Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/c47e0337-491b-3e57-a6f9-0040b1fabe11.roa
File:                     c47e0337-491b-3e57-a6f9-0040b1fabe11.roa (raw, json)
Hash identifier:          f/p1Eiokq3OPsmP7oFC7Su2dJ/E2Uxn/kp/d9rFPDE4=
Subject key identifier:   B1:BC:47:2F:D6:2F:78:0D:D1:5E:0A:E5:28:74:34:D7:DC:73:E0:D1
Certificate issuer:       /CN=33c78d60-34eb-4fed-8e25-925b95a30c8e
Certificate serial:       010D0C9F432858494733FC917606B27475438200
Authority key identifier: 5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/c47e0337-491b-3e57-a6f9-0040b1fabe11.roa
Signing time:             Sun 23 Mar 2025 01:00:39 +0000
ROA not before:           Sun 23 Mar 2025 01:00:39 +0000
ROA not after:            Sat 21 Jun 2025 01:00:39 +0000
asID:                     33039
IP address blocks:        2602:f95c:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:47:33:fc:91:76:06:b2:74:75:43:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33c78d60-34eb-4fed-8e25-925b95a30c8e
        Validity
            Not Before: Mar 23 01:00:39 2025 GMT
            Not After : Jun 21 01:00:39 2025 GMT
        Subject: CN=75ae8ad5-d5aa-4bd7-b2f6-1e88a90f9978
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6e:e3:b4:9c:f4:18:d8:b6:4c:9a:c1:90:5b:
                    27:51:95:a2:df:81:16:a2:4b:07:eb:2a:3f:df:13:
                    e7:1c:ed:6a:63:c3:f1:d5:01:b4:e9:31:6f:d7:36:
                    c2:5d:af:7f:cb:66:be:5a:0a:41:08:3b:32:a0:4b:
                    cf:fb:ad:2a:e1:d0:bb:8a:04:12:b3:8c:f5:e6:a7:
                    fe:60:20:3f:8f:45:ad:6e:b4:20:71:fb:09:96:92:
                    30:1e:db:40:3c:d7:65:9b:10:98:b2:02:5d:e2:2b:
                    26:fc:54:6e:8b:b8:a2:7e:1f:50:f9:59:61:5d:d1:
                    a8:7e:17:41:09:a9:84:38:03:58:22:3e:a1:31:cc:
                    f2:8c:36:ec:09:47:15:6e:ed:78:ff:92:3b:68:24:
                    b0:59:dc:54:1c:72:76:7d:d5:85:4f:7c:53:60:a7:
                    cf:fa:de:b8:13:ea:03:a6:9f:cc:b3:74:b8:1a:92:
                    97:93:2b:47:d7:9b:eb:95:c7:a3:fc:d9:f7:13:3e:
                    ae:3d:1c:0c:b3:44:60:a6:d0:ff:69:ef:32:7a:44:
                    20:c0:62:39:a8:35:33:ed:bd:d7:01:21:6f:63:c8:
                    68:70:05:06:67:f9:2f:c1:56:80:c8:b6:d3:a5:6d:
                    b9:e4:57:41:bb:da:c5:28:2e:1b:b1:cc:e2:fc:41:
                    00:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:BC:47:2F:D6:2F:78:0D:D1:5E:0A:E5:28:74:34:D7:DC:73:E0:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/c47e0337-491b-3e57-a6f9-0040b1fabe11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.crl

            X509v3 Authority Key Identifier:
                keyid:5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f95c:3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:de:de:58:2b:ed:54:22:1e:df:6f:e4:34:f8:da:4d:64:1b:
         8b:d6:69:de:05:41:2f:0b:dd:34:89:c9:14:13:64:6e:8a:39:
         51:4b:51:8e:43:d3:b5:10:57:90:18:4c:41:79:40:29:6c:fb:
         ec:22:f8:d9:8f:40:60:8f:3c:6d:2c:59:2c:d0:60:48:47:9b:
         0f:bc:45:1d:6c:6d:70:b4:74:ca:ce:69:9c:0a:ac:70:0f:03:
         2b:24:88:f5:44:cc:16:0d:94:41:8f:7e:7e:3d:d2:0c:50:f0:
         ac:65:db:c3:df:89:29:22:58:fa:95:5e:eb:e3:6c:4a:94:cd:
         bf:4f:a5:e2:71:7d:de:71:e0:bb:e2:de:50:46:3b:44:79:33:
         a5:0f:57:ab:2f:f6:c1:95:75:c2:d4:da:2e:5d:e0:8f:b1:97:
         e8:48:26:d4:27:81:05:43:aa:15:eb:05:94:bc:1e:15:0d:88:
         83:26:44:4c:b3:89:0c:98:3c:8f:38:c2:0c:7e:b2:cd:78:f2:
         bc:a1:d1:28:c1:5f:0e:63:4e:32:38:2a:80:83:f1:f8:4e:bc:
         3f:15:1d:5c:75:ca:3b:e6:21:f6:04:20:99:73:6a:d1:41:5c:
         66:a6:8c:66:e3:47:c1:88:8a:00:46:fb:35:9c:d7:6f:ae:94:
         50:c4:cd:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----