Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/a4989051-b709-3221-a7dd-d1ee2f63b9e9.roa
File:                     a4989051-b709-3221-a7dd-d1ee2f63b9e9.roa (raw, json)
Hash identifier:          CMAUZiMfUIjH29nPQkbuOBzYFJgHNbXGgJ8S6LbK+Jo=
Subject key identifier:   1E:76:ED:F1:68:B4:2E:F2:7B:7E:06:3E:3E:CF:A2:BE:A1:28:5C:54
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F43285849F9DFD8632C29601CEC11E180
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/a4989051-b709-3221-a7dd-d1ee2f63b9e9.roa
Signing time:             Mon 26 May 2025 01:00:50 +0000
ROA not before:           Mon 26 May 2025 01:00:50 +0000
ROA not after:            Sun 24 Aug 2025 01:00:50 +0000
asID:                     15290
IP address blocks:        2001:4c8:10a1::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f9:df:d8:63:2c:29:60:1c:ec:11:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: May 26 01:00:50 2025 GMT
            Not After : Aug 24 01:00:50 2025 GMT
        Subject: CN=4fa3ae2c-a463-46b8-8acd-4e075112a500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:cc:74:8d:1f:a8:4e:29:b7:d8:68:c0:dc:a8:
                    88:da:97:ba:38:c5:4c:ab:ed:95:e9:8b:3f:b9:50:
                    97:e9:fe:9e:69:b3:ef:1a:38:ac:be:bb:f8:c1:d2:
                    0e:93:52:18:4a:78:4d:a9:40:0f:96:f8:9c:6b:f2:
                    1b:74:ab:95:45:51:76:8a:9c:61:6d:2c:b9:0d:c2:
                    2d:73:8a:7e:30:62:28:2d:cf:0b:67:97:9b:87:22:
                    a5:89:18:f5:f2:d8:d5:77:71:e0:56:ef:98:e1:8f:
                    c4:e6:08:7b:47:2b:ef:7e:f2:27:38:a2:ac:e4:51:
                    5d:4a:47:8c:6e:15:7a:ae:cb:8c:89:61:56:61:7a:
                    a7:85:14:dd:3f:8c:2d:79:cb:1b:a6:06:6f:05:ee:
                    a2:d2:69:f9:3e:7c:13:43:79:99:28:ee:7f:b3:a8:
                    e6:fa:c6:16:32:e2:6f:44:08:8f:86:b3:7e:6b:90:
                    31:f4:24:28:81:90:5e:8c:b6:0e:22:10:16:86:cf:
                    8a:50:65:0d:e1:ac:6d:c1:79:40:d3:90:7c:ee:e2:
                    d5:3d:eb:5e:ea:61:d2:3c:d8:8e:3e:12:a2:45:b8:
                    66:e2:63:b6:3e:82:6a:c8:4a:00:ae:0d:78:52:0e:
                    cb:95:01:2e:22:6d:2f:63:88:f4:22:9d:2f:47:81:
                    66:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:76:ED:F1:68:B4:2E:F2:7B:7E:06:3E:3E:CF:A2:BE:A1:28:5C:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/a4989051-b709-3221-a7dd-d1ee2f63b9e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4c8:10a1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:8f:1b:ea:74:6d:a1:cf:87:57:3f:f0:d6:20:15:2c:7f:c4:
         2b:d0:65:ce:16:3c:39:2e:02:6d:e2:0d:46:c6:ec:d6:73:31:
         24:56:6f:96:5c:56:76:25:b5:13:af:da:96:5a:6d:ba:7b:0a:
         02:66:16:9c:b3:45:d6:de:1d:db:a7:46:2c:70:2e:7d:79:4d:
         78:e9:6a:5b:39:8a:62:3d:bd:7f:2f:2b:a4:af:64:83:06:68:
         2d:a5:c2:37:8a:09:70:5f:34:3e:54:c4:0d:ad:f4:90:d0:cc:
         22:99:61:94:cf:07:44:d0:88:26:77:5c:c0:0c:8c:08:fd:f0:
         f0:96:ec:d8:6b:fc:78:cc:64:0f:5d:d2:e2:6b:11:a3:2f:75:
         ff:22:40:a8:bb:62:1f:d2:f9:6f:31:9e:19:2d:59:da:a9:f3:
         e3:31:52:5b:7a:d8:de:da:71:6c:d4:c9:2c:4a:6b:cb:a5:6c:
         44:78:ca:4d:e8:25:a5:dd:fc:19:db:b2:7a:0d:d4:fd:ce:ca:
         fc:c9:6d:a7:78:84:e7:73:38:9e:7f:fc:e8:aa:9a:9b:9a:30:
         4e:a7:a5:14:4e:b1:a4:e9:21:dc:a2:4d:23:41:22:b2:84:48:
         aa:bf:14:a6:62:49:6b:a1:61:64:1b:c2:13:d1:15:21:b2:24:
         60:7d:54:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----