Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/8f7749dd-4c2b-3c88-ab72-572a624fd536.roa
File:                     8f7749dd-4c2b-3c88-ab72-572a624fd536.roa (raw, json)
Hash identifier:          h5y4BIN8Y4E9UIOFQsuJAVQXu9Ibc133mr7kTeDZWKQ=
Subject key identifier:   C2:86:BB:8C:0A:57:7E:DE:B1:22:6E:B3:67:AB:F0:75:41:E2:23:31
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F43285849350EAB957041D31FE82C3DC4
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/8f7749dd-4c2b-3c88-ab72-572a624fd536.roa
Signing time:             Sun 16 Mar 2025 13:00:52 +0000
ROA not before:           Sun 16 Mar 2025 13:00:52 +0000
ROA not after:            Sat 14 Jun 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        2606:7bc0:1090::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:35:0e:ab:95:70:41:d3:1f:e8:2c:3d:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Mar 16 13:00:52 2025 GMT
            Not After : Jun 14 13:00:52 2025 GMT
        Subject: CN=bb67bcd3-5598-404f-aac0-a53e4dd0876a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:18:6e:55:77:6d:c5:03:11:b7:5f:4a:85:a6:
                    94:a7:5f:d4:c8:23:b6:b1:71:86:ed:a3:06:54:f8:
                    4b:b2:a2:26:99:a5:c3:46:b0:f2:e1:c5:39:d3:6c:
                    ff:a0:20:9f:0a:64:52:18:b8:2b:a2:a9:a9:70:9b:
                    3c:d7:ef:eb:ed:9c:2b:61:e4:ed:e8:b7:75:90:db:
                    93:63:53:64:d3:0e:84:c5:28:f2:41:4e:8f:a6:b8:
                    15:30:47:8d:05:8d:db:b9:bc:a0:a9:52:e7:e4:b1:
                    5b:09:ff:2b:eb:0a:49:93:01:98:80:6b:ab:e1:91:
                    6e:3e:ec:90:bb:7c:7f:9d:b5:73:dd:d2:60:77:14:
                    7c:e4:82:5d:d1:68:d2:ff:3b:26:83:26:df:b4:ec:
                    ce:54:26:61:52:7f:46:96:f7:58:4e:6c:67:6e:37:
                    0f:b8:9e:4f:e4:04:7a:90:dd:bf:a2:b5:bf:22:cb:
                    cc:03:8b:c4:e5:ee:3e:0f:8d:69:7d:35:c2:ce:bd:
                    19:dd:92:93:3b:7b:9f:88:37:1a:4c:1f:c4:75:49:
                    07:eb:9c:f8:00:97:53:98:24:51:ea:f7:43:5c:ed:
                    ab:0d:3f:65:30:0d:74:2e:84:4d:84:be:0d:b1:63:
                    f3:0e:4d:63:21:9a:49:2c:a2:ba:77:cc:e7:0f:01:
                    89:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:86:BB:8C:0A:57:7E:DE:B1:22:6E:B3:67:AB:F0:75:41:E2:23:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/8f7749dd-4c2b-3c88-ab72-572a624fd536.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7bc0:1090::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:97:18:92:d5:94:c3:6a:85:a7:02:a9:27:07:c9:d7:f3:e6:
         a5:65:04:98:c2:b3:c5:4a:a8:ab:27:9a:06:48:c6:cf:5f:4f:
         21:00:45:46:53:8e:dd:4d:aa:60:34:03:de:b0:c6:d5:f2:8a:
         8b:9e:61:a9:29:de:f3:72:7f:db:59:de:3b:8c:44:51:e8:a3:
         81:3f:68:72:8d:e7:ec:c0:d9:e7:36:51:06:c1:bc:08:0a:ff:
         04:33:01:2e:14:27:cb:2e:a2:7f:64:eb:42:9b:03:6b:7b:14:
         a6:f5:9e:81:c6:84:b7:df:80:c5:17:26:3d:60:be:02:a0:ca:
         fa:f8:23:51:d7:8d:ba:37:b1:ea:6f:61:da:dc:29:41:0b:e4:
         e3:ce:06:c2:c6:15:b5:33:b8:8c:96:b1:36:77:df:9e:1e:0d:
         71:44:6c:c6:86:55:76:c8:b6:8f:03:66:56:e3:85:e6:0e:c4:
         0b:9a:48:63:dc:05:57:03:ad:9d:b0:04:0c:61:23:01:04:b0:
         e4:97:d7:e3:1c:37:95:cf:47:ef:25:01:eb:b8:7b:46:54:47:
         d1:f2:ad:dd:8a:c9:c9:31:4d:65:d5:41:92:96:8f:55:dc:b7:
         44:9e:29:d0:78:6a:9f:ce:e6:57:f9:48:de:96:45:90:55:ab:
         f0:92:bf:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----