Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e/cbddcb23-1260-3ea5-b911-314c46eb7551.roa
File:                     cbddcb23-1260-3ea5-b911-314c46eb7551.roa (raw, json)
Hash identifier:          i/qW6QLHZnWQ4TOuT/2wTYJYjsdj/UkbCxaK1X/Vs9Q=
Subject key identifier:   9E:99:BF:DE:7B:66:C4:FC:18:E0:DD:90:DD:2A:60:3E:00:33:5F:3F
Certificate issuer:       /CN=adce5ac3-c559-48fc-8577-223c6ed88a3e
Certificate serial:       010D0C9F432858489340AA2AC704ED568140A898
Authority key identifier: 9A:19:DA:B0:79:60:5F:82:89:22:D1:C1:18:A1:EA:FB:D2:7F:66:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e/cbddcb23-1260-3ea5-b911-314c46eb7551.roa
Signing time:             Fri 17 Jan 2025 14:00:53 +0000
ROA not before:           Fri 17 Jan 2025 14:00:53 +0000
ROA not after:            Thu 17 Apr 2025 13:00:53 +0000
asID:                     21527
IP address blocks:        2607:f038::/32 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:93:40:aa:2a:c7:04:ed:56:81:40:a8:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adce5ac3-c559-48fc-8577-223c6ed88a3e
        Validity
            Not Before: Jan 17 14:00:53 2025 GMT
            Not After : Apr 17 13:00:53 2025 GMT
        Subject: CN=5d793769-1ada-466c-b91d-90f5a3aad4b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:c8:d0:ab:b5:fb:57:a1:53:bd:0f:d7:35:e7:
                    a2:e1:c3:bb:3f:54:cd:30:4b:59:09:71:06:1e:fe:
                    13:7a:f7:b2:df:b9:b6:00:5b:1e:f8:c6:52:83:74:
                    0e:bb:2d:28:70:a7:c9:c0:31:92:b0:c9:e5:bb:b8:
                    f9:df:8f:22:7a:e8:31:ff:cf:82:2f:a6:0b:96:d6:
                    a7:2a:83:de:ae:39:54:9f:4e:60:90:be:31:47:f0:
                    f0:b2:1d:f0:e0:cf:c7:0a:9c:0b:e3:cc:30:1c:66:
                    1c:8e:0e:1a:56:df:85:1c:2d:e5:c0:7e:f8:ed:26:
                    39:52:49:e4:9b:7d:f6:4f:6e:a7:da:82:1b:cc:a7:
                    70:06:fd:14:ae:14:ad:57:b9:14:2e:69:2e:b9:ff:
                    e3:29:2c:f2:d4:dc:ef:bb:65:92:a7:b5:63:1e:b7:
                    d9:ce:a9:24:9e:eb:8e:56:1d:bb:f1:16:11:c2:6a:
                    82:3d:41:5a:f7:82:a3:cc:02:34:b6:08:ee:8b:d5:
                    5a:fa:f3:5b:78:fd:cd:09:6d:1c:7c:10:71:f6:72:
                    a0:32:69:1d:17:36:60:ef:33:89:c2:37:e0:18:64:
                    e7:5c:8a:4b:bd:73:fc:db:12:22:00:18:53:24:76:
                    66:e7:7a:2d:02:a1:03:18:d2:c2:51:32:4d:3e:42:
                    39:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:99:BF:DE:7B:66:C4:FC:18:E0:DD:90:DD:2A:60:3E:00:33:5F:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e/cbddcb23-1260-3ea5-b911-314c46eb7551.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e/adce5ac3-c559-48fc-8577-223c6ed88a3e.crl

            X509v3 Authority Key Identifier:
                keyid:9A:19:DA:B0:79:60:5F:82:89:22:D1:C1:18:A1:EA:FB:D2:7F:66:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f038::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:e8:b5:74:94:2c:ca:bc:30:c9:67:00:79:d7:bb:7f:4d:33:
         d3:85:e9:62:cd:98:e1:22:74:cc:f6:10:b6:1b:fc:8e:b3:24:
         a5:35:69:df:cb:fd:29:4c:45:e5:41:ad:7e:07:7c:57:ab:92:
         df:5c:32:6e:23:23:88:c9:20:80:01:99:2d:c7:31:b3:6c:a2:
         c0:26:ff:5d:fa:bc:f9:28:83:f9:84:5e:96:4d:d9:ea:91:09:
         82:b4:9e:bb:64:fc:50:42:58:18:f3:12:ba:f6:1a:5e:b4:0e:
         2f:b1:ef:d3:9e:ed:2f:36:85:39:eb:34:b5:7a:57:1f:3a:eb:
         e3:46:7d:53:5c:8e:e5:91:4d:5b:3c:d2:bc:5b:ad:e9:bc:91:
         77:e3:7f:37:8c:55:67:cf:51:45:94:e8:9c:bb:d9:22:af:51:
         64:98:2d:78:18:09:f0:55:a5:a4:96:f7:86:7c:bf:0f:3c:89:
         64:18:46:5c:58:b4:d9:82:4e:c4:0d:1a:aa:22:aa:37:81:f3:
         af:62:09:1e:bd:57:6e:71:3f:83:d7:a1:52:16:6a:bc:a1:c3:
         c2:ca:dc:5d:10:90:a8:2a:5d:8f:59:19:21:11:0e:05:3c:4b:
         23:46:f2:d0:e3:71:bb:fb:b1:10:9e:20:2d:a3:b8:2f:e8:dd:
         a9:a3:b4:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----