Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/4c3a35b0-85d3-337d-b34e-65627f15cb1e.roa
File:                     4c3a35b0-85d3-337d-b34e-65627f15cb1e.roa (raw, json)
Hash identifier:          NCV0Qi9+wyToRzrJBZ4Q3JVZPFweGpAXdQIY/Pk0kVI=
Subject key identifier:   C3:F5:B3:98:E1:A5:5C:E1:C0:38:42:EE:FD:5F:0B:BA:B3:08:72:AA
Certificate issuer:       /CN=ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb
Certificate serial:       010D0C9F4328584940394F4CCDB424C938B78B00
Authority key identifier: 3E:74:CA:C3:2A:55:30:FC:12:F0:74:86:AC:0C:26:F3:75:48:5A:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/4c3a35b0-85d3-337d-b34e-65627f15cb1e.roa
Signing time:             Thu 20 Mar 2025 13:00:53 +0000
ROA not before:           Thu 20 Mar 2025 13:00:53 +0000
ROA not after:            Wed 18 Jun 2025 13:00:53 +0000
asID:                     393448
IP address blocks:        2602:f96c:de::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:40:39:4f:4c:cd:b4:24:c9:38:b7:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb
        Validity
            Not Before: Mar 20 13:00:53 2025 GMT
            Not After : Jun 18 13:00:53 2025 GMT
        Subject: CN=05d9c1a6-9f0b-4c80-a4d7-08864de1a505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3e:2b:78:44:d2:99:01:4f:2f:13:fb:63:85:
                    c2:cc:d1:7b:fb:7c:38:3d:bd:77:ca:ed:70:5b:3c:
                    b2:86:53:94:29:75:78:b0:9a:10:4f:19:e4:1d:77:
                    c2:30:30:bd:1f:7b:78:66:d8:22:59:29:28:e3:ca:
                    1e:38:20:d4:c1:89:d7:31:38:fa:30:0b:41:7a:20:
                    32:fe:88:39:f9:66:d9:aa:97:55:a1:2a:60:d9:fb:
                    32:dd:3d:2d:f4:90:9b:f7:b4:70:36:6a:6c:bb:24:
                    fc:12:6a:62:5e:ea:87:bf:93:70:9d:4d:7c:9b:52:
                    a9:7b:2e:49:73:39:b5:dd:91:77:72:e0:84:22:16:
                    2f:d3:cd:73:9a:44:c0:c7:be:3e:d0:e4:56:7a:ec:
                    d5:5e:05:9d:69:7c:8c:f7:a7:e1:cc:80:db:69:2d:
                    52:e1:80:94:02:81:ac:54:c8:2d:63:d8:54:af:19:
                    93:01:13:6d:b1:9b:76:26:80:bc:eb:d0:7a:a7:c7:
                    50:76:87:d0:ae:67:25:c4:1f:49:1c:33:83:14:59:
                    1c:91:cc:d3:e6:75:e6:f5:21:99:9a:30:11:62:18:
                    90:e0:75:92:99:7f:ee:af:db:3e:ef:8e:0f:2b:7e:
                    c6:d1:e3:b0:74:9a:6d:79:86:1f:17:62:5e:22:8b:
                    c0:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:F5:B3:98:E1:A5:5C:E1:C0:38:42:EE:FD:5F:0B:BA:B3:08:72:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/4c3a35b0-85d3-337d-b34e-65627f15cb1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.crl

            X509v3 Authority Key Identifier:
                keyid:3E:74:CA:C3:2A:55:30:FC:12:F0:74:86:AC:0C:26:F3:75:48:5A:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f96c:de::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:de:c8:de:5f:c1:e3:54:f2:7d:0a:b7:66:b1:a0:45:8e:72:
         e7:78:d6:41:5a:53:8f:52:b7:2a:3c:d7:a2:b2:c2:77:f5:fe:
         4e:85:50:9b:6f:61:06:c0:9b:c6:f5:7f:98:0e:4b:4b:6c:11:
         b9:0c:94:b2:e7:83:14:f2:0d:5d:26:04:92:9e:28:fa:38:6e:
         02:95:d6:55:d8:af:b2:b3:e0:b1:21:f3:3b:e1:55:d7:e5:1e:
         ad:b9:d9:d2:1f:0a:4d:08:3b:65:af:57:64:23:1a:b5:a3:fe:
         22:08:25:1a:b2:9a:f3:f7:50:9c:a8:8c:62:2f:2e:d1:41:f7:
         42:3d:46:6b:a6:79:33:94:5c:cc:8e:85:71:28:7f:12:c4:28:
         6d:1a:76:84:66:4f:c0:fa:07:89:de:c8:43:3d:99:b1:0c:c4:
         e7:a3:1c:ec:f3:df:2f:72:70:f5:24:16:7a:21:7a:bb:f6:e3:
         cc:7c:27:1a:48:f6:b4:80:2e:46:8a:b3:83:87:55:06:32:51:
         56:1b:2a:91:9b:9e:b9:1f:9a:49:53:fe:5b:63:29:4c:af:91:
         dd:ee:cf:58:37:57:9b:b6:af:c7:d6:a5:56:76:ae:20:ee:61:
         c5:26:d5:5b:8a:c4:35:9b:24:89:62:28:b3:ca:8c:68:ad:05:
         80:99:50:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----