Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04bd1965-5757-479c-b2af-44967b5e0539/ad21d0e5-9b1e-3eab-9a5b-b8298a2e71cf.roa
File:                     ad21d0e5-9b1e-3eab-9a5b-b8298a2e71cf.roa (raw, json)
Hash identifier:          FuvEqQr6ffXfHPIJbU0iCNikP0ZkbS1hTU8EgMCwRU4=
Subject key identifier:   91:C2:6C:1C:10:40:F8:EB:2B:CF:E5:F4:48:EB:7D:B4:60:29:BC:54
Certificate issuer:       /CN=04bd1965-5757-479c-b2af-44967b5e0539
Certificate serial:       010D0C9F432858493C0924FC713C5F628CFB7DA0
Authority key identifier: B5:78:2D:55:7A:A0:51:AA:E0:15:64:BB:40:15:08:8D:34:54:FF:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04bd1965-5757-479c-b2af-44967b5e0539.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04bd1965-5757-479c-b2af-44967b5e0539/ad21d0e5-9b1e-3eab-9a5b-b8298a2e71cf.roa
Signing time:             Wed 19 Mar 2025 01:00:40 +0000
ROA not before:           Wed 19 Mar 2025 01:00:40 +0000
ROA not after:            Tue 17 Jun 2025 01:00:40 +0000
asID:                     400671
IP address blocks:        2602:fb7e::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3c:09:24:fc:71:3c:5f:62:8c:fb:7d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04bd1965-5757-479c-b2af-44967b5e0539
        Validity
            Not Before: Mar 19 01:00:40 2025 GMT
            Not After : Jun 17 01:00:40 2025 GMT
        Subject: CN=68145fac-7bd7-43c3-a96a-94f2d71882c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ed:cd:8b:f6:89:5c:41:6b:21:39:dc:0a:80:
                    82:2f:aa:34:a2:48:4c:11:f6:f4:43:0c:98:cd:87:
                    09:ca:00:2a:85:2a:02:b8:55:17:cb:44:b3:50:e1:
                    66:f6:85:4a:fb:3f:4b:27:cf:94:db:54:88:80:df:
                    0f:31:7b:9c:29:56:1a:30:da:08:44:43:31:11:a4:
                    68:a5:e6:45:99:40:d7:7a:78:00:48:28:53:8a:96:
                    19:f0:d5:16:d4:a4:0a:d8:5e:5e:fc:df:c0:bb:2c:
                    ed:f8:a0:04:9a:23:93:6f:ca:c6:21:73:9c:1d:9b:
                    57:32:db:e1:2c:b6:32:f7:70:cf:3c:53:19:eb:13:
                    e5:77:fa:6f:f5:a7:68:64:f1:6c:2d:86:3c:f4:d3:
                    ee:03:dc:6d:77:7a:44:75:ce:e7:52:03:bc:4c:bc:
                    ef:ff:b5:7c:00:f5:f8:4b:ac:df:64:8d:be:1a:1e:
                    84:be:78:74:a2:48:85:ac:ee:bb:c0:20:d6:c8:8e:
                    31:64:2b:59:21:64:da:25:aa:9b:7c:48:e8:ae:a2:
                    f2:5e:73:70:03:4c:21:bd:3f:63:22:56:9b:14:99:
                    9e:97:66:38:a7:77:28:d6:e0:d0:c7:18:15:d3:25:
                    de:af:cf:d1:f7:1a:f4:23:b9:1b:1d:46:43:a2:a0:
                    c3:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:C2:6C:1C:10:40:F8:EB:2B:CF:E5:F4:48:EB:7D:B4:60:29:BC:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04bd1965-5757-479c-b2af-44967b5e0539/ad21d0e5-9b1e-3eab-9a5b-b8298a2e71cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04bd1965-5757-479c-b2af-44967b5e0539/04bd1965-5757-479c-b2af-44967b5e0539.crl

            X509v3 Authority Key Identifier:
                keyid:B5:78:2D:55:7A:A0:51:AA:E0:15:64:BB:40:15:08:8D:34:54:FF:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04bd1965-5757-479c-b2af-44967b5e0539.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb7e::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:ce:df:35:85:82:a4:89:97:90:14:81:a8:a5:cb:aa:db:85:
         a3:76:24:41:fe:b1:25:4d:4e:d7:56:f7:17:6d:6f:66:07:8b:
         96:8b:4d:61:0e:20:53:32:fd:3d:f7:f9:50:4f:67:82:95:4f:
         39:5b:7a:24:f6:74:1c:47:bb:04:5a:f4:3f:e0:cc:fb:fe:27:
         75:9a:95:3c:9d:1a:7b:d5:cb:28:6e:7a:20:38:c7:ba:8b:1b:
         2b:a0:cf:c1:14:77:ee:3a:b3:6a:2e:72:04:f0:bb:ae:d0:6a:
         fb:9c:8b:84:97:fd:5e:17:a9:e2:64:e0:53:80:96:a0:6f:be:
         39:87:44:2d:8b:32:a7:6a:b9:a6:af:a1:0f:25:1c:09:8b:0d:
         a8:a0:4d:cf:e8:19:4e:86:2a:7e:19:d8:7e:d4:71:9b:c9:d3:
         90:e0:55:43:eb:cd:0b:10:9a:a5:57:e9:4f:dd:a1:50:64:01:
         fb:9c:39:9d:48:9a:04:3c:d7:c9:cf:c7:a4:32:55:08:87:c0:
         17:0e:94:49:02:ce:7c:03:01:04:fc:3f:6f:da:3f:08:69:97:
         0b:a0:62:8e:0b:a7:e9:2e:f7:09:2b:2d:bf:61:28:ee:ea:bf:
         3a:ac:1d:82:e0:5b:de:9f:a8:f5:22:9b:c6:ad:47:3b:7c:c3:
         f9:ea:cd:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----