Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/1363fa84-cb09-328b-a896-1882acaba54e.roa
File:                     1363fa84-cb09-328b-a896-1882acaba54e.roa (raw, json)
Hash identifier:          lFN+kpNyFt7+YkR6S5ay/oz4bauGduK3W6TGBqSim8A=
Subject key identifier:   DA:B7:8C:D0:21:1D:54:0C:43:8D:4B:88:73:42:D9:EB:B8:46:AD:EA
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F43285849F9DFD6BF961453CE7FC6AE80
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/1363fa84-cb09-328b-a896-1882acaba54e.roa
Signing time:             Mon 26 May 2025 01:00:50 +0000
ROA not before:           Mon 26 May 2025 01:00:50 +0000
ROA not after:            Sun 24 Aug 2025 01:00:50 +0000
asID:                     15290
IP address blocks:        2001:4c8:1017::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f9:df:d6:bf:96:14:53:ce:7f:c6:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: May 26 01:00:50 2025 GMT
            Not After : Aug 24 01:00:50 2025 GMT
        Subject: CN=3ffc7f56-c527-446c-bdd0-766dc45fa903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:5a:46:d4:b1:75:02:51:db:c6:91:ad:cb:16:
                    cd:b7:d3:de:ce:ba:20:6d:8d:1a:e0:e8:ec:e3:cc:
                    61:b3:b8:29:d5:eb:06:da:c8:6c:77:44:8c:db:0c:
                    d8:e0:d2:ae:f7:6b:b2:e3:af:62:11:5b:c4:00:92:
                    29:bf:bd:b2:12:a0:25:50:64:2c:b1:a1:a0:25:88:
                    7c:7d:8a:67:90:b4:8a:60:7e:36:cb:7d:98:b1:0b:
                    25:ec:c3:f1:29:a2:49:5b:2b:13:0f:4b:ff:60:1d:
                    c0:4b:a3:2e:d2:63:c0:98:cb:ed:f8:be:80:6b:b5:
                    b8:5c:86:68:9f:17:73:f0:6f:e8:3e:4f:f4:5c:4f:
                    9f:83:da:87:6b:3b:5d:15:34:71:2a:ff:b0:f8:2a:
                    74:86:07:6e:f6:15:07:db:68:7c:7b:f2:fb:93:ca:
                    25:9e:b4:15:d9:b6:4e:e3:1b:2d:8e:4e:e2:35:07:
                    89:f4:e5:49:c2:14:f1:e5:f3:4a:a2:b4:76:68:2a:
                    e0:73:1b:52:9c:22:43:c4:09:9d:c2:b4:ba:5b:f6:
                    e9:b3:89:8d:c7:3a:30:9a:5d:0e:b4:66:ba:b4:a3:
                    c3:a2:38:6c:27:e7:2f:12:6d:08:ac:bc:88:58:3e:
                    88:d9:cb:f7:52:a1:f0:c7:63:ec:1c:38:97:6b:07:
                    1e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:B7:8C:D0:21:1D:54:0C:43:8D:4B:88:73:42:D9:EB:B8:46:AD:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/1363fa84-cb09-328b-a896-1882acaba54e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4c8:1017::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:54:92:4a:da:ce:93:1d:8a:a8:df:e5:7b:97:77:3d:06:de:
         a8:09:fb:69:d5:54:bc:06:10:33:3d:03:f4:7d:c1:14:b3:63:
         df:ba:1e:17:14:7e:30:2a:a1:3a:7b:3b:4b:4c:82:8a:5c:e0:
         ea:f7:3f:29:ea:92:ea:66:ef:7b:f1:f8:a9:ee:d0:9a:7a:cc:
         3d:b4:ec:1b:2c:fa:32:25:4b:61:cc:4a:02:59:1a:d1:f1:bb:
         06:54:16:2f:e1:54:c6:9c:75:86:32:59:42:8c:ff:95:f5:59:
         83:fd:33:83:f7:a8:5a:12:14:f0:d6:34:a6:42:12:4e:2b:c1:
         44:eb:7b:94:58:4f:c7:26:5e:b9:a2:de:31:6d:66:df:2a:57:
         80:e6:82:b6:c3:fa:f9:a9:0e:f2:af:d8:fa:44:c2:a2:56:86:
         7f:58:f3:76:8e:3e:41:5b:ad:8f:92:1c:0c:b3:ec:14:61:9f:
         60:ca:c9:3e:b0:dd:cb:97:f5:24:2f:ee:43:f8:a9:3b:58:c4:
         23:22:6f:d3:4a:a3:24:a7:43:60:b0:69:c4:4e:1c:37:bc:29:
         02:0b:45:dd:86:cf:b6:18:a9:d0:e8:75:c9:45:63:51:23:92:
         f7:41:13:26:d9:6e:8c:d0:0d:76:5f:a0:17:96:c3:4b:6d:ac:
         9c:8c:9f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----