Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/449b6176-af93-322b-9a26-5b7522811abf.roa
File:                     449b6176-af93-322b-9a26-5b7522811abf.roa (raw, json)
Hash identifier:          i+aYkmU9mawJGY2iE5OJlu+N0KaMyi9cmzalqYLG5k4=
Subject key identifier:   E9:51:1C:2A:C2:58:E2:FC:54:E1:93:68:8D:C4:C6:14:9C:3B:39:5A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CAFE35D9233C8C876A36D80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/449b6176-af93-322b-9a26-5b7522811abf.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33651
IP address blocks:        2603:3024:1c00::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:af:e3:5d:92:33:c8:c8:76:a3:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=a2594a64-2de1-43a8-8668-9790cecbf095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b5:ee:4e:2d:52:18:82:ae:f8:53:69:c4:4c:
                    10:0d:e4:4d:82:5c:19:26:cf:07:c8:6a:fa:84:c1:
                    67:50:d4:32:0a:72:c8:84:1f:ad:67:df:0f:a9:39:
                    c8:fc:0c:a7:51:97:ed:29:e8:e7:83:e6:a9:0c:3b:
                    5e:38:76:e1:8a:13:25:25:cd:57:c6:65:8a:e0:5d:
                    2f:63:f0:57:78:90:53:a6:77:ae:08:ce:63:b7:ca:
                    f8:3c:af:bb:c4:e1:aa:37:b4:61:c4:71:f8:81:92:
                    e9:c0:8f:ec:67:97:13:1c:42:d7:b6:fa:57:3c:72:
                    37:ee:cc:df:dc:59:fc:6d:b8:b8:e5:c2:37:4f:cb:
                    2e:a4:58:67:93:b9:42:cf:c7:b0:63:0f:58:c6:d7:
                    9c:00:fd:a5:9a:5d:90:ff:fd:b9:9e:b0:ea:a7:a6:
                    b8:b9:42:0e:8e:49:0c:3b:f4:d4:c1:c6:cb:bb:a2:
                    de:95:19:2a:48:52:60:49:60:ea:f0:7d:18:6c:a9:
                    9b:4e:88:af:f8:db:f3:4c:86:2e:83:48:9d:3b:65:
                    01:fa:1c:3a:ac:b3:d8:6c:b3:a7:f6:08:09:80:2c:
                    08:2c:b5:8c:21:d2:31:35:2d:71:0d:0a:c9:4a:b4:
                    6d:33:64:21:be:61:08:ab:34:1f:fc:58:68:a5:b1:
                    a7:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:51:1C:2A:C2:58:E2:FC:54:E1:93:68:8D:C4:C6:14:9C:3B:39:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/449b6176-af93-322b-9a26-5b7522811abf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:3024:1c00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:a5:43:c1:e8:4e:2d:19:d4:4f:22:e2:40:07:cb:96:7d:5d:
         fc:b2:e0:fb:7f:87:43:eb:1d:25:c5:d8:42:90:87:17:b2:14:
         2f:e7:d9:00:26:0e:6a:be:18:9e:e1:27:cb:ed:ee:a7:d0:b4:
         45:bb:c0:49:5f:93:21:e7:ac:e1:dd:18:9d:97:ab:cd:c8:c2:
         fa:26:7c:c5:a4:83:2f:da:4e:cb:c3:b1:18:7b:5e:37:10:82:
         ad:37:8f:40:81:79:07:62:f9:6f:68:79:19:45:ab:8c:ab:25:
         12:27:bd:bb:f1:2a:a8:f9:5c:0a:c3:96:a3:84:2d:f7:b8:36:
         4f:91:a5:b1:1d:b1:65:76:c9:3e:e4:14:b6:7d:f7:9e:4c:32:
         fe:6e:24:d9:2b:e5:62:13:99:77:c0:37:30:33:27:b7:4b:2c:
         b4:6b:33:e2:d4:1a:ed:1b:c6:9e:90:0f:8f:e5:a2:fa:7d:bb:
         6c:46:e4:14:be:c6:f6:5e:20:c8:14:03:9c:10:4d:b8:6a:5e:
         e6:7d:00:ef:8a:f0:dc:d9:55:fb:cf:82:62:b5:2b:e7:94:76:
         69:bc:2b:5e:8b:67:3c:da:33:d2:7a:6d:e1:23:15:cf:8c:f1:
         57:32:c1:b9:7f:6a:9f:73:34:bd:95:23:0d:72:f1:6b:8c:76:
         67:72:89:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----