Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/77fdc138-1bbb-3196-b410-05094ab7796f.roa
File:                     77fdc138-1bbb-3196-b410-05094ab7796f.roa (raw, json)
Hash identifier:          L5q4mBBZjznwRf0Xg7tZe50Fyvse2K2AsXz+9yDxs+s=
Subject key identifier:   21:4C:80:80:C3:A3:C7:C2:6D:F3:17:D6:CA:7F:E4:DC:7F:79:00:67
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CAFE37FB292B5C004901FD0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/77fdc138-1bbb-3196-b410-05094ab7796f.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33651
IP address blocks:        2603:3024:1f00::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:af:e3:7f:b2:92:b5:c0:04:90:1f:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=102d12fb-3309-4b94-bb62-a54a70e011aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:7f:09:ec:94:48:39:b1:21:8a:b0:3d:01:a9:
                    51:29:fd:7a:c3:88:5f:18:9f:2d:66:a3:2c:76:51:
                    e0:52:00:68:99:02:de:0e:0c:71:15:c2:f4:81:71:
                    c9:aa:15:95:eb:25:ff:13:db:db:e2:1f:6e:d4:0a:
                    1e:b3:d9:33:35:ad:d5:15:19:2a:00:2f:a3:7f:fd:
                    65:71:09:48:cb:84:e8:b9:6f:4b:2a:15:d0:9e:64:
                    48:90:05:74:85:8e:5e:b3:76:35:8d:f7:3c:d0:57:
                    63:58:e5:1f:be:60:d9:da:0c:7f:6c:97:89:97:3a:
                    5b:c9:4f:c4:6c:da:61:9e:5e:5d:2a:0f:8d:e0:dd:
                    cd:04:61:46:2d:c5:67:70:39:2c:98:44:ff:03:db:
                    d8:ea:5c:b6:25:f4:0a:31:9c:c7:0b:e7:42:20:5b:
                    32:a1:46:08:1a:89:a9:76:b9:c1:28:50:8f:1d:b3:
                    cb:12:39:74:b1:cc:26:62:0f:7d:6b:f8:8c:97:3b:
                    53:7a:62:4b:4e:50:e1:14:ae:8b:78:34:cb:97:1a:
                    18:83:cb:79:54:f3:4f:e1:e1:3a:34:0a:c2:3b:3d:
                    42:ee:f0:2a:b8:9b:5c:fc:99:ed:e1:ee:20:69:42:
                    0f:00:31:9e:9c:d0:04:c1:29:d1:3c:ab:71:ae:c2:
                    2f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:4C:80:80:C3:A3:C7:C2:6D:F3:17:D6:CA:7F:E4:DC:7F:79:00:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/77fdc138-1bbb-3196-b410-05094ab7796f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:3024:1f00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:d5:3a:bf:50:5d:a6:ab:f3:09:6e:10:c4:1b:c8:59:5d:08:
         c6:9e:95:c3:fe:a7:3e:23:04:20:e2:d9:20:c1:87:2a:dd:39:
         7f:3c:49:74:f6:92:e0:eb:05:81:58:e6:de:ac:60:1e:81:37:
         f2:9e:09:be:ef:a7:a5:50:ed:8a:17:6b:4c:85:3f:54:7d:4e:
         9e:52:db:5d:8b:16:05:49:35:d1:22:0b:2d:de:5e:40:c9:e1:
         70:ee:ee:7a:e7:74:6c:7b:b4:d1:c5:a0:f7:1d:b9:cb:c3:b2:
         6c:47:70:14:a6:b2:4e:83:a5:22:2b:47:e6:43:94:76:c5:60:
         68:cc:25:1c:f0:98:1c:d3:ef:b2:05:7c:06:a3:1c:27:65:0e:
         f6:b1:d3:19:6e:19:6d:22:f7:2f:c2:06:30:14:1d:79:a6:39:
         5c:29:8b:0c:f7:03:68:09:7e:85:d1:48:04:43:9c:1c:b2:b5:
         4f:94:41:ec:77:5d:35:b1:f5:2d:ac:e2:f6:6e:39:32:9d:36:
         d5:46:1b:b7:3e:09:47:82:49:db:51:79:26:a7:6a:e2:ff:63:
         4c:81:aa:c5:19:d1:a7:d0:6b:98:d4:16:c3:ea:38:2e:03:04:
         7b:60:f1:4f:fd:56:9a:c9:56:d6:ef:03:27:ce:4b:9b:fa:2e:
         9c:46:cc:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----