Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/a600e5cf-d500-321d-9338-5549b162eadb.roa
File:                     a600e5cf-d500-321d-9338-5549b162eadb.roa (raw, json)
Hash identifier:          VdBNEchgVTnR1bw05thptXlfj1H7zOqNR0rX6D/6uAw=
Subject key identifier:   57:04:9B:1E:D8:B9:11:95:DE:0E:EC:3D:C2:C5:86:8E:E0:77:96:87
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F43285849350EA05660B343746B86B880
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/a600e5cf-d500-321d-9338-5549b162eadb.roa
Signing time:             Sun 16 Mar 2025 13:00:52 +0000
ROA not before:           Sun 16 Mar 2025 13:00:52 +0000
ROA not after:            Sat 14 Jun 2025 13:00:52 +0000
asID:                     399976
IP address blocks:        2602:80c:20ba::/48 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:35:0e:a0:56:60:b3:43:74:6b:86:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Mar 16 13:00:52 2025 GMT
            Not After : Jun 14 13:00:52 2025 GMT
        Subject: CN=dfeee2b3-f539-444b-8627-1f785e299aa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:20:c0:f0:f3:a2:9a:40:39:a9:c0:cd:ac:3d:
                    87:e6:7a:52:90:e8:1b:73:1e:fa:49:8b:dd:c9:eb:
                    33:71:b8:c9:b0:d7:1d:55:ce:c4:56:29:59:6c:2a:
                    15:6b:7a:a8:83:da:dd:12:69:a8:fb:a7:de:17:6b:
                    66:d2:3d:2e:0b:c2:56:d2:44:13:1d:8f:d8:a6:e3:
                    66:a1:cd:ec:62:d5:a6:e2:a7:86:63:73:95:9c:4c:
                    31:f2:2e:9f:b9:1b:47:32:29:74:e5:59:58:17:96:
                    ca:81:8a:6d:65:a0:ac:a4:e2:4c:a3:68:7f:fb:2c:
                    d4:7c:1d:eb:a1:59:08:71:1a:7f:48:0c:da:5d:48:
                    97:f0:75:5f:25:f6:17:f1:87:f0:c6:82:81:a3:b9:
                    d3:bf:29:93:cc:f3:2a:36:7e:71:1c:ae:47:6c:2d:
                    01:45:34:e9:2b:67:10:85:36:d0:3e:3d:0c:fe:ec:
                    9b:04:1e:86:c7:8f:52:89:2f:cb:99:d7:71:0b:07:
                    34:e4:4b:d4:b3:ec:ed:e9:35:32:7a:57:6d:93:fe:
                    de:b8:73:b9:e8:b0:5b:66:8f:e8:30:b0:18:8d:13:
                    90:1d:a8:ef:41:a7:96:91:a5:38:d6:53:d4:58:94:
                    c4:aa:b8:b4:99:ae:a9:6b:44:25:fd:8b:cd:b1:a9:
                    2b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:04:9B:1E:D8:B9:11:95:DE:0E:EC:3D:C2:C5:86:8E:E0:77:96:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/a600e5cf-d500-321d-9338-5549b162eadb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:20ba::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:35:c5:2c:80:98:83:74:96:28:e1:fd:75:57:2a:60:41:a6:
         4e:91:74:6b:3b:24:04:82:16:45:27:c8:db:b1:59:0f:a5:73:
         fe:16:47:4e:27:5b:a7:68:f1:15:b7:05:67:27:7a:a9:69:65:
         e1:62:97:ea:55:d4:7c:01:40:03:d9:a2:76:9f:7a:7a:e0:cb:
         ae:84:95:78:d5:2b:79:49:53:55:87:4a:1f:23:47:5d:d4:5f:
         7d:e2:f5:54:2d:58:90:aa:5e:43:5b:29:31:1c:5c:bb:ce:45:
         3a:b0:80:27:40:ee:e3:91:5a:72:8b:81:c3:c3:ec:97:96:f1:
         46:21:59:36:04:76:e9:6f:d9:46:63:57:25:4e:6e:8e:14:ce:
         f9:25:e4:ed:dd:d1:d8:70:0b:ba:9a:b0:0a:b4:dc:75:50:16:
         e9:f2:ab:a1:59:6c:c6:7e:58:3d:0d:b0:eb:9b:67:95:85:5e:
         df:02:87:48:5d:56:68:41:90:c4:43:ab:d2:f4:2a:2d:ca:87:
         aa:5e:c0:02:ac:b5:03:78:1c:60:1d:c9:fa:42:e7:bb:c8:9f:
         5e:15:40:24:99:d5:22:92:38:2d:19:21:d7:ed:05:2b:8f:39:
         0b:76:a6:7a:f1:5b:06:6a:1a:26:e3:f4:bc:ba:03:79:a3:54:
         70:4f:c2:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----