Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/c3e6db55-bfca-3e4b-817d-7472db3f9575.roa
File:                     c3e6db55-bfca-3e4b-817d-7472db3f9575.roa (raw, json)
Hash identifier:          3gD8QVckFOj9f0GZE2yZvgWbt8mv1qZgp3SwO/JkPrY=
Subject key identifier:   7F:70:EE:7E:FF:F5:E8:3A:0A:34:DA:87:D8:64:C3:7F:4C:2E:62:FB
Certificate issuer:       /CN=22f3c152-12b6-441e-b4d6-66feab870c4d
Certificate serial:       010D0C9F43285848A6CB669D73ACFEAAB3B1AB8D
Authority key identifier: 91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/c3e6db55-bfca-3e4b-817d-7472db3f9575.roa
Signing time:             Fri 24 Jan 2025 14:00:52 +0000
ROA not before:           Fri 24 Jan 2025 14:00:52 +0000
ROA not after:            Thu 24 Apr 2025 13:00:52 +0000
asID:                     3800
IP address blocks:        2605:8900::/32 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a6:cb:66:9d:73:ac:fe:aa:b3:b1:ab:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22f3c152-12b6-441e-b4d6-66feab870c4d
        Validity
            Not Before: Jan 24 14:00:52 2025 GMT
            Not After : Apr 24 13:00:52 2025 GMT
        Subject: CN=b347b8af-0d1d-4a5a-abcf-1ef6fc01fca1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:fa:1c:50:6e:bf:c9:9a:b9:f7:c6:e8:a9:2b:
                    3c:66:47:c1:e4:b5:d3:f5:6a:2a:2b:72:bd:df:e7:
                    79:74:7e:49:9f:d1:fd:fb:12:2f:85:e0:4d:7c:08:
                    19:7b:0f:b3:03:26:6d:7d:a8:24:b6:01:2d:7b:3d:
                    f2:77:8c:7a:44:bf:45:9e:4c:58:74:40:5b:ce:7f:
                    c8:87:4c:f5:6c:d9:d4:08:1c:f2:82:7e:6d:4b:59:
                    a1:f2:92:2c:6b:07:c4:a6:18:1e:11:6a:79:8d:f9:
                    3f:d3:43:dd:6f:5c:b1:19:62:2e:96:0d:ea:29:60:
                    d0:54:88:1b:48:2e:12:17:dc:f3:58:60:ca:42:c9:
                    66:44:9d:c8:f2:ba:42:9f:e0:8a:49:23:4d:0e:26:
                    23:06:a9:b5:10:19:ae:77:4e:b1:c2:98:bb:72:9a:
                    bb:d0:9a:de:ef:11:79:71:f0:81:bf:90:94:2a:ed:
                    d2:73:58:da:bb:c0:c0:c3:b5:a8:31:30:89:d8:9d:
                    6f:89:df:2f:39:e4:ec:1f:7c:b8:4f:ab:67:a1:5e:
                    94:17:ab:6a:6c:d8:9d:90:43:16:0c:29:89:77:b0:
                    25:24:45:77:3b:20:2a:1c:57:b7:94:b5:78:42:ed:
                    41:bb:9e:12:73:4b:04:2f:70:b0:48:5b:4b:7e:19:
                    88:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:70:EE:7E:FF:F5:E8:3A:0A:34:DA:87:D8:64:C3:7F:4C:2E:62:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/c3e6db55-bfca-3e4b-817d-7472db3f9575.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl

            X509v3 Authority Key Identifier:
                keyid:91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:8900::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:03:0e:02:f9:8e:38:46:30:7d:03:e6:5f:6d:97:5e:fa:08:
         4d:c7:68:d5:99:82:6f:42:7a:fc:4a:f1:24:17:45:b9:75:fd:
         42:5c:52:40:32:98:99:e8:c5:3b:fe:90:ae:9e:cc:2b:36:66:
         60:bb:ea:c0:69:86:0b:88:1d:a0:05:e7:46:dc:fa:8c:e6:e3:
         a2:04:21:80:0f:73:b0:74:f1:31:b5:73:70:04:73:f5:26:54:
         a8:7c:ce:21:e8:ce:9d:23:f5:3c:b2:b2:7b:68:6a:73:b5:2f:
         d5:69:bd:ba:fd:98:08:2c:1b:86:72:e9:58:3d:37:39:40:0b:
         c7:3b:b3:ab:85:5e:22:31:b6:a9:c3:6c:84:70:72:41:27:ca:
         aa:a6:35:47:10:d5:71:18:2a:bd:fe:26:6f:b9:7e:c8:dc:4f:
         71:6f:48:a2:6b:e6:c4:e1:3c:e4:1f:72:c7:6c:77:0b:52:ac:
         1e:9d:5a:04:7c:eb:04:d1:f8:29:e3:a9:bc:96:6e:6f:a2:43:
         0a:9c:4d:29:96:47:de:5e:3f:98:46:70:c3:d7:2f:bf:17:5c:
         09:be:65:fb:a1:be:a0:2c:c0:54:e0:d7:f4:e8:5d:49:af:d9:
         ef:20:f3:15:8b:b0:e9:5f:79:16:90:7c:ee:02:d9:f1:d7:12:
         e4:1b:77:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----