Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/6c7472b0-6d12-33be-a9f9-85e26dc54729.roa
File:                     6c7472b0-6d12-33be-a9f9-85e26dc54729.roa (raw, json)
Hash identifier:          fu6VgqyRmMjc35nRSUr3jBQHOHUbE04yk3+Zt4YeuwQ=
Subject key identifier:   EF:CB:9B:19:73:25:AD:FF:98:23:3C:07:50:27:B3:7B:67:BC:0B:EA
Certificate issuer:       /CN=33c78d60-34eb-4fed-8e25-925b95a30c8e
Certificate serial:       010D0C9F432858495ABEE720EE9CF49365F05B40
Authority key identifier: 5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/6c7472b0-6d12-33be-a9f9-85e26dc54729.roa
Signing time:             Sun 30 Mar 2025 01:00:47 +0000
ROA not before:           Sun 30 Mar 2025 01:00:47 +0000
ROA not after:            Sat 28 Jun 2025 01:00:47 +0000
asID:                     33039
IP address blocks:        2602:f95c:ca1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5a:be:e7:20:ee:9c:f4:93:65:f0:5b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33c78d60-34eb-4fed-8e25-925b95a30c8e
        Validity
            Not Before: Mar 30 01:00:47 2025 GMT
            Not After : Jun 28 01:00:47 2025 GMT
        Subject: CN=d9221c97-18ed-466d-8e52-86e5bb471832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:32:c3:44:c4:8f:60:38:c9:9a:ba:47:72:28:
                    5e:b9:65:97:3f:eb:35:41:87:d6:bc:40:a1:96:56:
                    51:fb:c8:d4:c9:0e:20:7b:f4:0b:68:79:c6:96:c1:
                    73:0e:91:59:83:0c:e8:c7:13:66:fe:a1:44:c0:2a:
                    6b:98:2a:a3:e0:91:65:07:81:84:eb:1d:8c:a4:80:
                    2a:0f:72:30:64:a0:c7:6d:41:26:13:1a:a8:3d:29:
                    76:4a:8b:7e:4c:9e:5f:33:71:5d:ea:78:9a:be:44:
                    54:79:51:55:07:c6:53:7c:d5:74:b4:06:50:7a:2f:
                    25:8d:cf:ac:b4:d6:6c:47:a2:b9:50:d8:db:61:31:
                    e7:9c:17:33:df:3c:d4:a2:b3:d4:ed:ed:23:8c:18:
                    d3:08:3e:c6:59:fc:51:7d:02:0d:1b:21:2a:72:03:
                    38:d4:30:66:ad:57:1e:fd:ce:be:0e:9e:f1:a0:b5:
                    d7:46:16:58:50:1d:ae:ab:87:94:0d:3a:d8:54:e9:
                    7e:58:9d:aa:ce:e8:08:b6:4f:f0:e2:c3:f6:50:b1:
                    47:ed:b5:d1:71:92:dd:75:4c:36:d2:47:28:e6:27:
                    bb:df:ff:f1:f0:97:da:bd:91:f5:e1:89:9e:d0:4a:
                    55:84:f6:f0:99:0e:fe:70:a8:6d:b2:a6:66:1b:5a:
                    79:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:CB:9B:19:73:25:AD:FF:98:23:3C:07:50:27:B3:7B:67:BC:0B:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/6c7472b0-6d12-33be-a9f9-85e26dc54729.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.crl

            X509v3 Authority Key Identifier:
                keyid:5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f95c:ca1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:7c:16:7e:a1:b8:e3:8c:25:3c:39:1a:bc:7a:68:ab:79:43:
         b5:9a:06:5a:f1:51:0a:b5:84:f5:10:0e:7b:4c:67:bf:da:17:
         f4:8a:42:d8:4d:7c:88:57:59:ac:ce:15:0e:1a:fc:4f:8b:cf:
         86:96:b9:a6:84:c7:56:5f:d6:85:92:5a:2d:11:a5:29:22:02:
         7e:42:da:a6:a0:03:8e:c6:7e:53:7e:db:f8:17:30:c2:a1:68:
         68:99:f0:32:fa:ee:40:15:a3:da:62:17:76:0f:71:fa:6b:fd:
         7d:88:ca:c4:14:54:3e:dd:95:09:29:53:1e:bf:bb:12:4b:cb:
         69:06:30:ba:54:0c:42:bd:65:f8:a6:ec:6a:05:47:5b:29:39:
         6a:63:c0:ab:57:67:c5:4b:55:4b:8c:b2:41:07:de:4d:93:11:
         bf:84:30:d6:b0:6f:a6:e5:8a:84:b6:15:14:ae:19:88:3b:a1:
         8f:55:27:e3:37:f1:a5:89:f7:8d:de:3b:86:bf:48:0e:c9:21:
         ad:cb:c1:84:26:59:34:3b:7d:68:9b:70:d1:35:3d:56:e7:72:
         5e:6c:f5:c0:77:3e:b8:e9:43:3a:39:c5:4d:5e:54:72:b8:72:
         7e:f2:8c:6f:a2:ac:6f:ec:e1:b2:0d:e2:bc:f6:fe:9b:0d:e6:
         5f:a8:95:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----