Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/a4288eed-4f4e-30fd-b1d7-a516b085f2b0.roa
File:                     a4288eed-4f4e-30fd-b1d7-a516b085f2b0.roa (raw, json)
Hash identifier:          eoUYe1+95LrIksxuztwry2Euukgzk5uUMUqEOtQd4nA=
Subject key identifier:   C3:D8:F9:1B:CA:30:3E:98:D7:A0:58:F5:0C:6D:7F:13:D4:50:2B:65
Certificate issuer:       /CN=0f9ce8be-7bbe-418b-b78e-42de894133a5
Certificate serial:       010D0C9F432858494733EE3835496C3444A25280
Authority key identifier: CA:8B:BF:41:3F:38:3E:71:B6:B5:15:C5:D1:9B:67:D6:D4:60:B2:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/a4288eed-4f4e-30fd-b1d7-a516b085f2b0.roa
Signing time:             Sun 23 Mar 2025 01:00:39 +0000
ROA not before:           Sun 23 Mar 2025 01:00:39 +0000
ROA not after:            Sat 21 Jun 2025 01:00:39 +0000
asID:                     394056
IP address blocks:        2607:3640::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:47:33:ee:38:35:49:6c:34:44:a2:52:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f9ce8be-7bbe-418b-b78e-42de894133a5
        Validity
            Not Before: Mar 23 01:00:39 2025 GMT
            Not After : Jun 21 01:00:39 2025 GMT
        Subject: CN=1032725f-ea09-4459-989b-9e1010856700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:18:5b:e6:b6:94:82:15:28:07:89:7c:45:2f:
                    4f:ef:53:18:1d:ad:2a:18:5f:c2:d8:b4:31:b1:4d:
                    6c:3f:e2:6d:c1:8f:0d:4b:80:d8:26:ae:02:c0:4c:
                    7d:df:ad:18:05:7b:dd:bf:55:af:fe:0f:6c:c3:41:
                    99:19:fe:53:57:92:4f:0f:b4:e8:a8:76:d9:46:3c:
                    5b:86:e1:87:76:10:26:2d:35:ae:f7:f1:12:ae:55:
                    52:ae:3a:e0:11:9c:06:ad:c4:2e:89:d8:a0:1b:bf:
                    6f:66:b5:96:59:81:28:1c:58:7d:7e:21:9f:d2:35:
                    ba:13:e4:81:06:5e:13:20:ca:39:f0:54:b8:c5:26:
                    dd:78:ba:05:a5:35:56:4f:5d:b0:27:d6:f1:8e:67:
                    77:22:69:73:4f:e8:f6:0a:d1:4f:91:de:ec:52:66:
                    49:51:00:fe:92:0e:50:07:e5:45:a2:4a:2a:b9:18:
                    92:7a:c4:5f:c9:39:84:64:3d:ef:fc:f3:40:bb:69:
                    11:80:c4:2e:db:ca:c3:74:e8:48:bf:cd:31:f1:0a:
                    fb:93:32:32:4b:52:e2:7e:2e:30:eb:2c:1e:1e:cf:
                    94:d7:bc:7c:15:e0:5f:7c:b3:f1:cb:94:a4:70:18:
                    9b:3b:76:ed:18:4a:fc:8f:82:b1:76:09:d0:3f:93:
                    c2:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:D8:F9:1B:CA:30:3E:98:D7:A0:58:F5:0C:6D:7F:13:D4:50:2B:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/a4288eed-4f4e-30fd-b1d7-a516b085f2b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/0f9ce8be-7bbe-418b-b78e-42de894133a5.crl

            X509v3 Authority Key Identifier:
                keyid:CA:8B:BF:41:3F:38:3E:71:B6:B5:15:C5:D1:9B:67:D6:D4:60:B2:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:3640::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:66:17:46:f0:6e:f4:cf:a6:d4:d7:e3:ad:50:79:96:13:88:
         be:07:24:7f:1f:1e:35:97:1c:7f:dd:f3:33:d3:41:92:e5:f8:
         90:9f:21:31:b5:05:d2:ff:d0:70:f4:c0:44:29:f3:8c:36:ac:
         da:c4:10:66:ce:b7:6b:6b:63:db:8f:21:4c:0b:68:f8:02:35:
         ba:5a:2a:53:09:ac:96:ba:9b:f2:ea:ac:75:76:30:3f:28:fb:
         52:49:66:d3:d2:5b:9b:fb:b6:4d:53:0f:31:fd:05:3c:a9:05:
         c8:d6:a5:fd:3d:f0:f9:26:a4:0f:fb:9d:97:bf:42:e9:b6:47:
         de:28:0c:eb:b9:f0:e9:6e:ee:8d:a9:45:80:c5:54:fd:2b:b6:
         f5:52:55:a3:10:bc:66:6e:4c:ab:41:20:cc:27:3b:fd:55:fb:
         a0:75:cb:db:e5:ba:f8:3c:bd:8f:2b:d4:af:38:11:3c:85:ea:
         0a:93:6d:c1:84:54:06:7b:a8:f5:21:b9:2d:2f:fc:fe:c0:01:
         d1:bf:99:f6:d8:fe:cc:bd:c0:ef:5c:23:0f:c1:f0:fe:61:2f:
         cb:de:d3:47:ee:28:98:40:2a:7a:e1:52:5a:3b:d0:ea:8d:2b:
         a0:2d:dc:8c:a0:ae:75:a1:cf:e6:8d:39:8d:86:51:69:1a:91:
         d0:0f:27:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----