Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/dbba7ca1-e240-340f-a279-d7e188661046.roa
File:                     dbba7ca1-e240-340f-a279-d7e188661046.roa (raw, json)
Hash identifier:          u7AeSEZC/zfyyfpDhRpE6HcuMYyBheggCcw/BwkIwUQ=
Subject key identifier:   8B:40:96:A3:CF:59:00:B1:8F:26:27:62:C8:2D:5E:BD:DF:D9:E0:41
Certificate issuer:       /CN=d9f29a16-e7b1-40c8-87bc-34e2c5624862
Certificate serial:       010D0C9F4328584930DE75E837329EC474C879C0
Authority key identifier: DB:FA:83:FE:6D:96:CD:CC:6C:DE:3A:15:B4:20:98:9D:63:D7:B6:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/dbba7ca1-e240-340f-a279-d7e188661046.roa
Signing time:             Sat 15 Mar 2025 01:00:39 +0000
ROA not before:           Sat 15 Mar 2025 01:00:39 +0000
ROA not after:            Fri 13 Jun 2025 01:00:39 +0000
asID:                     396982
IP address blocks:        2606:3dc0:8c0::/42 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:30:de:75:e8:37:32:9e:c4:74:c8:79:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f29a16-e7b1-40c8-87bc-34e2c5624862
        Validity
            Not Before: Mar 15 01:00:39 2025 GMT
            Not After : Jun 13 01:00:39 2025 GMT
        Subject: CN=cc531831-9b09-46e0-aedd-009740a37946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a7:8b:7d:a0:f1:17:81:b2:20:ad:10:8a:8e:
                    b0:8e:72:61:cd:89:ea:d1:eb:9e:41:12:93:1b:e9:
                    be:7b:ae:d7:dc:0f:41:eb:1e:49:a4:de:06:f6:77:
                    25:00:90:f4:85:14:d2:02:ea:47:9e:92:32:63:ba:
                    e3:5b:43:61:7d:42:ae:26:57:86:f4:35:6c:06:c4:
                    ea:c6:49:42:45:22:25:e9:1a:db:71:de:f2:5b:87:
                    29:44:79:ae:98:ba:19:3c:56:db:8d:22:f5:03:b9:
                    c4:51:81:01:0c:12:e6:15:f6:56:37:f7:80:08:e0:
                    f0:c0:c9:df:c6:a3:b7:f4:35:cb:88:75:70:fe:e5:
                    5b:a6:aa:dc:9f:ca:5f:f3:b8:cb:57:44:a0:a5:dd:
                    f6:9c:01:8f:11:15:33:64:03:b0:ad:f3:ed:86:b6:
                    3c:2d:af:11:e8:ed:b5:59:82:ae:e4:5d:ef:af:22:
                    93:ce:d2:85:26:28:55:d5:d4:09:87:63:48:ea:6b:
                    68:a0:fc:68:a1:03:c6:18:75:83:4f:46:c8:fa:cb:
                    af:d7:a4:a0:4e:24:52:ef:7a:48:cc:03:9c:f9:7e:
                    b6:95:a0:c5:ae:89:35:d8:96:a3:69:e1:9a:a0:bf:
                    6e:eb:fe:ba:95:70:c5:dc:df:c4:b3:b0:ef:e5:ff:
                    82:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:40:96:A3:CF:59:00:B1:8F:26:27:62:C8:2D:5E:BD:DF:D9:E0:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/dbba7ca1-e240-340f-a279-d7e188661046.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.crl

            X509v3 Authority Key Identifier:
                keyid:DB:FA:83:FE:6D:96:CD:CC:6C:DE:3A:15:B4:20:98:9D:63:D7:B6:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3dc0:8c0::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:6e:88:c7:f1:31:73:a5:8b:43:38:be:3a:08:28:12:37:03:
         4b:39:64:8e:97:09:a3:a8:da:29:42:30:82:21:84:d1:5f:12:
         ac:38:50:ab:9e:08:34:83:bf:7d:dc:95:df:25:04:40:72:08:
         56:65:07:08:c1:59:70:01:4d:e3:a2:97:f4:b3:1e:d7:92:65:
         81:21:7c:9a:8f:03:45:00:60:ac:f3:3e:e7:15:8a:a4:37:fe:
         1a:7d:ad:e7:06:44:a0:1f:5f:cc:be:e4:e3:42:e1:9e:70:e9:
         88:5f:a5:40:0a:6d:92:a5:c2:ad:d3:dd:d6:04:1d:eb:96:0a:
         b3:3f:81:00:a3:2c:ac:32:b3:01:cf:25:6d:bc:4b:ac:f1:2a:
         2a:48:fb:e9:bd:70:c5:cc:f5:d9:d9:4b:49:ef:5b:af:ec:ff:
         b7:8a:79:f0:89:38:b6:dd:97:55:6c:0a:2f:6e:48:08:26:cd:
         9a:a2:10:60:2b:e0:7f:a3:e6:ef:f4:41:2d:e5:57:ad:5b:5e:
         5c:22:40:0e:5a:62:65:92:48:62:dc:58:a5:e7:cd:76:cc:bb:
         81:c3:18:48:82:f7:48:59:da:86:c4:67:64:2f:ea:ea:8f:ce:
         3c:bb:ff:59:6e:4a:00:fa:ee:a1:06:97:fc:5d:7d:09:8c:c5:
         b6:bb:c7:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----