Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/3dfe882e-8160-348c-8dc6-5a177323dfaa.roa
File:                     3dfe882e-8160-348c-8dc6-5a177323dfaa.roa (raw, json)
Hash identifier:          78Wy23S1+iyfbWamVzVVzpJeGVPqrvxsClkKPoLxdoc=
Subject key identifier:   FA:49:60:A7:C1:F2:A5:A1:EF:CF:D5:4D:5B:D9:B3:D3:3D:A5:2E:DF
Certificate issuer:       /CN=78369c58-f0b4-454b-ad08-df84f1fd007c
Certificate serial:       010D0C9F43285848F9267D3BF5DC3EEB199D9580
Authority key identifier: DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/3dfe882e-8160-348c-8dc6-5a177323dfaa.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     38621
IP address blocks:        2607:f4e8:ac::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:7d:3b:f5:dc:3e:eb:19:9d:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78369c58-f0b4-454b-ad08-df84f1fd007c
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=7e5599a7-ce27-4f29-bc41-7ceaca334de3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9c:a7:95:26:2a:2e:97:a5:8e:30:1a:e6:c0:
                    93:75:c2:d0:b6:a8:5c:02:85:31:05:5a:3c:4b:ad:
                    15:7c:16:70:43:9f:e6:3c:ea:43:b6:e3:76:06:5c:
                    ec:31:07:2d:82:c7:67:30:55:1f:51:40:07:d5:74:
                    34:a8:4b:f5:fd:69:c7:15:18:6e:23:05:dd:c7:10:
                    3c:4c:0f:ba:eb:07:99:10:17:fa:05:dc:4d:1f:ce:
                    f3:04:47:30:74:bc:d3:5e:86:d0:41:85:a1:63:bb:
                    87:91:bf:4b:4e:28:6e:2f:4f:05:0d:3a:49:83:7b:
                    90:e5:24:9d:0d:70:6f:54:06:b5:15:a9:3e:68:45:
                    2f:e7:16:33:32:ac:20:b9:a3:f8:86:bb:ea:b6:95:
                    f9:64:15:4f:58:c6:1c:8f:e2:6e:9f:89:8d:78:0b:
                    b5:75:68:87:7b:72:cd:62:a0:49:b9:89:50:24:d0:
                    fb:7b:63:a0:1d:28:53:64:36:49:15:ad:e5:13:f7:
                    cd:64:c6:83:c5:da:35:75:4f:5d:27:0c:5d:d8:de:
                    6a:91:8c:c6:bc:7b:01:18:c2:13:6c:59:b3:a9:65:
                    79:0b:d9:f3:af:6f:0e:37:74:c9:81:70:cf:38:51:
                    82:4a:b6:53:83:c1:7c:1f:6f:90:88:00:d4:1f:e1:
                    1a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:49:60:A7:C1:F2:A5:A1:EF:CF:D5:4D:5B:D9:B3:D3:3D:A5:2E:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/3dfe882e-8160-348c-8dc6-5a177323dfaa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl

            X509v3 Authority Key Identifier:
                keyid:DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f4e8:ac::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:98:dd:58:1f:8c:20:b3:16:0f:d6:eb:96:82:99:04:f3:40:
         06:11:25:b5:08:77:02:3d:3d:a8:9d:e1:69:31:1d:e1:8d:68:
         ea:ab:d4:5c:fe:86:2d:b2:1b:95:cd:b6:1f:05:0d:a9:bb:f2:
         5a:1d:2a:0e:3b:fd:83:9f:13:26:63:e8:9b:89:41:f9:45:5f:
         ab:2e:da:0d:6a:b3:77:8a:ac:ad:a3:4a:ae:8f:b6:d6:03:64:
         f6:a0:80:b7:bd:a9:37:c3:16:34:94:24:21:3d:c0:17:83:74:
         d2:a7:e4:16:f1:64:98:35:28:95:87:3d:24:f2:06:c3:26:ab:
         0d:20:f3:e5:bf:c3:1c:e2:33:14:6b:96:37:ea:24:6a:05:0c:
         a6:f8:ac:ad:34:32:21:b0:56:ab:3a:ae:5a:49:14:70:c8:f4:
         5a:26:e8:e4:e8:26:99:3c:c7:93:d9:5b:18:cf:1e:e5:46:fe:
         64:ec:13:97:cc:55:56:4c:fc:bb:a4:be:1d:da:3b:85:c2:0a:
         ab:5b:06:d7:92:04:ab:09:3d:33:12:15:83:cb:e0:67:b1:d2:
         00:55:8b:db:36:29:24:c6:42:95:0d:5c:46:2c:e9:ec:42:e9:
         ce:fa:98:99:6c:02:d0:e0:8e:7f:0b:cb:ea:ff:77:bd:bf:f3:
         e4:ca:83:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----