Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/5945a542-1e4f-3ead-b44e-fcbf17e0a112.roa
File:                     5945a542-1e4f-3ead-b44e-fcbf17e0a112.roa (raw, json)
Hash identifier:          VF1vdCYXGPNH/0UHSgj5I/KCMcBVdesw9zk1ZFy5jHE=
Subject key identifier:   39:3D:14:AA:EC:CE:D7:5B:60:F4:60:65:59:7A:7B:5A:84:AE:CE:3A
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F43285848F22C60CCD265361965F4B900
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/5945a542-1e4f-3ead-b44e-fcbf17e0a112.roa
Signing time:             Thu 20 Feb 2025 14:00:52 +0000
ROA not before:           Thu 20 Feb 2025 14:00:52 +0000
ROA not after:            Wed 21 May 2025 13:00:52 +0000
asID:                     396955
IP address blocks:        2001:468:2600::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f2:2c:60:cc:d2:65:36:19:65:f4:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Feb 20 14:00:52 2025 GMT
            Not After : May 21 13:00:52 2025 GMT
        Subject: CN=03303032-8189-4ad6-abf6-d848b79a7154
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:26:fd:58:fb:fc:79:42:12:dc:41:7d:9d:04:
                    6f:4b:33:c0:33:17:c1:92:18:76:cb:76:dd:48:13:
                    2b:ab:4d:23:9c:a3:67:9d:41:f0:df:fb:74:11:87:
                    16:0a:cd:de:84:23:0e:ee:d4:ac:75:b8:2b:13:b4:
                    4b:0d:76:6d:b7:18:9e:f4:ff:6e:a8:72:40:ab:f6:
                    30:85:bc:d6:8c:ae:53:e2:37:b1:41:ba:37:d2:cc:
                    e1:a2:b1:97:58:57:87:74:1d:28:ab:da:74:4d:2a:
                    0d:ad:0a:28:77:5f:6a:5e:1a:9c:fb:a1:a4:3e:d0:
                    d7:3d:01:fe:2f:21:65:c0:8c:cf:54:06:94:6f:4f:
                    25:7c:8c:aa:af:89:b0:96:79:47:1b:a5:a3:d9:28:
                    c3:16:7a:d7:2c:31:ab:e9:87:70:05:ab:5b:d1:f1:
                    2c:b9:4a:65:9e:ce:f9:df:a3:37:32:61:ad:b2:3e:
                    fe:eb:dc:ec:74:ea:cf:0e:36:28:65:68:6f:c6:f7:
                    33:de:42:fd:96:7d:88:e4:8e:d1:d8:d7:39:9d:92:
                    2d:c8:e2:bb:0e:ec:8a:f3:3c:d6:1f:0a:51:2f:2a:
                    ff:86:da:aa:b8:1c:ac:5f:32:94:0a:cc:37:b2:84:
                    8f:50:e1:2b:09:04:f9:fb:75:5a:df:bf:a1:09:69:
                    9d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:3D:14:AA:EC:CE:D7:5B:60:F4:60:65:59:7A:7B:5A:84:AE:CE:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/5945a542-1e4f-3ead-b44e-fcbf17e0a112.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:468:2600::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:f2:0a:b3:fe:a5:19:9f:c8:c9:16:b0:29:b1:2d:37:b9:08:
         b4:d2:33:8f:6a:99:db:a3:78:a4:46:93:d9:52:df:2e:bf:07:
         98:c9:81:c2:f7:65:17:2c:98:78:37:4a:56:34:74:7c:62:80:
         c6:4d:16:ef:d4:d6:fc:0c:84:fc:29:fc:9f:ce:5d:d4:54:f3:
         ce:77:52:57:dd:ca:0d:bd:7e:cd:aa:02:11:04:3b:a8:b0:f8:
         3c:78:94:e5:e8:e6:f9:8b:e9:69:c6:db:80:54:f4:60:ad:ed:
         a3:52:04:25:07:7f:41:41:9f:3b:de:45:bc:db:22:ce:ab:61:
         6c:87:fe:4f:ae:b3:a9:04:62:6c:04:29:2d:13:cc:47:6d:b2:
         a4:91:0d:04:76:04:9f:b7:0e:a2:59:af:87:13:25:68:f0:8d:
         7f:73:23:88:df:d7:c6:d6:21:84:cf:67:9a:e6:9d:13:6f:6d:
         4d:33:22:17:e8:bb:4a:9e:6b:70:17:37:7f:da:68:cf:b0:5c:
         32:fa:6b:5b:a0:03:1a:18:e9:89:10:c0:e7:cd:ad:df:89:dc:
         87:2a:84:bd:80:05:ab:01:72:c7:ac:53:c3:e0:3a:91:b8:35:
         b7:64:85:72:8c:13:a1:ba:6c:b2:d3:42:7c:97:87:25:12:1f:
         de:25:9c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----