Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/c625fd72-037d-34e0-acb3-3db086a6a8b9.roa
File:                     c625fd72-037d-34e0-acb3-3db086a6a8b9.roa (raw, json)
Hash identifier:          kFxEITwp4ZXoEzpqMN5Jq4AhmRZLu6GfIL06re1OIhs=
Subject key identifier:   5E:CC:47:C8:FC:A1:BF:83:FE:B0:23:03:04:82:0E:E8:57:5A:E7:EA
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F432858495529541900241B0C111A7B38
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/c625fd72-037d-34e0-acb3-3db086a6a8b9.roa
Signing time:             Fri 28 Mar 2025 01:00:41 +0000
ROA not before:           Fri 28 Mar 2025 01:00:41 +0000
ROA not after:            Thu 26 Jun 2025 01:00:41 +0000
asID:                     14618
IP address blocks:        2606:7bc0:1065::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:55:29:54:19:00:24:1b:0c:11:1a:7b:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Mar 28 01:00:41 2025 GMT
            Not After : Jun 26 01:00:41 2025 GMT
        Subject: CN=c75a4c84-d6f2-4b8f-8418-48c482dfab72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:bb:bf:f5:b4:60:05:31:cb:9b:8a:32:8d:40:
                    28:92:6f:cb:0c:ac:40:d8:d2:e6:8d:4e:a8:0d:74:
                    0a:4b:88:32:43:e5:32:f8:ff:8b:c2:05:07:98:9c:
                    ce:24:44:b8:44:84:fa:a3:49:b3:98:b9:de:43:38:
                    97:96:a4:7a:e2:8e:de:ce:c4:11:11:92:37:92:b7:
                    09:05:72:fe:b7:6e:6b:bd:8e:63:b8:d3:02:65:b9:
                    f0:d8:1e:17:c6:b9:d5:e4:0b:96:e7:01:37:4b:35:
                    0a:23:50:02:70:ed:48:25:82:70:14:ba:49:01:e9:
                    f2:46:ac:ee:38:e8:d5:db:c4:56:ea:05:c9:71:89:
                    e1:2c:d7:7f:1a:6e:36:57:cd:2e:1c:fc:bd:9c:35:
                    00:94:9b:8a:d6:af:0c:79:bf:99:9e:98:23:86:b9:
                    28:00:37:ef:9b:07:a7:45:62:41:41:dd:b4:00:b3:
                    b1:3f:fe:8d:6e:35:15:46:c9:8e:b5:61:a2:51:21:
                    a7:32:57:81:25:24:88:ab:e5:0b:e5:b2:45:3a:f1:
                    bd:25:c1:5f:dc:14:2f:80:21:93:16:8f:cc:af:bf:
                    05:dc:e8:33:10:5b:d8:d8:14:fb:9a:27:c0:92:3f:
                    94:b3:b4:65:45:0f:a3:aa:6a:a1:23:88:ff:03:b1:
                    51:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:CC:47:C8:FC:A1:BF:83:FE:B0:23:03:04:82:0E:E8:57:5A:E7:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/c625fd72-037d-34e0-acb3-3db086a6a8b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7bc0:1065::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:80:7c:48:1f:90:f6:cd:64:8d:f7:18:3e:9c:e3:28:e6:92:
         f4:b3:82:dd:d2:79:fe:a8:4e:50:0b:25:3a:d7:73:87:78:01:
         ae:9f:84:bf:4c:01:71:b9:1c:5d:d4:46:2b:dc:33:0b:fd:6a:
         7e:de:7c:a5:fc:2e:1c:da:63:ac:ae:b5:8a:47:8f:41:1c:54:
         ed:1d:53:bc:88:30:64:e3:c0:56:a6:b1:89:d1:4e:ec:b4:14:
         0e:40:45:62:03:d5:52:0c:bc:63:b1:33:79:39:18:be:99:3e:
         1f:1b:1b:83:d7:41:dc:46:23:24:a7:35:52:9c:98:45:f6:b7:
         94:16:35:0a:c7:d1:65:8b:1f:6c:85:ab:3f:f0:ef:c1:94:fa:
         61:d6:66:be:82:81:9f:37:55:0f:4f:4b:ba:40:34:d2:96:9e:
         f4:15:92:df:17:a7:ce:77:0d:8d:1a:af:d2:5a:f3:34:c6:9e:
         f5:d1:cf:b1:31:2f:2f:36:36:d2:fb:9b:3d:a4:17:96:03:2f:
         d2:19:d0:9b:53:03:92:4f:86:22:99:68:13:4c:71:c6:d1:89:
         c0:11:5f:79:ea:53:59:96:a8:c5:5f:1d:b9:19:3f:ce:59:7f:
         6f:f6:b2:4f:a6:f7:4f:b0:8d:5e:97:dd:62:5e:72:2b:be:80:
         6a:26:b3:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----