Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/f420756d-56c5-38ae-8497-eb0829a92be6.roa
File:                     f420756d-56c5-38ae-8497-eb0829a92be6.roa (raw, json)
Hash identifier:          SKUTOo33/jojX7ObDhZ5a004qHduamj+RxuzlDe4QDI=
Subject key identifier:   94:1E:17:B6:4B:19:45:7F:D7:B8:08:64:91:14:0F:6B:D6:1F:BB:33
Certificate issuer:       /CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee
Certificate serial:       010D0C9F432858493243DD6E100D1567F7AC0080
Authority key identifier: 9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/f420756d-56c5-38ae-8497-eb0829a92be6.roa
Signing time:             Sat 15 Mar 2025 13:00:52 +0000
ROA not before:           Sat 15 Mar 2025 13:00:52 +0000
ROA not after:            Fri 13 Jun 2025 13:00:52 +0000
asID:                     13780
IP address blocks:        2602:fc09:aa::/48 maxlen: 48
                          2602:fc09:bb::/48 maxlen: 48
                          2602:fc09:cc::/48 maxlen: 48
                          2602:fc09:dd::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:32:43:dd:6e:10:0d:15:67:f7:ac:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee
        Validity
            Not Before: Mar 15 13:00:52 2025 GMT
            Not After : Jun 13 13:00:52 2025 GMT
        Subject: CN=7fc3119e-2d31-47c8-9c1d-b2bf08d9fcea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d4:5b:bb:26:8b:2e:3e:c9:31:3a:f9:c1:f1:
                    dd:18:d9:8d:eb:bc:a2:b9:76:57:a4:a6:ff:99:6b:
                    25:5d:91:a6:f6:a8:d7:1f:44:b7:a8:bb:1e:b3:71:
                    a8:7a:2c:6b:ac:76:33:78:e7:5e:15:4e:a0:2d:fe:
                    9d:24:2c:6e:78:c4:a8:07:50:2a:49:0c:72:e6:16:
                    d3:e4:d5:59:4a:49:82:1d:a1:f4:5f:83:4c:81:eb:
                    59:d1:7d:8a:6b:f4:41:f7:a1:a5:22:8e:26:f4:f9:
                    39:d9:f3:7f:9a:aa:00:ba:ac:d1:e9:ca:21:82:d2:
                    da:12:81:68:28:a0:79:9b:54:3f:64:18:4e:22:fb:
                    c7:98:ec:e7:7c:79:72:f6:2d:e7:00:2b:77:f8:e4:
                    58:e2:48:f2:68:33:34:a5:9a:26:06:aa:9a:12:05:
                    fd:d3:93:85:10:4f:6d:60:83:b3:ff:f6:f0:98:05:
                    85:c1:fd:05:c0:81:78:fe:42:7a:dc:09:10:89:0c:
                    3a:d0:95:59:a1:c4:1c:48:ed:da:3e:b7:08:ef:f7:
                    f4:a6:4d:7f:5f:44:01:0b:28:3f:74:82:8a:ea:3f:
                    fb:f4:b9:4b:6f:8e:ee:f7:a0:be:07:bb:17:32:d0:
                    00:76:df:d5:a5:30:67:14:b7:5e:64:9c:6f:ef:d6:
                    24:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:1E:17:B6:4B:19:45:7F:D7:B8:08:64:91:14:0F:6B:D6:1F:BB:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/f420756d-56c5-38ae-8497-eb0829a92be6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.crl

            X509v3 Authority Key Identifier:
                keyid:9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc09:aa::/48
                  2602:fc09:bb::/48
                  2602:fc09:cc::/48
                  2602:fc09:dd::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:b3:ec:36:77:d3:67:07:fc:8d:5e:be:9a:a5:cb:46:66:63:
         ed:6b:f0:ca:b0:cd:74:9b:66:6c:94:01:b0:b7:7f:b5:e5:2e:
         01:8a:de:46:5a:c4:dd:6c:58:d8:5d:ae:5c:72:ee:b0:3c:aa:
         d7:ea:a0:b6:6a:99:a8:ec:24:8c:fc:80:49:ef:50:20:92:4f:
         27:79:61:b7:b7:11:1d:ea:ef:c6:61:06:98:a9:89:f3:97:5e:
         d4:0c:aa:0b:33:1a:e9:6b:70:b0:d1:bc:c2:6d:0f:b8:11:f6:
         a7:6e:e3:e9:bd:cf:ee:4c:fa:a4:06:a7:a4:d7:75:af:4a:33:
         b6:ed:7d:ea:3c:37:4e:d7:60:e3:fe:d7:34:7c:cc:bc:6c:21:
         ea:20:c7:5e:3f:43:df:39:9e:4d:22:7d:b9:14:e6:a1:a2:30:
         c3:4f:a3:c5:a9:b9:12:18:11:5e:3b:3f:35:f0:83:b9:b7:e5:
         9f:d0:86:bb:13:10:58:fa:9c:28:7e:0c:f9:ec:97:dd:00:c9:
         1f:46:23:46:9f:27:60:40:a6:9f:dd:c1:cb:13:0e:41:57:6c:
         10:ae:a0:bc:03:95:80:d4:df:b3:a8:b8:82:b7:4e:4f:24:5d:
         19:7e:83:3a:84:b7:e8:81:bf:cd:08:0c:ed:65:3d:45:c3:7c:
         78:12:26:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----