Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/e7e1aada-4a3d-3369-9ca4-c3796a808ef3.roa
File:                     e7e1aada-4a3d-3369-9ca4-c3796a808ef3.roa (raw, json)
Hash identifier:          OjgtjRXyqZCgMh6eNhoqVzD3rmGzQPE/b7yYV8OD+Yo=
Subject key identifier:   90:C9:73:F2:AC:F3:24:D5:C2:06:F5:89:E6:F5:85:3F:B4:ED:67:6E
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F43285849350E9072FC763FF088EA6A80
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/e7e1aada-4a3d-3369-9ca4-c3796a808ef3.roa
Signing time:             Sun 16 Mar 2025 13:00:52 +0000
ROA not before:           Sun 16 Mar 2025 13:00:52 +0000
ROA not after:            Sat 14 Jun 2025 13:00:52 +0000
asID:                     399976
IP address blocks:        2602:80c:203e::/48 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:35:0e:90:72:fc:76:3f:f0:88:ea:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Mar 16 13:00:52 2025 GMT
            Not After : Jun 14 13:00:52 2025 GMT
        Subject: CN=940bc06b-70c3-4906-ab29-6e1e1d807e9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c9:7d:ff:b7:3a:41:63:3a:a2:73:48:23:6a:
                    c8:e7:0d:73:99:f9:d1:e5:a8:11:f8:2a:69:af:45:
                    e1:c6:34:1c:f5:d5:be:80:81:09:65:f9:76:ef:58:
                    28:57:7b:33:e2:8c:25:01:fd:4b:b3:97:c5:bf:8a:
                    5b:04:0f:74:45:5d:07:36:72:60:89:1c:67:44:28:
                    75:1a:27:de:22:56:cc:e9:cd:f6:a1:2c:1f:b5:25:
                    5e:ec:20:c2:20:10:16:dc:93:46:01:29:03:3e:9d:
                    a4:54:18:1e:ae:1a:6d:ce:28:38:07:2c:f6:51:39:
                    f9:5c:a6:0c:95:2c:d0:24:1d:48:08:37:09:16:f1:
                    7a:20:61:50:b8:09:59:4b:de:84:54:7f:ba:7c:ec:
                    94:a0:f9:c9:bc:f3:c1:c6:9d:32:af:a3:db:9f:40:
                    b6:f3:93:66:c1:4e:46:0d:34:e1:57:b8:9f:56:b1:
                    61:f8:8e:e1:e3:e1:76:2d:54:91:b4:fb:7d:c2:00:
                    ce:e4:80:e9:e5:1a:12:5c:c3:5d:28:6a:9b:a7:3d:
                    29:3e:e8:71:11:d2:d9:38:1c:be:5c:c3:9e:44:0e:
                    fe:09:eb:b4:06:7f:2d:8e:76:c6:4b:0a:65:2c:3f:
                    e4:5b:ba:fd:e4:a2:55:c3:92:11:01:a5:83:e3:7f:
                    1c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:C9:73:F2:AC:F3:24:D5:C2:06:F5:89:E6:F5:85:3F:B4:ED:67:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/e7e1aada-4a3d-3369-9ca4-c3796a808ef3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:203e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:53:ec:4a:b2:6c:f4:97:93:9f:94:87:c0:4a:58:62:ed:58:
         c5:a1:af:ee:48:36:2b:a1:28:d6:cf:90:43:b3:3e:6f:c2:44:
         ab:da:30:dd:52:36:ab:45:8c:5e:51:98:48:10:dd:4e:6f:cd:
         d0:5e:93:6c:54:61:73:35:6b:13:84:f5:3a:14:66:97:5a:ab:
         c0:29:f4:04:83:6f:f3:c7:01:1a:6f:0e:82:e8:91:26:27:05:
         ce:cc:d9:ef:c5:bd:fd:4d:7c:87:50:8d:c5:ed:e7:6f:ce:89:
         58:9a:d2:df:d7:24:39:08:8e:1e:26:e1:a7:3d:1c:65:31:ac:
         db:7c:53:ce:a5:12:a9:87:1a:50:9a:3c:d0:c2:14:d0:48:5c:
         df:f3:1a:63:b6:ca:65:88:1e:f9:d1:e0:e6:d4:3d:63:b8:b7:
         d8:cf:34:52:c1:11:54:47:71:da:7f:39:31:01:d4:a4:99:5a:
         46:d9:09:c2:5d:c3:07:9f:9d:96:7e:02:48:60:11:59:95:6e:
         f5:1c:f2:68:20:9d:8c:39:b5:c8:2f:79:47:c3:e2:f0:28:b0:
         d7:b6:24:a7:9c:9d:91:3f:36:71:84:55:68:78:85:3f:79:3e:
         2a:4c:77:67:3b:85:b6:e5:ca:70:ac:4c:9c:f8:52:9f:7e:a4:
         2f:37:7c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----