Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/cf25bea6-83ad-3141-b82d-cbfe1f249207.roa
File:                     cf25bea6-83ad-3141-b82d-cbfe1f249207.roa (raw, json)
Hash identifier:          OCDG74MHcyjuOGOLfRCv+LmUZjpegtJyaCz/PHGLQfY=
Subject key identifier:   8B:49:42:8C:83:11:07:44:82:63:3F:6B:DE:68:31:80:24:61:B0:59
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F43285849350E90633F3B1AF5599ACE00
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/cf25bea6-83ad-3141-b82d-cbfe1f249207.roa
Signing time:             Sun 16 Mar 2025 13:00:52 +0000
ROA not before:           Sun 16 Mar 2025 13:00:52 +0000
ROA not after:            Sat 14 Jun 2025 13:00:52 +0000
asID:                     399976
IP address blocks:        2602:80c:203d::/48 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:35:0e:90:63:3f:3b:1a:f5:59:9a:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Mar 16 13:00:52 2025 GMT
            Not After : Jun 14 13:00:52 2025 GMT
        Subject: CN=c81694ed-9e0d-429d-9a2c-f49299831f52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b9:60:d2:b3:e0:47:d0:f4:0b:eb:06:da:bf:
                    4d:7b:06:f4:64:62:e2:e7:a5:51:7a:f1:84:c5:bc:
                    ed:84:20:a2:b2:3e:c3:c3:84:36:1e:5c:2f:5b:46:
                    20:7f:cf:a3:f6:fa:a9:2f:21:4e:63:8a:70:0c:70:
                    de:c5:44:29:7b:1b:3c:f5:be:d6:ae:c2:da:21:3a:
                    a9:89:de:97:4f:d4:28:cf:e7:cf:de:c3:54:87:df:
                    7b:7c:9c:6c:30:da:f3:8a:35:cd:7b:99:f6:55:e1:
                    eb:03:ba:59:c4:9c:bb:60:6e:4c:04:49:ac:34:8a:
                    ef:15:17:79:fa:3b:bf:48:3a:07:64:e2:1e:0a:1a:
                    de:95:77:47:d2:ce:00:38:9d:09:56:11:13:2c:f7:
                    c7:42:e8:99:fd:92:cd:07:95:be:f9:3b:1d:97:f7:
                    c1:b6:9a:cc:d1:32:3d:4f:d3:58:6b:93:a6:8a:9e:
                    2e:b7:fd:43:f8:46:95:83:b3:7d:d2:c8:d1:3f:21:
                    f9:3d:9e:2b:d7:f4:68:b9:4e:f3:a4:e6:85:ed:7a:
                    72:be:8a:dc:32:a5:72:c2:0f:3f:fc:e0:49:1b:2c:
                    c8:aa:4b:e4:aa:dc:84:79:b9:8c:89:d9:31:9c:c3:
                    3d:89:b5:1d:03:4d:a7:ea:cc:41:54:e7:73:97:68:
                    4e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:49:42:8C:83:11:07:44:82:63:3F:6B:DE:68:31:80:24:61:B0:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/cf25bea6-83ad-3141-b82d-cbfe1f249207.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:203d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:de:4c:45:5e:68:9c:70:2b:1d:db:e5:41:7f:0f:c9:97:bf:
         35:df:f9:8f:b1:23:c7:ff:93:d2:31:01:97:d0:39:59:b8:3d:
         89:8f:2c:90:d4:cd:d5:a9:fb:c7:04:16:0f:4d:10:7c:43:46:
         8e:e5:5d:e6:1c:04:b8:22:d8:ea:ad:cd:fd:0c:c2:e0:22:10:
         b2:7a:43:bb:5a:c3:52:cb:3b:1c:98:99:d5:9d:ba:3e:e5:2d:
         07:1f:92:dd:0d:e1:4a:77:bc:0b:11:58:53:73:36:f8:86:b7:
         01:33:3f:84:46:1c:fd:38:68:b3:b0:8d:35:a2:58:48:4b:df:
         a8:53:d7:e9:7a:73:10:de:64:63:77:6d:98:0f:77:21:a0:04:
         0f:1d:41:b3:53:54:e2:cf:09:d4:39:ae:ea:55:8c:b7:73:41:
         69:01:40:8d:e1:41:df:49:00:78:7a:cd:b5:ad:e8:fb:01:71:
         e2:a3:da:2b:a3:ce:69:e3:e9:0c:b9:fc:27:7f:6d:94:43:59:
         94:f3:00:4e:9e:db:33:71:7f:70:ed:76:09:86:ca:96:34:f6:
         20:d2:05:c9:23:71:1e:c7:77:50:4a:aa:c2:08:5c:ae:1a:3a:
         36:4a:7a:33:da:61:3b:a7:1f:51:b5:67:12:af:d7:e5:3f:09:
         75:43:95:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----