Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/7713b4bd-1cce-3b2f-8751-04b76dd3704a.roa
File:                     7713b4bd-1cce-3b2f-8751-04b76dd3704a.roa (raw, json)
Hash identifier:          DPItYgMYcAQNYmBtlL1B0bW5ebzRcM/QiCZQAtT+Vko=
Subject key identifier:   08:8F:CC:EA:3E:77:C9:EA:B5:38:84:2F:EB:59:C3:7C:41:49:AD:79
Certificate issuer:       /CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35
Certificate serial:       010D0C9F4328584953C40AE501EFC0A478991F80
Authority key identifier: 0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/7713b4bd-1cce-3b2f-8751-04b76dd3704a.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     32298
IP address blocks:        2606:d640:ef00::/40 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:0a:e5:01:ef:c0:a4:78:99:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=c77a8a62-71ba-472d-9f25-089bfa299dfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fc:82:03:dd:ca:71:b8:92:84:35:4c:2a:f3:
                    2e:f3:88:b3:1f:06:a9:00:3f:fc:cd:c4:30:cd:c2:
                    61:c8:8c:85:b5:3a:2e:ba:e6:fb:58:ca:b5:c5:68:
                    67:99:3b:40:7d:fe:e8:0c:38:fe:33:39:e5:fa:87:
                    ec:ae:49:fa:ec:d9:72:3b:47:dc:bd:19:fb:6f:60:
                    b5:3e:55:6f:7f:89:0e:21:78:83:66:fc:3e:9d:31:
                    3f:a0:31:39:6b:4e:e9:ee:7b:2a:4c:94:7c:75:f8:
                    99:55:02:c2:ce:b8:60:bc:19:cf:f7:21:bf:ba:4e:
                    17:66:9e:56:b4:22:95:68:8a:c7:03:32:21:88:5c:
                    1c:d6:16:68:66:74:91:f1:b1:60:93:cc:f0:2f:eb:
                    85:d6:92:de:2d:6b:e7:e9:6d:3e:6e:2c:b6:6e:fa:
                    e0:42:53:0b:ee:bd:ae:84:ba:1c:3c:ec:73:10:cb:
                    fb:04:af:f2:0b:8d:01:64:f2:70:92:78:63:fb:2e:
                    c1:39:d1:a9:e8:0a:0c:9a:de:ed:e6:74:46:7a:08:
                    67:e2:3e:4e:a2:56:88:51:d7:32:e8:82:f8:23:9a:
                    6a:ff:a9:0e:6a:9e:77:e0:61:b9:8a:0f:6f:ad:64:
                    2b:fd:73:3b:ea:a0:80:24:7c:78:44:5d:82:64:d3:
                    96:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:8F:CC:EA:3E:77:C9:EA:B5:38:84:2F:EB:59:C3:7C:41:49:AD:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/7713b4bd-1cce-3b2f-8751-04b76dd3704a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.crl

            X509v3 Authority Key Identifier:
                keyid:0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:d640:ef00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:81:19:7d:d9:ae:e5:28:e0:48:c1:1a:ad:4b:0e:1f:8f:91:
         a2:d2:fc:7b:04:05:84:3f:f7:3a:46:e8:ea:c5:e0:ce:27:a5:
         b9:05:38:f6:6d:25:1d:24:d7:12:e4:1f:e3:13:7c:b0:2b:83:
         a6:b0:33:dc:1e:a2:63:67:e6:79:ca:20:24:6a:49:70:17:47:
         5e:52:7d:b4:1a:51:9d:70:0d:40:8e:e5:9e:98:9f:cd:6d:ab:
         a5:89:b7:f7:9b:c9:f8:f9:d9:94:d8:61:7b:07:9c:30:56:8a:
         cd:a7:78:d1:a3:4b:c4:c0:9d:a9:cf:8f:4e:9c:98:df:92:6d:
         ca:fa:8e:89:d0:2d:aa:98:4a:e0:44:9a:f3:1d:d5:95:57:a5:
         ff:48:e0:e7:42:f8:ef:e4:43:e2:f2:76:85:e0:31:36:09:28:
         c2:79:e1:71:a9:6d:d2:f7:81:11:e3:f0:6c:48:a2:41:38:a6:
         70:8c:ae:ca:68:a0:68:2b:43:6c:ee:21:16:87:24:77:1c:c2:
         ec:73:04:69:a2:12:bf:5b:aa:f3:d7:f8:a2:3f:92:fe:b0:df:
         31:56:9d:15:1c:72:54:b3:27:f9:b1:47:d2:66:5f:96:23:ec:
         a0:cc:29:c3:13:b0:3c:83:06:d6:70:c8:ac:60:63:8f:0a:95:
         94:c3:13:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----