Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d414bd1e-af01-4ff2-92ae-ece02a34cdb9/76f20a08-edc1-360f-b8e4-c62f8ebb677d.roa
File:                     76f20a08-edc1-360f-b8e4-c62f8ebb677d.roa (raw, json)
Hash identifier:          5TrANA97jdWcWkyNee2Dsy4FXRngZ7VGe7hOxXovXKw=
Subject key identifier:   F2:5D:4A:47:07:D6:72:84:87:75:43:08:F7:B2:BA:F8:A6:89:99:AA
Certificate issuer:       /CN=d414bd1e-af01-4ff2-92ae-ece02a34cdb9
Certificate serial:       010D0C9F432858494733FBFDFD8C95EE398C2720
Authority key identifier: 16:0E:3F:D9:3C:76:D6:B7:2E:B4:AF:CB:5F:C8:99:38:12:AC:7A:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d414bd1e-af01-4ff2-92ae-ece02a34cdb9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d414bd1e-af01-4ff2-92ae-ece02a34cdb9/76f20a08-edc1-360f-b8e4-c62f8ebb677d.roa
Signing time:             Sun 23 Mar 2025 01:00:39 +0000
ROA not before:           Sun 23 Mar 2025 01:00:39 +0000
ROA not after:            Sat 21 Jun 2025 01:00:39 +0000
asID:                     26141
IP address blocks:        2607:a2c0::/32 maxlen: 38
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:47:33:fb:fd:fd:8c:95:ee:39:8c:27:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d414bd1e-af01-4ff2-92ae-ece02a34cdb9
        Validity
            Not Before: Mar 23 01:00:39 2025 GMT
            Not After : Jun 21 01:00:39 2025 GMT
        Subject: CN=774246e9-357e-48ce-9c08-a6fa27aea597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:58:1f:55:88:8d:eb:dc:fa:8a:ab:54:5b:13:
                    53:03:69:31:fa:d9:f2:63:65:b3:81:a2:eb:95:a0:
                    b6:83:26:66:c6:4e:1a:83:1b:4d:b6:94:9a:2c:1c:
                    96:09:08:d3:77:15:f8:a6:83:ec:53:a0:d7:80:7a:
                    12:1c:25:72:ea:d5:2b:26:c9:e4:d7:0d:59:57:c2:
                    29:36:e4:12:5c:67:7f:c6:6e:26:f5:6d:e1:d0:d0:
                    65:cc:eb:f2:27:06:c8:44:57:60:87:9b:93:e3:76:
                    84:51:f2:b9:72:4a:a7:42:8f:60:25:74:bd:ab:ab:
                    81:ee:f2:74:11:da:2f:f9:78:d2:59:82:9e:67:61:
                    7d:66:17:e6:22:1e:8b:21:62:26:c9:c5:94:54:c0:
                    0c:54:2a:f4:34:dd:ec:90:c0:3c:24:81:ba:52:c3:
                    03:a9:ac:7a:e8:53:06:99:01:8b:2a:60:7a:8e:12:
                    f7:c3:8b:4f:77:2e:79:07:b6:b4:72:c4:95:68:95:
                    3d:12:d6:9a:aa:66:cd:f9:eb:39:a2:67:2a:2f:53:
                    75:fe:0a:d2:63:e3:79:61:a4:b3:aa:73:9b:2e:6a:
                    dc:11:d3:de:b8:c9:d6:0c:c2:95:8c:4f:dd:84:eb:
                    d3:52:b3:cd:51:d6:6a:93:19:fc:2d:2a:e8:a3:27:
                    4a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:5D:4A:47:07:D6:72:84:87:75:43:08:F7:B2:BA:F8:A6:89:99:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d414bd1e-af01-4ff2-92ae-ece02a34cdb9/76f20a08-edc1-360f-b8e4-c62f8ebb677d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d414bd1e-af01-4ff2-92ae-ece02a34cdb9/d414bd1e-af01-4ff2-92ae-ece02a34cdb9.crl

            X509v3 Authority Key Identifier:
                keyid:16:0E:3F:D9:3C:76:D6:B7:2E:B4:AF:CB:5F:C8:99:38:12:AC:7A:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d414bd1e-af01-4ff2-92ae-ece02a34cdb9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:a2c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:f2:f5:6e:83:bd:16:7a:f7:3e:11:29:ff:80:51:33:85:5d:
         bc:75:79:33:c1:c6:a7:64:72:04:8d:02:1e:94:b6:af:c4:b2:
         33:6d:d6:f3:68:8e:6d:0a:5e:3d:bc:5c:8b:81:a1:6a:08:7f:
         ba:10:96:15:e5:9e:91:8a:35:04:51:3a:8b:c2:86:d8:69:6b:
         ef:3b:5f:b9:13:db:de:ee:46:94:e4:23:dc:46:35:f6:b9:ac:
         ed:b8:ee:b9:6b:fc:da:f3:33:ac:eb:d2:ee:c5:aa:4b:93:4c:
         59:31:ca:8a:5c:bf:4d:ae:91:73:50:60:34:88:20:2e:6c:6c:
         84:14:f5:9d:d0:25:95:05:42:37:f4:4f:29:19:f7:82:94:4f:
         fb:b0:31:09:48:e8:44:47:e6:5a:10:1e:3c:0d:f7:e4:e4:67:
         32:1c:8d:62:2a:e5:06:37:e8:4c:86:27:dc:75:01:46:22:2d:
         ca:13:56:92:3b:98:8a:eb:e4:8e:a8:a7:15:0f:4b:83:c0:11:
         bb:49:72:88:e2:67:0f:69:f8:af:51:20:38:da:2c:68:f5:5e:
         40:ab:04:d3:e9:23:4a:8c:c7:67:27:83:cb:f7:3c:05:4f:f4:
         b0:7e:0c:54:30:4e:f8:0f:82:e3:84:bc:a1:d2:3e:90:fc:c6:
         47:0e:65:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----