Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/59c00231-e4af-30da-b384-671e6dac5c14.roa
File:                     59c00231-e4af-30da-b384-671e6dac5c14.roa (raw, json)
Hash identifier:          mC9m79JNU4G9QVWS/dbH24GOsC/X9D/34R4vAbrSNj4=
Subject key identifier:   EF:C0:74:6C:FA:D6:92:80:5C:86:2A:F9:4F:47:65:35:CC:5D:CE:5F
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F43285849350E900AE8E87121AB91DE00
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/59c00231-e4af-30da-b384-671e6dac5c14.roa
Signing time:             Sun 16 Mar 2025 13:00:52 +0000
ROA not before:           Sun 16 Mar 2025 13:00:52 +0000
ROA not after:            Sat 14 Jun 2025 13:00:52 +0000
asID:                     399976
IP address blocks:        2602:80c:2037::/48 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:35:0e:90:0a:e8:e8:71:21:ab:91:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Mar 16 13:00:52 2025 GMT
            Not After : Jun 14 13:00:52 2025 GMT
        Subject: CN=c4ee96c7-4f83-494a-b971-0d0e738e8f04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:55:03:8a:a8:49:39:d7:b6:48:cd:1f:be:44:
                    70:33:a0:dd:73:77:f2:55:98:3e:f1:f0:36:52:2f:
                    2e:85:6d:e4:2a:0b:16:a1:e3:50:ba:d5:2e:ae:e4:
                    be:7b:ca:8a:55:0a:1d:66:6c:b5:97:45:8e:fb:cb:
                    d3:e5:29:3e:16:2a:ed:11:ba:00:6f:ac:98:4f:6d:
                    d5:7a:20:64:2d:8e:88:db:e2:6b:80:a7:31:13:fe:
                    d4:10:3b:83:1e:42:83:cf:de:db:ea:d4:c4:d4:2a:
                    6b:ee:cc:89:13:bf:3a:00:06:ad:dc:ab:79:ef:99:
                    ce:02:eb:d2:a4:b5:51:ed:c7:e0:54:c6:0f:11:8b:
                    e3:c6:ec:3f:80:a6:4a:5d:50:c1:16:8f:a6:43:49:
                    83:dc:38:19:3f:9b:d7:7d:60:1c:38:7c:19:35:45:
                    30:06:4a:fd:ed:dd:ad:b5:0c:c3:fa:c2:eb:35:03:
                    31:54:b1:d5:e3:4f:31:9a:1a:84:07:68:c3:65:83:
                    05:43:32:44:52:f9:da:14:df:28:22:bb:31:b3:1f:
                    d4:16:98:9c:10:94:7d:08:15:65:02:91:f6:67:2f:
                    34:fa:7d:3c:b7:f0:b0:f4:55:44:b0:7a:03:74:49:
                    1d:44:81:ce:6d:a5:05:c2:10:25:c6:b5:e0:42:a0:
                    7c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:C0:74:6C:FA:D6:92:80:5C:86:2A:F9:4F:47:65:35:CC:5D:CE:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/59c00231-e4af-30da-b384-671e6dac5c14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:2037::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:cc:d3:3d:97:94:e8:a0:3d:4e:79:52:a6:01:01:20:e5:10:
         89:6a:c6:bc:d8:18:b2:d4:8e:3c:4c:e7:22:a0:38:76:6b:bd:
         d1:b8:78:3a:4e:44:c4:12:e8:a8:2c:c3:aa:6e:44:23:5f:01:
         c4:a4:04:a4:ac:8a:15:83:bb:7b:ac:01:01:28:75:9a:62:fb:
         ba:bb:1f:86:6a:e6:77:6d:d7:f2:e6:8c:51:c8:79:5c:ce:ee:
         14:fb:1c:81:51:51:c1:d9:9a:31:34:dc:50:04:f9:be:6e:58:
         78:1b:78:8b:80:59:85:e9:68:92:ab:fb:ce:4b:b9:5a:11:ea:
         7b:e3:1b:2f:6e:24:cd:e8:b1:7d:ff:5a:67:4e:04:64:01:16:
         5f:86:e1:cd:53:da:46:f8:61:f8:ad:3c:41:8b:13:48:91:41:
         3a:37:71:60:b3:58:20:24:e1:38:ae:74:01:0f:e7:0d:c6:46:
         57:2a:71:57:fe:d5:d8:64:d9:74:8f:f3:e1:d5:7c:5a:d1:7d:
         12:db:01:25:12:1d:47:2c:4c:f8:81:94:ff:22:39:1e:d9:7b:
         4c:76:b6:e8:e4:6b:21:42:7e:5e:47:6c:9f:82:39:06:a3:e7:
         61:5a:6a:20:5e:98:fe:17:e5:b5:f0:aa:89:54:ca:96:d2:a0:
         87:69:1d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----