Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/37dcf707-512f-338b-b75b-ef24cda4a40b.roa
File:                     37dcf707-512f-338b-b75b-ef24cda4a40b.roa (raw, json)
Hash identifier:          euu4eEgLZZeEEEzbKVUpF366j3XA+cnTAZ/CxczHNpE=
Subject key identifier:   92:4A:08:E2:F1:FA:0F:23:FC:99:A6:2D:BA:BA:9E:6D:20:1D:CD:53
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F43285849350E8E05316ADB8E0FC5F6C0
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/37dcf707-512f-338b-b75b-ef24cda4a40b.roa
Signing time:             Sun 16 Mar 2025 13:00:52 +0000
ROA not before:           Sun 16 Mar 2025 13:00:52 +0000
ROA not after:            Sat 14 Jun 2025 13:00:52 +0000
asID:                     399976
IP address blocks:        2602:80c:201c::/48 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:35:0e:8e:05:31:6a:db:8e:0f:c5:f6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Mar 16 13:00:52 2025 GMT
            Not After : Jun 14 13:00:52 2025 GMT
        Subject: CN=5ca18dbc-f5a7-4230-8644-1ae9c86a6087
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f9:73:f1:d1:f5:c3:62:e3:54:62:01:a1:00:
                    1b:2f:84:f5:fc:c5:da:b6:d8:fc:d5:7d:c3:ba:4c:
                    4d:82:6a:2b:f5:7d:92:52:56:e3:3d:8b:1a:57:18:
                    9f:e1:5f:5a:4d:13:bd:dd:0d:77:ff:1d:ae:d3:5f:
                    7d:97:78:84:c9:e1:05:ea:5b:99:8b:23:f2:5b:2c:
                    a8:49:b4:f3:82:88:26:71:f8:a8:58:b6:93:50:ea:
                    3d:76:08:64:82:5e:ce:14:08:ba:d2:78:c4:72:d9:
                    43:94:82:7d:3e:be:91:8e:6c:ca:98:cc:b1:40:f1:
                    45:2b:65:2a:a0:c2:5b:5f:60:c7:32:12:08:93:ec:
                    ee:6f:e9:40:07:17:80:83:85:3c:5f:0f:90:f6:87:
                    6e:34:30:9c:b8:0a:97:52:eb:94:c0:ff:5e:e5:49:
                    3b:5d:c2:3d:c8:0d:f5:01:19:ec:fa:5c:4b:85:ac:
                    f3:bf:ff:7e:9e:74:81:29:9d:b9:7f:1e:40:09:1c:
                    45:63:7e:96:3a:fb:2f:bc:41:4e:d5:62:c5:d1:30:
                    8b:7d:ac:ee:77:b0:9e:81:b1:1e:0f:27:20:e6:6d:
                    73:b8:21:a4:e3:b0:92:20:08:80:96:76:1e:19:a6:
                    e9:30:83:5e:0a:07:da:80:8c:33:59:5e:d6:63:8f:
                    39:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:4A:08:E2:F1:FA:0F:23:FC:99:A6:2D:BA:BA:9E:6D:20:1D:CD:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/37dcf707-512f-338b-b75b-ef24cda4a40b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:201c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:ce:17:23:13:70:b7:bf:14:b2:77:3b:88:4c:ad:2f:91:80:
         03:3e:03:36:c0:be:70:f2:b0:aa:0a:63:dc:c4:96:ee:f7:9e:
         82:fe:d9:5d:eb:24:df:73:15:96:8f:d1:97:cd:16:d2:eb:22:
         13:00:ec:fd:d8:67:6b:14:15:49:92:1f:3c:53:93:41:2d:c2:
         a9:23:8e:98:a1:85:35:5d:ba:c1:58:45:b0:c5:0b:79:a2:8c:
         d9:6e:a9:e5:fe:4a:8b:6b:70:3b:b1:89:8d:71:83:be:30:15:
         25:45:8b:97:bf:77:41:d5:be:a4:07:20:53:61:3a:5a:88:55:
         e2:29:2b:2b:84:ed:5a:d8:36:7c:bd:c6:f0:f2:6d:fd:09:15:
         b5:40:86:0d:e1:61:c3:ce:1f:48:9f:07:87:7b:9f:2d:73:ec:
         fa:8c:c3:05:b3:2e:68:50:d7:37:57:65:3a:ab:22:ea:2e:9d:
         6f:eb:55:4d:27:3d:72:15:b5:94:ca:b4:74:87:e8:0f:09:e2:
         6c:0f:ee:9f:3c:eb:56:de:b8:12:66:49:ea:49:f8:6c:82:62:
         33:f6:a1:21:48:81:ee:37:6e:05:1a:51:6e:a6:f1:83:ea:b6:
         1b:ed:d3:47:55:a5:f0:42:5c:51:97:bd:68:9c:79:42:c2:d8:
         df:69:16:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----