Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/02e76f99-30f1-31f2-8aec-76417ad71599.roa
File:                     02e76f99-30f1-31f2-8aec-76417ad71599.roa (raw, json)
Hash identifier:          imdH3JbBEqL9vhXcL1h75mbSbe75v5ykPLVRG43w96o=
Subject key identifier:   E1:11:C6:B3:90:71:19:20:54:D4:3A:C3:58:D1:9B:4E:27:6A:E0:2B
Certificate issuer:       /CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae
Certificate serial:       010D0C9F4328584940397BC711A5DD37E1B1EEC0
Authority key identifier: 8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/02e76f99-30f1-31f2-8aec-76417ad71599.roa
Signing time:             Thu 20 Mar 2025 13:00:53 +0000
ROA not before:           Thu 20 Mar 2025 13:00:53 +0000
ROA not after:            Wed 18 Jun 2025 13:00:53 +0000
asID:                     22611
IP address blocks:        2605:f400:1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:40:39:7b:c7:11:a5:dd:37:e1:b1:ee:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae
        Validity
            Not Before: Mar 20 13:00:53 2025 GMT
            Not After : Jun 18 13:00:53 2025 GMT
        Subject: CN=975e37a3-1266-47df-8fdb-4fee72e700b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:7c:ce:2a:5d:e3:59:bb:30:d2:d0:e1:62:62:
                    79:d7:2a:cf:3a:a6:9c:7d:c4:96:32:2e:b8:4f:8a:
                    1f:5d:71:50:76:0b:3a:9e:0a:19:e7:ff:f7:0c:39:
                    fb:a4:4a:4c:f2:b1:28:aa:9c:ca:f0:76:a6:d5:6a:
                    0e:79:a1:9c:9a:36:a3:ec:ff:5a:6b:a1:87:9c:d7:
                    fb:63:c1:96:54:9c:48:c5:66:6d:bb:a3:05:d2:37:
                    78:b5:50:78:be:be:fa:73:e9:1a:ee:a5:9b:10:c0:
                    f1:80:59:71:c5:99:f9:42:09:e6:d3:66:93:d6:8c:
                    3a:68:c3:0a:b3:58:56:fd:2e:90:56:f3:83:9f:95:
                    77:3f:c4:4d:82:63:4e:7a:13:fb:ee:8a:4c:63:ec:
                    50:2e:82:6a:ac:4f:99:87:4f:83:02:8c:61:b4:95:
                    8d:9b:56:7e:4a:63:03:ef:32:76:dd:0f:d2:56:5c:
                    8c:eb:0c:50:3b:69:e4:0c:da:bf:24:3e:5f:d9:10:
                    28:6a:48:f6:26:d9:a0:c8:22:bd:56:eb:47:c0:af:
                    27:d7:c9:65:79:7a:cd:fb:a1:81:09:ba:16:c3:cc:
                    b9:95:e8:ab:70:7a:0e:86:79:8e:34:6d:2f:db:09:
                    7f:01:89:ff:8d:68:39:da:e8:d9:49:8f:17:2b:33:
                    33:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:11:C6:B3:90:71:19:20:54:D4:3A:C3:58:D1:9B:4E:27:6A:E0:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/02e76f99-30f1-31f2-8aec-76417ad71599.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.crl

            X509v3 Authority Key Identifier:
                keyid:8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:f400:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:be:36:1c:5b:41:50:2a:f2:cc:0f:95:32:93:39:fe:6e:6d:
         e4:e7:c9:67:f1:12:d3:2f:f5:b8:51:e1:e7:3a:d1:96:a3:ce:
         83:40:e9:f1:07:32:b0:9f:df:ab:8a:c6:86:80:3c:f0:a7:0d:
         ab:d0:c1:61:91:ca:c8:50:2f:12:7b:56:99:55:dd:73:d6:05:
         3d:e7:3a:51:0f:1d:60:e8:29:16:f7:09:4d:6a:8f:cb:75:e7:
         7f:a0:f4:48:09:28:d3:17:db:18:7f:f3:fb:e8:57:65:9a:31:
         ea:0c:ca:fd:be:29:77:04:8a:08:25:b6:40:07:d0:39:02:5f:
         da:59:fd:cc:63:7b:e9:36:68:c6:06:77:80:9d:a3:c4:15:c3:
         6e:5f:49:18:23:49:d4:1c:db:2a:36:b6:97:6a:6b:e6:84:c3:
         a1:59:13:2b:fb:53:bd:d3:2a:6f:4f:c5:d0:df:a0:1f:88:73:
         dd:f2:68:c5:83:e9:14:80:4d:ee:6a:1e:2d:81:dd:f2:6b:dd:
         84:0b:ca:78:b7:f3:af:18:bc:ae:36:94:46:cf:87:95:ce:df:
         bb:fc:80:4c:02:93:b6:bd:f5:22:3c:00:e4:ed:21:b3:dd:bf:
         4c:7d:85:21:e1:99:38:7a:65:4d:c1:7b:54:d1:da:0a:f6:9d:
         a4:9e:32:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----