Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/af56c26b-429b-351b-b947-c8b53bdd868c.roa
File:                     af56c26b-429b-351b-b947-c8b53bdd868c.roa (raw, json)
Hash identifier:          cnf7jvzqbQzrmwDxMHAn+xOVYuuirqcWTQjznae8huQ=
Subject key identifier:   7E:AE:78:E2:05:07:23:9F:56:33:DF:FD:83:B3:9A:D2:FF:76:82:EE
Certificate issuer:       /CN=33c78d60-34eb-4fed-8e25-925b95a30c8e
Certificate serial:       010D0C9F432858495ABEE345C783AB03700F5F80
Authority key identifier: 5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/af56c26b-429b-351b-b947-c8b53bdd868c.roa
Signing time:             Sun 30 Mar 2025 01:00:47 +0000
ROA not before:           Sun 30 Mar 2025 01:00:47 +0000
ROA not after:            Sat 28 Jun 2025 01:00:47 +0000
asID:                     33039
IP address blocks:        2602:f95c:ca2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5a:be:e3:45:c7:83:ab:03:70:0f:5f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33c78d60-34eb-4fed-8e25-925b95a30c8e
        Validity
            Not Before: Mar 30 01:00:47 2025 GMT
            Not After : Jun 28 01:00:47 2025 GMT
        Subject: CN=0f65b154-f5cb-457b-ae0d-045f48f68a62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:a4:26:4c:f9:b1:03:7e:b7:76:e4:2f:58:e8:
                    a9:34:c0:f9:0e:1f:00:98:bf:c8:fc:5a:8d:cd:7d:
                    14:51:07:c3:fe:2f:f8:93:d8:f1:23:52:c7:fc:10:
                    2f:41:bd:99:66:26:a1:97:66:14:df:47:3b:21:a6:
                    5c:14:02:c3:b7:1c:6d:6c:d4:09:db:14:e1:1f:ee:
                    28:44:6c:10:a9:dd:a5:f4:b1:df:d4:ac:c2:00:bb:
                    b1:f6:63:9c:b7:f3:bc:7a:d4:8b:c8:57:3a:c6:02:
                    e7:77:98:74:01:9c:74:86:26:3e:42:25:d3:55:49:
                    02:ba:df:af:ea:54:4d:c7:a7:d1:43:71:04:7a:c6:
                    9a:b0:13:d3:b5:50:02:52:f5:96:65:ca:5c:17:e5:
                    1f:ef:e4:9f:10:e6:6c:3b:0a:86:5e:86:3b:b7:54:
                    1c:ac:1f:36:bb:22:28:88:e1:97:5a:52:a5:9a:1a:
                    42:31:2f:fa:81:a4:85:fe:e9:f0:db:96:8b:89:1a:
                    90:07:cb:d7:66:cc:fe:05:2b:b5:b4:9d:92:3f:f4:
                    49:18:fe:55:99:ba:0a:7a:90:0c:9a:6c:c8:9f:10:
                    60:ae:9f:a4:b5:fb:8e:30:40:af:93:fb:b2:10:dd:
                    29:99:4f:1b:c0:50:cb:e3:1c:90:34:63:8f:b8:bf:
                    b6:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:AE:78:E2:05:07:23:9F:56:33:DF:FD:83:B3:9A:D2:FF:76:82:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/af56c26b-429b-351b-b947-c8b53bdd868c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.crl

            X509v3 Authority Key Identifier:
                keyid:5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f95c:ca2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:df:b4:fe:7e:a8:b3:50:70:26:99:ac:d7:9b:01:70:ac:0d:
         ab:34:73:15:e3:ef:1a:da:7f:13:7c:92:53:98:4f:78:b8:71:
         66:41:6a:d9:f7:3e:3b:b3:56:74:98:90:c6:73:44:86:2d:ec:
         97:97:ff:6a:95:26:48:d0:67:76:c3:8c:29:ec:a4:de:32:1c:
         05:bd:bb:7c:cf:83:b3:e0:7e:24:20:ac:ce:7e:49:23:d3:33:
         b8:b1:b1:b8:05:96:27:2f:40:52:77:98:58:3a:94:fd:f3:5d:
         f3:35:8d:3f:c5:3b:f8:57:48:0c:d9:47:4c:81:7f:33:23:30:
         90:30:3e:bd:ee:d6:b5:f6:9a:f5:4e:d7:0a:93:ff:f1:9a:ed:
         b0:ba:5d:e2:61:52:37:01:ae:41:42:08:99:33:f0:82:91:47:
         45:6b:19:a2:dd:69:04:85:b1:a9:af:6b:fd:5a:a7:b6:fe:e1:
         67:db:cd:ad:80:b5:b8:ab:51:d6:00:c7:91:da:65:c1:09:53:
         3b:0c:97:60:53:a6:a3:0a:f7:c1:9f:11:5d:44:b6:1b:88:30:
         8f:56:77:98:19:21:24:23:27:47:d9:31:22:d7:c3:15:f8:a7:
         21:97:52:92:d6:d5:8b:4f:2c:4d:0c:70:fd:d8:7a:21:b2:09:
         77:bd:a4:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----