Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/42bc3cb2-813a-3ca2-a271-89902ea203cb.roa
File:                     42bc3cb2-813a-3ca2-a271-89902ea203cb.roa (raw, json)
Hash identifier:          gQQUat/g4QocIQKGzRrTiTgTf0RVibAv+aaopvbQE3s=
Subject key identifier:   C3:48:4B:2F:82:97:CE:E0:81:97:83:13:AF:25:96:7B:54:1C:3A:DF
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F432858490881753C12479BD0F5CB6F80
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/42bc3cb2-813a-3ca2-a271-89902ea203cb.roa
Signing time:             Fri 28 Feb 2025 14:00:52 +0000
ROA not before:           Fri 28 Feb 2025 14:00:52 +0000
ROA not after:            Thu 29 May 2025 13:00:52 +0000
asID:                     61317
IP address blocks:        2604:4500:1e::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:08:81:75:3c:12:47:9b:d0:f5:cb:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: Feb 28 14:00:52 2025 GMT
            Not After : May 29 13:00:52 2025 GMT
        Subject: CN=7df25975-d3b0-40d9-b788-e139341c9f1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:69:b7:04:6f:38:a5:26:7f:f7:9d:03:a0:b1:
                    90:5f:5a:d3:9a:c8:f7:fa:83:0f:ef:f6:1c:15:49:
                    6f:b9:ab:2c:3c:b4:74:b4:a5:cf:be:f4:9d:21:de:
                    e8:67:e9:3a:fe:7d:9d:51:84:59:27:bb:b5:9b:ba:
                    e7:2f:24:95:ae:3e:e9:33:bc:6b:10:e3:9f:38:e7:
                    5c:f6:90:e6:06:de:07:7a:92:c8:e0:d5:de:a0:50:
                    78:98:05:a4:7b:79:d1:5e:50:85:79:16:bd:f8:44:
                    40:03:b2:f9:3f:ab:87:c2:48:7d:f3:9e:67:8b:9a:
                    97:81:cd:75:89:54:b1:03:db:be:92:d6:8c:06:21:
                    33:3e:98:ec:3f:44:1c:7e:80:a6:de:e3:32:38:93:
                    d0:19:c8:d2:ef:f3:51:70:6a:ee:61:f9:d1:0f:cf:
                    30:f3:dd:15:8d:ca:ee:d1:41:8a:ba:0b:da:c4:b7:
                    76:20:25:63:b3:04:99:6a:18:cc:0b:f5:96:8c:b0:
                    56:d8:f1:26:ef:26:ff:64:94:7a:7c:93:41:01:ea:
                    af:c8:95:19:60:00:99:51:96:8d:89:10:10:a2:b6:
                    42:4d:f6:5d:0e:48:01:c4:8a:6b:b8:de:1f:04:a7:
                    3c:5b:f4:37:a8:a0:6f:e7:2a:26:c2:4e:99:11:e5:
                    66:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:48:4B:2F:82:97:CE:E0:81:97:83:13:AF:25:96:7B:54:1C:3A:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/42bc3cb2-813a-3ca2-a271-89902ea203cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:4500:1e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:48:15:2f:21:9f:4d:51:52:1b:c4:bc:9a:5e:db:37:ff:7d:
         26:12:3b:21:27:7a:b0:5e:d0:9c:55:9e:21:37:e3:ed:4f:10:
         1b:7e:39:8e:60:79:f6:06:46:98:7f:d5:ae:a8:14:31:04:f9:
         47:9d:f3:01:35:64:59:d0:aa:2f:f7:06:ab:b0:9c:cc:54:b7:
         70:68:36:6b:4b:69:10:b5:98:b7:03:de:ee:f4:02:3e:ee:9e:
         12:98:04:78:75:4f:bc:f0:3c:9b:20:6f:d7:25:ca:e7:34:3a:
         d4:8c:d4:4f:24:8c:bf:16:75:3a:22:42:e4:ee:a5:f7:18:ae:
         6c:48:b7:1b:cb:44:d7:18:d4:1f:d8:6e:f1:84:1a:74:81:8f:
         fe:08:d3:da:d8:e9:1a:48:a4:b6:f8:a8:32:b5:02:25:fa:ff:
         8c:c0:12:d4:8b:75:03:48:2b:37:7a:fc:2b:91:53:23:3f:92:
         ab:04:1f:fa:eb:eb:ea:e4:6f:3f:96:f5:3d:91:85:db:f5:96:
         0c:cc:93:3d:76:bb:6b:3e:d6:37:3c:53:84:1d:52:eb:40:9e:
         7e:0c:54:45:f5:71:61:e6:30:5e:5b:16:c3:7b:2d:19:0e:67:
         8a:8e:84:23:c0:a9:e6:5e:be:3a:e4:47:25:d8:e9:20:c8:49:
         12:99:da:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----