Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/b115bbc1-c061-3fca-9ca6-440a61fb4a7a.roa
File:                     b115bbc1-c061-3fca-9ca6-440a61fb4a7a.roa (raw, json)
Hash identifier:          Si1jw0zv7X7yLx+RE9S/OjCeVFFgTsSmPUBD8tH6At8=
Subject key identifier:   00:72:AD:BE:DF:33:A9:5D:7B:DD:53:08:23:71:20:2C:9C:4D:5B:79
Certificate issuer:       /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial:       010D0C9F4328584902EC2C500E58A523CA869500
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/b115bbc1-c061-3fca-9ca6-440a61fb4a7a.roa
Signing time:             Wed 26 Feb 2025 14:00:51 +0000
ROA not before:           Wed 26 Feb 2025 14:00:51 +0000
ROA not after:            Tue 27 May 2025 13:00:51 +0000
asID:                     9009
IP address blocks:        2607:740:6d::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:02:ec:2c:50:0e:58:a5:23:ca:86:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
        Validity
            Not Before: Feb 26 14:00:51 2025 GMT
            Not After : May 27 13:00:51 2025 GMT
        Subject: CN=c9b5dd0c-a65d-4aae-ab71-635537b7d3e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:cd:0c:05:ec:13:8a:fc:5b:ae:c5:55:48:ab:
                    59:1b:ba:8a:33:52:52:d3:6c:83:03:99:45:8f:9e:
                    0e:7a:f5:54:9d:a9:c3:e1:4a:86:03:fc:c2:13:1e:
                    6d:3f:a0:e3:33:b9:5c:91:52:a2:ca:b3:ce:1b:2f:
                    a5:35:07:16:bc:49:c6:a7:e0:1c:3e:5f:3a:e3:9e:
                    1e:04:ae:09:b3:b1:1a:d0:8c:21:fe:db:0f:1a:99:
                    6f:46:6a:ff:3f:ab:20:e3:4e:9f:b2:42:31:46:d0:
                    75:f7:35:67:a9:e2:65:5d:87:ca:1a:a8:5c:fd:a8:
                    7d:25:a4:db:9e:ed:6a:3f:ab:8b:a6:0f:d1:cd:c4:
                    d0:9e:7d:00:94:0a:0c:0d:a5:6e:a3:82:5d:28:5d:
                    f9:9d:04:e2:53:db:29:3c:60:2b:02:d5:e9:60:42:
                    7d:06:41:4a:1f:a2:f0:7b:0b:93:1c:31:f5:77:4d:
                    d0:ec:0a:5d:81:d1:6b:e8:ac:1a:3a:a7:bd:a2:e8:
                    b3:85:90:b2:84:45:b3:be:5e:c1:0f:57:ca:73:e9:
                    fd:f5:95:9b:50:af:c1:30:1b:7a:5a:1d:46:53:df:
                    e5:85:76:1d:16:d7:79:c1:55:60:d9:a1:50:06:25:
                    e8:88:f9:73:ba:c0:0a:ba:fa:77:5e:8b:7b:8e:98:
                    9f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:72:AD:BE:DF:33:A9:5D:7B:DD:53:08:23:71:20:2C:9C:4D:5B:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/b115bbc1-c061-3fca-9ca6-440a61fb4a7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl

            X509v3 Authority Key Identifier:
                keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:740:6d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:c2:88:c4:29:50:f0:4d:89:37:14:01:5c:56:e6:75:d9:cb:
         ed:0d:98:75:44:b1:bb:25:7a:f7:ff:06:92:4a:60:6f:93:31:
         93:17:71:ca:0d:6e:ed:73:18:79:92:3b:c7:69:90:18:ff:48:
         fa:84:37:fe:99:af:5a:dc:d0:09:a7:89:e2:18:62:f4:bd:9f:
         1f:4d:7a:7f:d8:83:59:e2:19:74:bb:8c:44:14:af:fa:89:4c:
         d6:08:bf:0d:2e:af:e5:40:36:8c:6d:bc:8a:72:d4:2b:e4:81:
         3b:cf:3d:e1:47:04:56:0a:50:fe:be:d6:9b:1b:5a:05:af:34:
         8c:a0:ce:6f:e5:eb:4c:a0:6a:4d:c4:94:b8:2e:93:ec:22:ec:
         d8:14:e6:04:fd:01:29:ec:0d:2b:76:44:18:5d:3c:2b:8c:dd:
         cf:15:0d:83:65:60:2a:39:a3:ca:09:45:58:9b:01:49:8a:b4:
         d2:b7:fd:e4:22:f6:b6:6c:c3:fe:a7:30:09:d0:26:e8:cd:12:
         4c:bb:92:2d:cc:e8:32:96:6b:70:3b:ec:a4:61:df:a4:06:a0:
         dc:07:73:cd:44:f2:ee:3c:12:87:b6:c1:fc:f1:30:9c:08:cb:
         78:22:09:bd:31:1f:a8:a6:3b:82:dc:22:7c:c7:cb:e7:10:9d:
         18:f8:54:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----