Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/dc302fa6-4889-382d-aa84-e17c21a288f1.roa
File:                     dc302fa6-4889-382d-aa84-e17c21a288f1.roa (raw, json)
Hash identifier:          HwXs/EaMwCLa2MVQWIExNmjOPJCZON6+M5ytKgaHBD8=
Subject key identifier:   2D:98:FC:A0:E5:18:EB:88:76:75:D2:E7:CC:5A:71:35:DA:18:F1:1A
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F432858495ABEBE0493C4137D7AD13240
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/dc302fa6-4889-382d-aa84-e17c21a288f1.roa
Signing time:             Sun 30 Mar 2025 01:00:47 +0000
ROA not before:           Sun 30 Mar 2025 01:00:47 +0000
ROA not after:            Sat 28 Jun 2025 01:00:47 +0000
asID:                     16509
IP address blocks:        2620:147::/36 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5a:be:be:04:93:c4:13:7d:7a:d1:32:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: Mar 30 01:00:47 2025 GMT
            Not After : Jun 28 01:00:47 2025 GMT
        Subject: CN=3fafe134-ca3d-4d64-baab-b0bbc5e6a9fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c2:af:f0:d8:1d:43:8a:e0:bd:36:bc:fa:0e:
                    53:2a:d6:45:c2:ea:d4:a9:c4:16:e9:1b:09:f7:a1:
                    60:e8:d0:25:d1:75:ca:dd:65:72:b1:8c:f4:49:ae:
                    17:90:5b:90:6d:4a:de:9b:94:67:d8:c9:20:16:e4:
                    7b:a0:0b:c8:1c:d6:6c:e4:86:87:d6:e2:85:7a:a3:
                    f7:39:35:db:00:8a:ea:43:df:8d:b5:19:61:3c:23:
                    61:cf:1c:5d:99:c0:a3:15:8a:c0:6b:2a:9b:d3:91:
                    50:5d:14:5f:aa:f8:41:03:24:a8:71:32:98:f7:8e:
                    54:44:bb:0a:ed:f0:da:5c:69:76:27:6c:28:dc:0d:
                    88:b5:5a:42:09:aa:aa:6a:33:71:89:c3:4d:a3:9b:
                    42:eb:1d:74:de:b7:02:eb:f1:2d:1d:d5:10:63:04:
                    1c:7d:5d:56:2b:db:5f:a4:3e:1c:b8:9b:63:fe:47:
                    ac:01:e3:ec:e4:45:10:7a:9e:a9:da:22:82:65:16:
                    9e:73:c8:1d:e5:71:fd:ac:e7:e5:de:b0:1d:23:eb:
                    86:66:c0:f8:b5:c5:2b:06:cb:b7:a0:ca:e9:0c:c7:
                    9e:bc:10:97:33:f8:eb:b6:55:11:c3:b2:46:cd:f3:
                    d3:db:60:90:a9:d0:b5:c3:8a:4e:e2:42:41:f3:75:
                    99:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:98:FC:A0:E5:18:EB:88:76:75:D2:E7:CC:5A:71:35:DA:18:F1:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/dc302fa6-4889-382d-aa84-e17c21a288f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:147::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:22:c7:92:7d:24:ee:d2:2f:96:86:45:58:51:5b:1f:fd:d3:
         cd:f7:b0:ce:60:b7:cd:d9:7a:24:c3:9d:25:f9:57:ab:15:a0:
         5f:4d:49:b0:04:93:f4:fc:6d:6b:43:91:ec:f1:ce:9f:ea:43:
         ae:89:6b:07:0f:84:2f:d3:ac:3d:5c:bd:36:79:5e:10:80:a9:
         0d:8e:e5:39:8e:ba:56:e0:66:37:75:e5:38:c5:74:16:b3:df:
         da:69:89:55:11:5a:13:52:9b:1d:2c:e4:c9:80:2c:7e:04:0f:
         80:77:82:61:6c:db:39:2a:a6:a6:68:0c:43:d5:84:4e:72:8c:
         87:52:c5:89:73:34:02:a5:c8:99:dc:b3:ff:8a:09:23:1f:21:
         e0:79:d6:e0:fa:59:41:13:b9:fd:d8:7a:74:21:75:df:25:2f:
         1b:9b:3c:0a:fc:73:5d:d2:58:14:66:3e:48:1e:fb:0a:5d:3a:
         97:de:bf:2e:5e:e7:23:59:cd:a5:e2:9b:6f:b2:5b:cd:dc:47:
         f9:3b:fc:78:d2:01:83:a5:ea:c8:22:46:0c:28:e6:b8:67:d9:
         52:aa:47:f2:7e:eb:f0:a0:9c:7e:7d:65:e8:3d:79:db:c0:0d:
         19:cc:a7:68:91:b8:21:b8:2a:9b:eb:fe:51:32:fe:2d:da:80:
         36:13:d3:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----