Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998/1d544e03-98be-3164-847d-617afd6f9700.roa
File:                     1d544e03-98be-3164-847d-617afd6f9700.roa (raw, json)
Hash identifier:          CbzZJMbWMAF6DP8uXou0A1P6D5K9CDciBcjN7+OBdVY=
Subject key identifier:   5E:5B:91:2A:DE:D3:74:39:3F:8A:55:86:AE:FC:E5:54:BF:02:C6:71
Certificate issuer:       /CN=c0ae1cff-309c-40d1-9760-3a89a481e998
Certificate serial:       010D0C9F432858493C092F5B1E8BE6CF3B5A0E40
Authority key identifier: 3D:5C:C9:D2:DF:E0:F1:12:4E:09:59:BF:BE:75:A7:C9:39:BB:13:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998/1d544e03-98be-3164-847d-617afd6f9700.roa
Signing time:             Wed 19 Mar 2025 01:00:40 +0000
ROA not before:           Wed 19 Mar 2025 01:00:40 +0000
ROA not after:            Tue 17 Jun 2025 01:00:40 +0000
asID:                     14907
IP address blocks:        2620:0:860::/46 maxlen: 46

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3c:09:2f:5b:1e:8b:e6:cf:3b:5a:0e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0ae1cff-309c-40d1-9760-3a89a481e998
        Validity
            Not Before: Mar 19 01:00:40 2025 GMT
            Not After : Jun 17 01:00:40 2025 GMT
        Subject: CN=ece78182-6586-4819-aa27-389e81820fa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e0:ef:56:06:7b:17:b3:08:75:da:67:d9:85:
                    7a:0b:2e:7c:ad:e9:69:97:cd:6e:a8:e3:4b:7e:91:
                    6d:a2:ad:bc:b8:7a:fa:52:e9:21:01:c7:43:c5:ba:
                    dd:10:e4:c0:8d:3b:14:21:9c:48:b1:11:ab:69:88:
                    f1:9b:67:48:f7:79:45:e3:81:60:3f:c2:ed:4b:23:
                    f4:2a:d6:f7:37:2c:75:a9:f0:e0:21:2f:54:3f:88:
                    ca:22:8e:ca:01:87:e0:6a:80:a9:9b:79:d5:a3:b2:
                    7e:30:d1:77:e7:5e:8f:b9:74:24:2d:68:11:02:b8:
                    07:41:6f:94:18:00:94:22:87:7e:dd:1c:49:14:1e:
                    5b:21:f3:2b:91:aa:7a:0c:ed:1f:76:9f:a1:15:3d:
                    c4:ba:a9:11:61:75:44:02:82:52:b7:34:0e:b6:f4:
                    7b:34:4a:27:24:66:cf:1a:4b:52:ca:c1:fe:43:6b:
                    82:d3:4f:cd:11:99:b8:27:0d:ea:81:7e:f8:d7:80:
                    44:98:e7:e9:04:c2:c0:d7:0e:c2:c0:ff:9d:41:6d:
                    3a:fb:52:40:96:17:98:eb:df:b6:50:e5:8a:5b:35:
                    7d:5a:4e:24:4e:32:ad:4e:aa:a0:a1:5b:c9:b7:fa:
                    ca:d5:16:68:6c:9b:d5:03:25:bd:b2:20:c8:14:44:
                    c1:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:5B:91:2A:DE:D3:74:39:3F:8A:55:86:AE:FC:E5:54:BF:02:C6:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998/1d544e03-98be-3164-847d-617afd6f9700.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998/c0ae1cff-309c-40d1-9760-3a89a481e998.crl

            X509v3 Authority Key Identifier:
                keyid:3D:5C:C9:D2:DF:E0:F1:12:4E:09:59:BF:BE:75:A7:C9:39:BB:13:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:860::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:74:68:1a:bd:2b:63:19:33:f1:5e:1b:91:8f:61:66:e5:f4:
         62:95:51:81:ae:9e:72:60:1b:41:6b:39:17:31:01:cd:8b:d5:
         58:3f:86:71:d1:c0:74:64:05:16:00:25:73:6d:9e:d9:e0:d8:
         23:40:01:42:25:3c:0a:ab:2e:b3:23:50:22:9b:f9:8f:39:b4:
         b3:65:62:1e:7d:07:e6:f1:2d:de:98:f1:75:f2:25:2d:74:2c:
         01:86:3a:c0:76:7a:2d:20:b5:77:d0:55:0c:37:d4:71:c2:fe:
         c0:69:f8:05:54:86:6f:5a:cb:df:c0:82:b7:6e:d4:7e:4b:63:
         97:11:ff:59:9c:f6:e0:e1:ee:f0:3e:45:e2:28:6f:9a:de:19:
         ef:ed:90:03:70:3a:cf:24:fc:dc:4d:38:61:3d:92:e5:c0:74:
         84:2b:81:ac:c1:92:2a:0f:77:c4:db:91:98:9a:f9:7f:dd:e3:
         5c:36:9c:53:e1:97:c8:08:ea:18:59:c6:0e:d7:70:6f:7e:1c:
         4d:7a:97:b3:90:45:02:cf:c4:1c:83:78:e1:96:21:a9:92:95:
         1e:7e:ae:1c:41:6d:b3:f8:36:47:c0:3c:a7:c3:c6:41:48:4b:
         12:e9:bb:2e:aa:04:68:5b:5b:bb:c6:62:48:dd:df:c4:b8:47:
         b6:c1:4a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----