Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cfc0aa13-2df9-3952-848a-2c1df7879358.roa
File:                     cfc0aa13-2df9-3952-848a-2c1df7879358.roa (raw, json)
Hash identifier:          JDl8EuDTEgwiXma50xZKwIlJzz8Ir5p7/J5UifyAXOM=
Subject key identifier:   7F:38:E4:F2:AC:87:F5:9B:C1:0B:88:3B:24:AE:C7:6D:1E:5F:AA:7F
Certificate issuer:       /CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d
Certificate serial:       010D0C9F4328584869606931DF8043A12BAE4200
Authority key identifier: D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cfc0aa13-2df9-3952-848a-2c1df7879358.roa
Signing time:             Thu 02 Jan 2025 14:00:52 +0000
ROA not before:           Thu 02 Jan 2025 14:00:52 +0000
ROA not after:            Wed 02 Apr 2025 13:00:52 +0000
asID:                     393885
IP address blocks:        2604:4a00:f000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:69:60:69:31:df:80:43:a1:2b:ae:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d
        Validity
            Not Before: Jan  2 14:00:52 2025 GMT
            Not After : Apr  2 13:00:52 2025 GMT
        Subject: CN=aa774eba-d5cc-4cb7-ab1a-e0df024ea059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7a:94:0e:9c:68:46:aa:d1:06:77:8c:c5:a5:
                    fd:34:ae:76:bb:8e:dd:0d:57:a8:77:26:93:42:23:
                    46:c9:f0:66:0b:59:bf:21:b2:d6:f0:5c:08:f1:e2:
                    69:64:e8:bd:1e:fb:b8:ae:0b:a6:f2:e3:f8:5a:7d:
                    0a:86:b2:00:46:87:19:98:ea:fc:f0:02:5f:23:84:
                    ec:1b:de:fa:2d:92:ab:5c:2a:04:01:5e:28:1f:f6:
                    8c:f2:d4:29:23:94:0b:28:4a:cf:de:3e:fc:79:f5:
                    f1:57:fc:7b:8e:25:96:02:16:c6:3c:9a:89:83:eb:
                    c5:6e:73:15:87:85:da:f3:7f:e5:05:2e:7f:c4:34:
                    4c:44:d5:05:18:48:cf:18:6f:d7:0a:54:1b:0f:13:
                    5f:75:c2:e5:eb:cd:17:f9:9a:c5:9c:73:e6:70:4d:
                    58:35:56:a3:43:1f:cc:67:11:c0:a9:cb:61:78:0f:
                    73:73:86:9a:ba:f5:2e:6a:d3:82:f0:3b:e9:34:22:
                    cd:05:c1:01:e2:b9:af:c6:c6:c4:5d:7b:04:e5:2a:
                    88:f4:19:bf:c5:b2:ba:89:f8:26:6a:92:42:80:da:
                    6d:5c:f1:53:22:16:d6:07:c1:87:49:27:e4:7c:61:
                    fc:79:ac:07:cc:b5:c0:4a:1a:bd:8a:7c:98:b6:26:
                    6d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:38:E4:F2:AC:87:F5:9B:C1:0B:88:3B:24:AE:C7:6D:1E:5F:AA:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cfc0aa13-2df9-3952-848a-2c1df7879358.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl

            X509v3 Authority Key Identifier:
                keyid:D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:4a00:f000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:ac:e2:52:13:8b:54:dc:08:fa:55:36:d0:a4:17:f2:e7:8d:
         19:b5:0e:00:12:78:30:c1:db:dc:41:c3:e4:e1:a0:c4:b4:d0:
         c5:9c:f2:1c:cc:09:9b:84:49:89:cd:b6:4d:e3:fe:4d:ed:96:
         1e:26:37:b2:d2:ce:52:dc:66:f7:c3:7d:71:30:0c:c8:13:97:
         78:c9:63:e2:d9:9d:af:38:42:86:7c:e6:5a:7a:0e:3e:5d:0d:
         dd:78:3e:7d:33:0e:57:e6:ce:62:68:85:ed:0c:dd:12:e5:ed:
         06:70:e6:6c:bb:d1:42:dc:9c:76:5b:af:c7:03:e5:6b:56:72:
         a0:16:26:7b:ce:49:87:2d:2b:cb:1d:7f:c2:ca:38:49:57:02:
         89:9a:06:88:87:11:4d:45:87:13:de:f6:a2:f5:21:9d:50:1d:
         f4:1e:82:9c:21:71:28:11:8c:64:f1:38:0b:1b:ba:f4:10:83:
         c5:f0:83:69:9e:40:26:74:f9:93:88:c6:c9:e6:20:53:e0:cd:
         24:80:59:49:07:e9:2f:26:23:63:43:7a:92:8e:48:60:03:9d:
         3a:eb:b5:a5:bd:d7:c5:9d:14:93:13:22:6a:9f:c6:9b:a4:02:
         d4:2f:c2:cc:f6:cc:ed:55:5f:32:70:c8:39:c1:5b:97:e4:66:
         7c:0e:09:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----