Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/51d41b22-8e48-3167-a304-52a2feb74dfb.roa
File:                     51d41b22-8e48-3167-a304-52a2feb74dfb.roa (raw, json)
Hash identifier:          BtniG6aLQ7ing99s+lpV8+nJOp6CDExXHABOgEo/68A=
Subject key identifier:   EA:C8:D9:44:91:3C:D4:19:67:48:1D:D7:7F:68:26:85:7A:2D:F0:D1
Certificate issuer:       /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial:       010D0C9F43285848A9961AFC4EAEED4E18E86380
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/51d41b22-8e48-3167-a304-52a2feb74dfb.roa
Signing time:             Sat 25 Jan 2025 14:00:52 +0000
ROA not before:           Sat 25 Jan 2025 14:00:52 +0000
ROA not after:            Fri 25 Apr 2025 13:00:52 +0000
asID:                     9009
IP address blocks:        2607:740:37::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a9:96:1a:fc:4e:ae:ed:4e:18:e8:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
        Validity
            Not Before: Jan 25 14:00:52 2025 GMT
            Not After : Apr 25 13:00:52 2025 GMT
        Subject: CN=d872e18b-1d2d-4924-80c6-73b3cb97bcf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:48:78:52:13:8b:85:91:4f:e6:3e:6a:18:50:
                    87:52:19:5e:9c:1f:04:5a:d6:6d:7a:22:e6:4e:b2:
                    ec:7e:b6:0e:f2:d4:c4:05:42:22:f6:67:ee:6d:df:
                    71:dd:d4:29:ff:83:cc:2c:d0:e9:b7:40:ba:1d:7b:
                    63:3c:e9:b5:1e:fe:5d:af:b8:d5:9f:74:42:89:4e:
                    6e:28:b9:6d:53:5e:45:47:09:df:c0:50:6c:6a:1d:
                    b6:07:d2:16:cf:5d:60:4d:ab:04:b5:c3:bb:0e:f0:
                    b0:4c:14:ef:39:bc:d8:4b:fd:6b:14:af:2b:00:36:
                    e1:3b:dd:73:a4:46:2d:fb:a2:c1:0f:3c:33:76:46:
                    a2:77:d5:09:28:0b:11:2b:6b:e8:e0:d2:f2:f5:6b:
                    9b:0d:6b:07:e7:ad:58:f0:09:33:e3:44:c8:8d:8f:
                    ac:07:0c:a9:12:07:33:9d:98:0c:ad:47:1a:b1:ca:
                    7a:19:2a:19:b5:b0:5d:91:c7:0a:28:9f:47:3f:02:
                    91:66:fd:72:04:77:89:d8:1e:84:60:e6:75:ef:a8:
                    79:bf:c8:c1:17:d5:2b:92:8c:64:b1:c4:69:7c:59:
                    9e:ce:dd:b1:81:75:79:1c:cc:45:f1:47:83:bb:4f:
                    71:c0:dd:cf:1d:55:01:fe:57:d7:45:f9:0d:8b:79:
                    a1:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:C8:D9:44:91:3C:D4:19:67:48:1D:D7:7F:68:26:85:7A:2D:F0:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/51d41b22-8e48-3167-a304-52a2feb74dfb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl

            X509v3 Authority Key Identifier:
                keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:740:37::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:b7:e1:b3:dc:58:ea:6b:ba:f8:26:11:3f:41:db:58:72:93:
         f0:df:d0:7d:4c:66:9a:bb:f8:6e:05:77:d4:3b:db:cb:77:f2:
         39:fa:c3:97:89:7c:54:70:4d:62:03:ae:4f:1f:5b:cc:0a:75:
         29:a8:6b:63:ce:6c:09:10:cd:f1:b8:af:f7:30:ff:2e:eb:0c:
         c8:79:93:4c:e8:f9:58:72:15:d6:47:6f:a6:17:ce:2e:53:7d:
         b3:65:e5:da:53:af:6d:00:43:77:57:cf:d3:53:fc:c7:57:73:
         fa:4d:80:5d:a6:73:38:6c:da:e7:c9:55:93:4e:91:b5:e3:50:
         bf:d9:8b:62:a7:6d:de:71:73:96:4b:7b:ac:b7:a2:4e:90:c1:
         82:9e:db:51:f0:3c:9b:da:2a:10:5f:78:69:31:46:3c:75:4d:
         ae:4e:87:30:78:e9:66:1d:b6:f5:ff:f1:82:07:c0:3a:3c:e7:
         39:72:03:67:51:4a:3a:83:05:6a:77:c5:42:61:33:65:0e:c5:
         c4:83:4f:e9:a7:45:df:5a:ec:2c:12:14:94:3d:02:8e:a1:bc:
         18:f8:a4:38:91:03:c4:33:58:01:2f:68:8b:ec:1f:2e:68:68:
         6c:2f:3a:a3:a8:4c:1e:ad:1c:c4:66:5a:08:f5:1d:f1:fb:db:
         43:49:71:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----