Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/5c2a3d9c-06cf-3783-96af-58915b7ce628.roa
File:                     5c2a3d9c-06cf-3783-96af-58915b7ce628.roa (raw, json)
Hash identifier:          sZNf0yJbmxBGcJnZrLUt+BESIWIMtcvb+35OeH5toHQ=
Subject key identifier:   9F:EE:E1:0D:49:DE:79:39:2F:3D:B3:9B:4F:E6:87:0D:6A:F3:03:01
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F43285849350EA006ADF267950B70BA80
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/5c2a3d9c-06cf-3783-96af-58915b7ce628.roa
Signing time:             Sun 16 Mar 2025 13:00:52 +0000
ROA not before:           Sun 16 Mar 2025 13:00:52 +0000
ROA not after:            Sat 14 Jun 2025 13:00:52 +0000
asID:                     399976
IP address blocks:        2602:80c:20b6::/48 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:35:0e:a0:06:ad:f2:67:95:0b:70:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Mar 16 13:00:52 2025 GMT
            Not After : Jun 14 13:00:52 2025 GMT
        Subject: CN=218f070c-d251-49ed-bf50-0f7a61577f7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0d:45:cc:d4:15:18:3a:6d:f7:ec:d0:09:b4:
                    d2:c2:2a:19:30:c8:27:6b:3a:6c:82:40:d6:35:5e:
                    52:aa:af:bc:2d:4e:af:e6:b5:0f:99:8b:85:63:5b:
                    79:40:4c:8b:05:42:9a:7c:8d:3e:bd:ba:b1:ab:b9:
                    31:35:d2:7d:ef:87:a4:2b:e2:ee:fc:41:ab:40:7f:
                    9d:71:91:a6:9b:f5:03:66:37:b0:ae:c0:ba:a2:6b:
                    13:90:cf:96:33:24:d2:d8:5d:53:46:ec:00:ed:a5:
                    4a:1b:de:c7:bd:7d:9c:b6:64:b9:00:f6:d0:f7:56:
                    5b:68:d2:2c:2d:9f:9e:e7:1d:b6:44:cb:71:fd:92:
                    09:1d:21:b7:d3:bb:98:91:9d:18:9d:45:65:d3:34:
                    fa:9e:07:89:8d:60:bf:8b:35:4a:fc:71:d5:0e:e8:
                    58:9e:00:50:32:89:ec:e2:03:51:9a:3f:8c:1c:24:
                    2c:12:3d:a7:99:d5:1f:a2:0c:9c:e1:de:5b:b6:2d:
                    2f:f2:20:e7:89:3d:ef:55:a1:8b:3e:7a:c4:51:60:
                    2a:7d:e3:e8:e5:c1:bb:42:c3:7d:29:ac:33:43:5f:
                    f3:22:0a:64:45:93:8c:a2:5b:ae:62:c0:e5:1e:cc:
                    b9:c0:a6:17:11:57:33:57:20:86:f0:9e:47:77:e1:
                    89:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:EE:E1:0D:49:DE:79:39:2F:3D:B3:9B:4F:E6:87:0D:6A:F3:03:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/5c2a3d9c-06cf-3783-96af-58915b7ce628.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:20b6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:41:ae:c0:4a:4b:2a:c7:2d:40:cb:44:1f:67:67:fe:b4:64:
         0b:34:09:32:e1:2f:4c:98:1e:65:77:a8:3f:ae:6f:90:5f:4a:
         b8:fa:4f:02:1d:ea:d3:0d:0e:82:8d:c4:31:f4:59:fc:22:90:
         6f:6a:bb:8a:df:6f:94:4c:a7:b3:57:19:0a:a7:53:a5:cb:ee:
         fc:9f:82:3e:cb:64:8e:2e:ac:4d:aa:3b:e9:85:7c:ae:a6:bd:
         c6:1f:83:c3:6f:2b:a4:1e:25:21:90:5f:62:c8:0f:49:8c:b9:
         80:09:59:16:5d:ec:ee:15:37:bd:ec:17:d2:38:3f:4d:04:f1:
         c1:d4:b6:9d:6a:52:18:e7:56:2a:96:8e:5c:d9:d1:7e:dc:f0:
         3e:0c:96:5d:c3:d0:19:5f:19:29:1f:b6:ef:b0:24:36:d2:76:
         cf:2c:59:94:2c:ed:5a:f5:79:e4:62:69:73:4d:4a:eb:27:2f:
         8d:31:b5:96:9f:2f:36:38:71:25:87:fd:1c:79:cb:75:b6:20:
         3b:41:0b:6e:1a:09:91:55:38:4c:ff:95:70:ef:9e:46:ad:66:
         d1:bc:81:d2:db:68:f1:83:3e:69:5c:14:7c:5a:5e:f8:0b:0f:
         5e:1f:7d:3a:9e:fd:d1:96:fa:ce:b8:db:fc:c1:8e:2e:8e:40:
         e0:5c:e2:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----