Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/fc4237ad-746e-3425-90f5-ce09e0944f94.roa
File:                     fc4237ad-746e-3425-90f5-ce09e0944f94.roa (raw, json)
Hash identifier:          LkLSLtLKSOhV8coULPwGSwh8e8bqFMo3lr0/dGOGPik=
Subject key identifier:   50:4B:B3:FC:77:7C:DE:25:31:07:27:E1:F8:55:14:93:81:58:E8:EA
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F43285849350E937DFD46127780EA7480
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/fc4237ad-746e-3425-90f5-ce09e0944f94.roa
Signing time:             Sun 16 Mar 2025 13:00:52 +0000
ROA not before:           Sun 16 Mar 2025 13:00:52 +0000
ROA not after:            Sat 14 Jun 2025 13:00:52 +0000
asID:                     399976
IP address blocks:        2602:80c:20cf::/48 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:35:0e:93:7d:fd:46:12:77:80:ea:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Mar 16 13:00:52 2025 GMT
            Not After : Jun 14 13:00:52 2025 GMT
        Subject: CN=797cb5df-1d59-4c87-992a-cd302ddbecfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:87:90:7b:8b:1a:70:54:3b:aa:b0:3b:e1:4f:
                    36:94:eb:ce:15:dd:71:dc:75:55:8a:16:39:40:75:
                    e3:06:2b:c7:a4:f5:dc:01:d5:ce:f6:ad:01:0e:58:
                    b3:e2:19:03:66:c1:bb:3f:71:01:a1:d6:41:1a:83:
                    0a:aa:aa:2e:e3:05:a8:af:66:3b:d1:87:36:fd:81:
                    36:64:0b:f5:62:b5:ff:61:b4:eb:ef:70:ca:10:26:
                    37:6a:13:88:bf:b7:b3:92:6c:01:ef:18:17:92:c0:
                    09:2c:00:f0:2e:2f:4d:02:84:04:40:80:68:a4:d5:
                    55:92:2e:d8:17:34:73:63:60:a9:3b:65:91:c5:67:
                    af:3b:8a:50:5b:f1:8b:41:a9:1a:b2:97:e6:4f:4c:
                    8e:7d:90:99:53:2d:e9:2d:2e:81:a4:88:2b:85:b8:
                    ab:5b:68:a2:28:b1:98:ec:6d:09:76:35:e0:71:e3:
                    0c:b0:c7:ff:53:f7:9b:86:f8:52:57:29:17:6c:50:
                    51:c2:6e:7a:52:19:2c:57:cc:5d:9f:bd:9a:58:05:
                    16:07:e6:43:ac:bc:e2:22:21:ab:c5:d3:91:c5:54:
                    b0:53:e0:f7:c9:fe:f9:be:4e:80:12:98:e5:15:39:
                    b7:40:32:a1:ba:6a:22:69:45:69:62:87:cc:02:24:
                    0c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:4B:B3:FC:77:7C:DE:25:31:07:27:E1:F8:55:14:93:81:58:E8:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/fc4237ad-746e-3425-90f5-ce09e0944f94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:20cf::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:e0:ab:8d:de:1c:b1:3d:d5:7a:3d:3b:0e:3e:69:ae:2d:34:
         e7:b3:05:0f:2e:50:bd:84:1d:21:06:38:9b:c7:ab:ff:9f:38:
         fd:40:b2:b7:6b:b9:12:a8:33:07:16:4d:af:83:8e:d5:74:6c:
         70:4a:9e:5c:2e:fb:02:3c:51:5a:03:8c:59:b9:8c:46:0d:c3:
         e3:2b:b7:7a:78:d3:69:f2:54:15:89:f1:16:c0:6c:df:9f:4f:
         37:58:69:74:fb:a9:ea:2b:48:a2:d4:86:c3:c8:db:a8:53:19:
         2b:f2:29:d6:c5:e9:0a:e4:6f:b7:3f:ee:07:cc:0e:7f:d2:01:
         75:cb:ce:9c:70:c0:56:7f:8c:f8:0f:d0:19:ba:cc:dc:51:20:
         0e:8f:1b:2c:52:45:75:07:3c:6e:d4:67:f7:37:50:ca:20:18:
         3f:c2:63:44:a5:85:69:84:3d:75:77:be:58:bd:2b:e5:a2:58:
         03:97:43:7e:aa:3e:79:a4:32:06:5e:22:75:cb:ab:1f:13:4f:
         2f:ec:83:72:1f:6b:74:a5:d4:8a:d3:f9:3a:1c:11:bc:16:aa:
         55:83:5a:e3:28:85:42:24:38:da:bc:8d:fc:3a:89:38:82:a5:
         90:18:8a:08:5c:18:10:91:cf:eb:25:3b:63:45:86:eb:56:16:
         3d:47:c1:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----