Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/33fa9c97-6fb4-3e9f-afa6-240f7c808e89.roa
File:                     33fa9c97-6fb4-3e9f-afa6-240f7c808e89.roa (raw, json)
Hash identifier:          HQIaiQALYDWQ8Cmm8uvaBW5Z0LThIofoPr6YGJEXDJ8=
Subject key identifier:   6E:C6:F2:EC:4A:C8:58:E5:7A:CC:40:D5:B0:0A:61:BF:0D:FB:02:67
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F43285849350E9ECA9F9DF9141408B500
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/33fa9c97-6fb4-3e9f-afa6-240f7c808e89.roa
Signing time:             Sun 16 Mar 2025 13:00:52 +0000
ROA not before:           Sun 16 Mar 2025 13:00:52 +0000
ROA not after:            Sat 14 Jun 2025 13:00:52 +0000
asID:                     399976
IP address blocks:        2602:80c:2059::/48 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:35:0e:9e:ca:9f:9d:f9:14:14:08:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Mar 16 13:00:52 2025 GMT
            Not After : Jun 14 13:00:52 2025 GMT
        Subject: CN=8c156f4b-14d0-409c-9378-e54fe2991002
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:19:89:c9:06:66:9d:2c:95:8f:20:38:d8:53:
                    f8:36:65:d3:9e:b4:95:7b:88:cb:50:77:ce:07:40:
                    30:c0:f1:d4:37:99:e9:95:6e:ed:47:69:9e:0a:cb:
                    d8:b5:aa:de:ef:bc:53:66:55:14:e6:67:44:81:a4:
                    04:13:d7:e2:f6:2c:9b:f7:30:62:ec:88:c8:18:dd:
                    57:84:cb:7c:48:5b:89:8b:9d:95:54:47:87:1b:19:
                    6b:93:7e:50:cb:24:47:a0:a1:0e:fc:d2:09:8f:59:
                    1d:c5:5d:b2:0c:c7:fd:6a:2b:7e:4a:32:b6:6e:c9:
                    35:df:87:8c:21:88:42:6c:23:af:59:61:de:33:b2:
                    78:7c:ea:d7:d2:e8:85:5c:2a:27:e6:d3:52:29:34:
                    21:2e:7a:c1:32:d1:49:c3:45:ca:c7:11:31:7e:8e:
                    87:15:14:49:f2:92:d1:a5:3b:bd:2f:3d:34:47:68:
                    b5:e1:14:da:c5:e0:c6:9e:29:9c:72:a3:80:3b:89:
                    0c:80:4d:97:ff:7a:21:c8:6f:56:0c:ba:34:7a:07:
                    1a:09:ba:40:50:5f:ec:8b:0d:7d:ba:0b:f1:fd:b4:
                    7f:a3:81:72:26:2d:88:ea:4e:b5:1e:ab:bd:e9:80:
                    71:25:c4:e3:1d:2a:05:0d:52:f2:9d:9a:22:ae:08:
                    85:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:C6:F2:EC:4A:C8:58:E5:7A:CC:40:D5:B0:0A:61:BF:0D:FB:02:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/33fa9c97-6fb4-3e9f-afa6-240f7c808e89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:2059::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:f6:c3:0c:54:02:e0:06:fc:f2:90:60:ff:c7:da:cb:00:c5:
         a4:be:73:57:7c:97:f4:a9:9d:3e:65:e1:8b:7b:d1:f6:67:ea:
         cf:33:c5:18:65:a8:1d:cd:11:e7:da:d9:91:02:14:01:e0:89:
         8a:32:dd:b8:ec:cf:15:78:53:06:fd:87:89:48:47:6b:fa:d1:
         0e:a2:56:b3:45:ea:44:f8:47:b8:42:a5:6a:2e:8c:c2:f5:3c:
         2c:97:cd:d1:0c:9c:67:74:da:8d:c5:dc:8f:0c:74:6a:6b:ce:
         47:7b:62:57:c4:58:57:7a:be:a7:f5:ba:b7:3b:30:1e:92:89:
         38:5e:e6:da:c4:ea:ce:c7:02:5c:7c:27:2f:a4:e2:01:af:68:
         51:7e:df:c2:00:2c:a6:e9:ce:48:f4:c1:a4:61:ba:a5:10:60:
         07:87:5f:13:6c:c5:07:11:6b:7d:1f:db:09:96:41:0d:a2:6d:
         30:5d:5a:a8:54:02:7d:36:9f:af:01:c6:ee:fb:9b:f7:4b:60:
         c5:d0:c0:2e:d9:bf:32:d7:36:31:07:e6:4f:88:e3:78:39:5f:
         15:72:c0:98:9f:13:2f:b5:e5:5c:46:9d:05:54:6c:5d:ab:9a:
         0c:1d:33:bd:df:7a:df:0b:93:0b:1e:93:a4:3e:0a:a0:08:b9:
         eb:eb:1e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----