cf-d9f10bad3203.roa (raw, json)
Hash identifier:          3k0e5kjAFkszQdeTTGdTNZtDw3rUPBgQFu2jCIbHRWw=
Subject key identifier:   7A:31:09:0B:BA:0B:E4:12:C1:BF:96:D8:2D:CA:50:31:FF:1B:79:15
Certificate issuer:       /CN=428e2f0c-a32e-4e4e-ad35-70fa967d8c2c
Certificate serial:       010D0C9F43285845B3836EA101FCC20BF971FD40
Authority key identifier: 42:94:24:A1:A9:DE:58:D2:C7:B9:DF:64:35:5F:C1:88:D0:C8:39:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/428e2f0c-a32e-4e4e-ad35-70fa967d8c2c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/428e2f0c-a32e-4e4e-ad35-70fa967d8c2c/1ff20024-f28b-3553-98cf-d9f10bad3203.roa
Signing time:             Mon 29 Apr 2024 01:00:25 +0000
ROA not before:           Mon 29 Apr 2024 01:00:25 +0000
ROA not after:            Sun 28 Jul 2024 01:00:25 +0000
asID:                     7896
IP address blocks:        2620:d5::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b3:83:6e:a1:01:fc:c2:0b:f9:71:fd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=428e2f0c-a32e-4e4e-ad35-70fa967d8c2c
        Validity
            Not Before: Apr 29 01:00:25 2024 GMT
            Not After : Jul 28 01:00:25 2024 GMT
        Subject: CN=7f4d612b-f3e8-4fd7-b96a-2429c8c3aba7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:32:dc:17:ed:3d:a0:ea:15:c9:7d:05:4b:6e:
                    8e:72:48:fe:6b:23:f4:26:82:bf:e4:ec:07:7f:e9:
                    8f:a9:5e:e5:70:3e:ab:17:ef:f2:3a:37:6d:b2:cc:
                    e8:49:06:40:79:65:89:a6:35:b6:5a:8f:6d:65:75:
                    dd:6c:73:7c:79:6a:c4:2d:88:04:91:f0:9f:d4:1a:
                    41:f7:35:f7:5d:b3:c2:f8:17:a6:c9:11:13:63:eb:
                    db:f8:05:d7:f7:ed:08:0f:64:c7:36:a4:9c:d5:f4:
                    0b:09:2e:07:22:e1:da:59:b0:e4:93:af:b9:c6:c4:
                    c6:98:75:33:12:e5:dd:eb:5d:fa:ae:02:3b:1d:1b:
                    c6:b0:b0:20:09:f5:70:ee:19:ef:09:df:f5:2d:0b:
                    3b:bd:fa:5a:fd:4b:ae:59:71:6f:3d:a2:0a:6b:e1:
                    a2:7a:8f:b8:a1:24:b1:1f:84:74:58:90:5d:25:71:
                    67:d2:5a:bb:68:ef:0d:c8:b1:b6:be:7f:4e:a6:68:
                    a4:3c:73:cd:c2:4a:5f:7d:22:1f:8b:32:26:f3:4c:
                    0e:ed:70:8c:cf:82:f5:0a:a3:a5:0c:be:0f:5c:f3:
                    5e:9e:e4:1d:3e:a1:58:4a:36:27:8e:11:8a:78:29:
                    f6:f7:59:f6:c1:70:17:c2:c5:98:cc:e3:22:c8:44:
                    f6:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:31:09:0B:BA:0B:E4:12:C1:BF:96:D8:2D:CA:50:31:FF:1B:79:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/428e2f0c-a32e-4e4e-ad35-70fa967d8c2c/1ff20024-f28b-3553-98cf-d9f10bad3203.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/428e2f0c-a32e-4e4e-ad35-70fa967d8c2c/428e2f0c-a32e-4e4e-ad35-70fa967d8c2c.crl

            X509v3 Authority Key Identifier:
                keyid:42:94:24:A1:A9:DE:58:D2:C7:B9:DF:64:35:5F:C1:88:D0:C8:39:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/428e2f0c-a32e-4e4e-ad35-70fa967d8c2c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:d5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:3f:26:77:ab:b0:dd:0c:54:4d:a3:1f:78:a3:72:aa:dd:2f:
         9a:dd:dd:9e:6e:c6:48:4b:f0:5b:ad:0e:b5:07:e2:4a:b1:eb:
         0f:32:54:99:26:e2:c1:a4:f2:dd:ad:ec:5e:54:3d:ee:ce:ca:
         44:3d:5e:50:25:ce:21:7d:31:82:f0:28:67:14:c6:6f:7a:d4:
         96:a7:fb:91:96:28:4f:0a:9e:6a:75:fa:d2:69:07:c2:35:5a:
         97:7a:1f:71:31:17:23:5b:95:48:2f:00:9b:7f:1e:ae:1c:37:
         10:1b:e7:8c:72:30:ba:da:dc:1e:a7:72:aa:54:c5:b0:29:10:
         14:09:0f:91:87:1a:af:c2:8e:4c:02:4f:79:aa:dc:75:da:2c:
         11:d3:96:6c:1c:12:68:a5:d0:cf:d0:b0:a9:23:8a:d4:66:a4:
         a9:bb:4d:e5:d5:85:ea:6e:54:fe:af:89:93:09:42:d0:82:87:
         88:da:62:f3:4f:72:1d:35:98:52:ea:09:7f:cc:9b:2e:6b:4c:
         0a:1c:19:9e:37:c5:bb:41:f2:82:8d:66:ee:30:c2:85:ea:f6:
         28:c8:17:82:73:ba:99:43:ab:bf:27:2c:e2:21:16:44:03:1c:
         49:d0:a4:7d:ad:48:04:0e:95:92:d3:14:ae:79:db:d3:32:b6:
         56:bf:04:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----