Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/9adfbfa5-5ef1-3afd-b40b-18b06342bccd.roa
File:                     9adfbfa5-5ef1-3afd-b40b-18b06342bccd.roa (raw, json)
Hash identifier:          p8wLC3Aev89eko+ZwrEDEfFP1jSN9zG0Axl3wPG0Ctc=
Subject key identifier:   55:74:87:55:44:99:9A:F6:52:93:5F:38:D9:BE:72:5A:1F:A3:54:6C
Certificate issuer:       /CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee
Certificate serial:       010D0C9F43285849350E84151F62D3B2E620C380
Authority key identifier: 9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/9adfbfa5-5ef1-3afd-b40b-18b06342bccd.roa
Signing time:             Sun 16 Mar 2025 13:00:52 +0000
ROA not before:           Sun 16 Mar 2025 13:00:52 +0000
ROA not after:            Sat 14 Jun 2025 13:00:52 +0000
asID:                     13780
IP address blocks:        2602:fc09::/36 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:35:0e:84:15:1f:62:d3:b2:e6:20:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee
        Validity
            Not Before: Mar 16 13:00:52 2025 GMT
            Not After : Jun 14 13:00:52 2025 GMT
        Subject: CN=f8460205-7ac9-47fc-930d-3f02b5378102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c1:8a:83:0f:72:b0:50:38:30:ac:8c:7d:11:
                    e9:27:ab:d4:83:0d:e4:a3:e1:53:93:dc:ed:a8:3c:
                    97:b0:9c:da:be:e5:a6:93:62:0a:d9:72:d5:7e:c5:
                    07:96:51:d7:7a:6b:99:27:1a:c6:4c:53:67:5f:6b:
                    dd:11:56:6e:32:09:47:d6:b9:5d:2e:d8:f2:09:1c:
                    04:24:32:d7:be:4b:da:7f:b0:b5:27:1e:40:16:48:
                    3f:e1:19:78:cb:85:fe:83:1a:08:a7:a2:cd:ae:f1:
                    83:25:e6:50:ae:00:73:3d:f9:de:22:1f:0b:f5:6e:
                    2c:3f:78:dd:8f:45:b2:8d:21:3b:39:63:29:7d:0a:
                    8b:0a:ba:d9:fc:37:d4:91:b4:2e:e2:cd:56:c3:63:
                    76:7b:78:c2:47:96:95:09:f3:80:bc:9b:b2:53:8c:
                    13:7d:ee:13:a3:67:06:c3:a9:0b:12:17:5d:9d:0b:
                    9f:af:5b:1f:a1:fe:e2:6f:4a:63:c5:2d:ba:18:37:
                    8c:a4:7f:5f:f4:ce:54:32:a0:7f:5b:61:34:c4:11:
                    5b:d0:88:ac:d6:8f:42:81:d9:ed:e0:94:0b:3d:4a:
                    5b:c3:5c:b9:81:22:6e:e3:c3:db:56:2d:a4:3a:47:
                    2c:c4:25:75:46:64:a6:99:ee:04:97:79:98:a9:d9:
                    ee:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:74:87:55:44:99:9A:F6:52:93:5F:38:D9:BE:72:5A:1F:A3:54:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/9adfbfa5-5ef1-3afd-b40b-18b06342bccd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.crl

            X509v3 Authority Key Identifier:
                keyid:9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc09::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:14:9d:5b:89:d5:00:93:bc:0e:bf:e8:74:81:3c:56:22:49:
         27:47:11:9b:f3:4e:0f:e2:97:f6:85:9c:34:62:e2:27:4f:29:
         ef:60:a1:ae:2c:8e:16:e3:7b:ab:30:59:a1:09:70:d9:d3:c7:
         6e:9c:98:3b:7b:f4:9f:94:23:c8:a0:df:a0:a8:b4:70:67:0d:
         83:22:7a:3b:b9:6e:9d:b8:04:1e:13:76:7a:9f:ae:3f:d2:26:
         ee:f3:02:a3:9f:96:bf:8a:f5:21:52:1d:d7:20:0e:a4:64:1f:
         0e:56:7f:e2:4d:7e:07:df:cc:17:f3:81:85:43:93:cb:5a:83:
         ec:d6:90:93:88:e7:f4:3d:80:4c:fd:75:fe:b6:16:ff:23:af:
         ab:55:19:75:e7:a0:de:40:56:0c:ca:45:c2:28:76:67:1c:52:
         76:55:16:7f:6a:2a:8f:7b:6b:0c:fd:49:e2:79:bc:fe:ec:96:
         e3:64:9a:37:b0:3f:15:d9:56:6d:5b:a4:51:13:1b:28:1d:ee:
         8e:34:60:3d:70:3a:22:86:07:8c:30:1a:aa:73:c5:be:0c:0f:
         2a:85:0c:94:79:3e:a3:37:c4:09:34:fe:13:0b:9d:87:24:7d:
         ab:53:17:2b:13:00:e0:68:74:05:72:43:21:9e:36:c9:d7:fa:
         76:13:82:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----