Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/25d5fb20-00ff-338f-af57-8b01fa608dee.roa
File:                     25d5fb20-00ff-338f-af57-8b01fa608dee.roa (raw, json)
Hash identifier:          ESrPOMX+Foizgioh1/84GqaQ3iw38z1Swadajn+ZMAc=
Subject key identifier:   BB:9A:BA:31:C6:E0:7C:FB:B8:57:42:CB:53:2C:2F:AC:AA:AD:48:B6
Certificate issuer:       /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial:       010D0C9F43285848A830AA6871D6A15365EF0380
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/25d5fb20-00ff-338f-af57-8b01fa608dee.roa
Signing time:             Sat 25 Jan 2025 02:00:39 +0000
ROA not before:           Sat 25 Jan 2025 02:00:39 +0000
ROA not after:            Fri 25 Apr 2025 01:00:39 +0000
asID:                     9009
IP address blocks:        2607:740:26::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a8:30:aa:68:71:d6:a1:53:65:ef:03:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
        Validity
            Not Before: Jan 25 02:00:39 2025 GMT
            Not After : Apr 25 01:00:39 2025 GMT
        Subject: CN=e827ebd9-63ab-4852-89cb-888d53394581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:5e:7a:42:70:40:db:c7:1e:6b:c2:06:5c:04:
                    15:2a:98:76:22:bd:71:7f:5c:5a:f2:ab:19:8f:75:
                    f4:7a:20:e1:1f:cc:e0:31:13:e2:77:a6:e9:1b:4f:
                    80:0a:5d:33:25:3a:c4:69:2f:4e:9d:28:09:12:b1:
                    7f:a5:92:6b:71:f1:84:41:ad:29:b5:1f:cb:4e:95:
                    24:51:ac:4a:b9:3a:17:6c:6f:67:bc:f0:0a:ac:43:
                    49:a3:66:7a:66:95:bb:e1:9a:fe:ad:11:4f:75:bd:
                    c6:4e:64:42:39:98:cb:36:1d:d4:63:b7:10:89:f3:
                    ca:12:bf:cd:fa:0a:2c:1e:08:ac:6f:b3:28:77:d7:
                    18:7b:ff:56:2f:09:83:64:53:31:39:b9:b4:04:10:
                    11:9c:2d:e4:dc:58:cb:dc:a4:a6:ff:c4:2e:ac:ec:
                    46:80:13:26:02:2d:64:ae:fa:df:0c:f0:25:f7:85:
                    c9:f6:49:b8:ef:bf:68:ef:77:b3:22:54:84:d6:d1:
                    de:24:bd:b3:01:87:37:eb:a9:9e:9d:d5:3c:7d:79:
                    15:9d:b9:e1:78:d1:c4:f4:bb:cb:8d:57:56:85:47:
                    92:d5:07:4f:2c:95:76:19:e2:b7:36:f5:8c:e2:4c:
                    3d:96:e4:a1:d4:46:bc:16:9d:01:5d:c8:7e:75:7e:
                    5d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:9A:BA:31:C6:E0:7C:FB:B8:57:42:CB:53:2C:2F:AC:AA:AD:48:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/25d5fb20-00ff-338f-af57-8b01fa608dee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl

            X509v3 Authority Key Identifier:
                keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:740:26::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:a5:14:54:6f:9e:ec:9f:52:15:12:2b:83:db:b7:ff:ac:6f:
         02:60:8d:41:e3:23:58:7e:60:01:2f:8b:7a:8a:7a:11:e2:35:
         ef:4a:60:da:e5:a6:59:60:2c:5b:c1:97:e8:e2:aa:58:56:d8:
         19:3f:2c:69:d9:3b:c3:89:d2:01:d8:74:59:ee:15:ea:f7:34:
         a6:92:27:57:47:06:6b:f5:5d:e7:e9:39:80:3d:ea:b1:2b:93:
         aa:fa:2a:b5:53:b2:d0:9d:a0:ef:b3:01:e1:d0:2f:e6:ed:a6:
         9e:e5:3e:8a:0a:e9:82:b1:b7:33:68:95:03:61:45:7c:dc:0e:
         bf:97:7f:d7:89:78:fe:66:c3:14:d3:04:f6:55:3d:3b:c6:8f:
         cc:f6:79:ad:13:5f:18:46:b6:00:cc:2f:82:a9:de:98:15:f8:
         be:eb:3e:32:e1:3b:02:d6:e3:a5:5f:a2:97:b5:da:b6:4e:34:
         b6:91:f4:27:a1:f7:b9:90:1b:25:38:c3:e2:6b:96:27:ad:ac:
         4a:31:e5:de:9e:73:b4:e5:bc:c9:05:e5:73:18:d6:6a:0f:cd:
         8d:03:a9:ec:f6:a7:b6:7f:b0:f0:52:2a:0a:38:76:19:c7:ca:
         92:13:d2:c7:2c:fa:1b:6a:bd:dd:c1:cf:0d:0a:a0:75:88:c2:
         a1:a6:e4:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----