Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/54f297bb-b027-3a01-98a8-4c43dd8ebfcf.roa
File:                     54f297bb-b027-3a01-98a8-4c43dd8ebfcf.roa (raw, json)
Hash identifier:          fuPzQORzOA/ID/9+Ea5H+36V1MjbYh5YWOdBOdDzm4c=
Subject key identifier:   07:CA:D5:CD:33:1A:17:ED:27:EB:3E:56:3D:CD:A0:6E:E0:F2:F1:61
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F43285849350E8E2B1F4EA4D5CB56E440
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/54f297bb-b027-3a01-98a8-4c43dd8ebfcf.roa
Signing time:             Sun 16 Mar 2025 13:00:52 +0000
ROA not before:           Sun 16 Mar 2025 13:00:52 +0000
ROA not after:            Sat 14 Jun 2025 13:00:52 +0000
asID:                     399976
IP address blocks:        2602:80c:201e::/48 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:35:0e:8e:2b:1f:4e:a4:d5:cb:56:e4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Mar 16 13:00:52 2025 GMT
            Not After : Jun 14 13:00:52 2025 GMT
        Subject: CN=db214696-0415-41f7-bc53-3948ef031efe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d9:1a:43:42:c3:cf:3e:40:c2:84:fd:e1:26:
                    60:be:35:88:a3:b1:21:dd:63:f2:9a:c4:93:90:5f:
                    fc:60:3e:d5:7c:d1:70:37:bb:a6:de:3a:17:d5:89:
                    e7:a6:53:a0:42:60:fe:04:a8:92:af:ac:d3:03:47:
                    95:9c:7f:10:ac:b0:71:a9:98:77:f4:11:55:10:6b:
                    0a:55:ca:f8:89:3f:4a:54:d7:2b:63:bb:08:49:ad:
                    f3:29:3a:cc:bc:df:b5:f5:1b:8e:97:c7:f5:30:f5:
                    4c:2c:93:b6:12:54:9c:84:34:8d:c7:85:fc:15:3c:
                    ca:65:8e:be:7c:d5:b6:4e:7c:1b:bd:c8:80:18:1c:
                    6a:21:9b:6f:24:da:e4:c0:64:b9:9c:ea:f5:ee:a9:
                    a2:00:3a:1a:21:49:ee:3c:e2:94:40:7e:86:a9:45:
                    6b:29:61:38:79:40:db:18:26:9e:50:d6:4b:64:b5:
                    9d:67:9a:c7:92:4a:42:0c:48:55:07:1e:1e:c9:6b:
                    dc:c6:aa:12:08:ef:61:2d:69:ec:56:4d:d1:b9:d3:
                    8c:e6:45:88:71:32:3b:e2:a3:2d:5a:a8:05:9e:dd:
                    f6:3a:17:53:2e:87:6f:da:f2:83:77:c0:eb:72:fe:
                    84:d6:dc:cc:1c:b2:31:25:6e:5c:20:60:a8:c3:6a:
                    f0:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:CA:D5:CD:33:1A:17:ED:27:EB:3E:56:3D:CD:A0:6E:E0:F2:F1:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/54f297bb-b027-3a01-98a8-4c43dd8ebfcf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:201e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:13:76:c0:0c:39:f4:96:5b:79:b5:e6:fe:c8:f0:e1:68:49:
         08:f9:1f:5a:8c:90:a7:de:13:6b:83:c7:f1:85:7b:d7:6a:d2:
         84:b6:37:d8:24:27:e1:01:02:b6:6a:88:72:3a:7e:17:56:c8:
         8f:75:ea:5a:a5:3a:21:f6:24:a7:68:51:4b:c9:b2:3a:31:83:
         33:58:91:8c:6b:37:93:ac:9c:93:43:34:ad:a0:f5:13:87:33:
         c3:ee:6a:39:24:38:1b:97:74:5b:df:7f:fc:55:43:68:00:86:
         1a:89:a4:31:d1:41:9e:66:8e:7b:7d:f1:4a:0d:e0:8f:ab:c8:
         61:d0:d7:c3:20:a4:85:d3:45:59:91:07:7b:4f:dd:a8:8e:b6:
         c0:56:3e:f3:ea:cc:da:57:34:06:21:6e:85:73:dd:30:33:e6:
         08:a3:d5:25:8a:33:8e:00:4a:b9:d2:7a:03:2e:f3:b0:c3:24:
         0c:d9:3b:42:44:d1:66:7c:d3:06:2b:64:80:3b:77:b4:c6:83:
         c2:56:57:86:87:1b:8c:09:4f:ba:a6:3e:76:66:1a:4e:21:7f:
         2e:65:8d:23:59:dd:5c:fe:be:0a:15:e9:e8:29:c1:82:c3:02:
         af:9c:da:85:f6:d9:05:b2:b9:7a:4c:3e:49:8f:5d:08:92:27:
         03:f5:25:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----