Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/76d1290b-e045-43ca-96b8-a3da87e72c4b/2e8bbd12-84cd-3bf6-8457-b7de7486aa15.roa
File:                     2e8bbd12-84cd-3bf6-8457-b7de7486aa15.roa (raw, json)
Hash identifier:          Jba/vVIWZhhYRkIe5gyXJjcRMd/jIetkE5wdjzX5iPo=
Subject key identifier:   28:E6:B8:E2:B6:A2:BD:1F:0B:59:A6:5A:BF:67:9D:20:B8:2F:97:21
Certificate issuer:       /CN=76d1290b-e045-43ca-96b8-a3da87e72c4b
Certificate serial:       010D0C9F432858497279B9B980BCF725E0140DC0
Authority key identifier: 7F:96:EF:CA:02:7E:0C:BE:ED:E1:6B:31:77:0E:29:D4:0A:B4:F3:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/76d1290b-e045-43ca-96b8-a3da87e72c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/76d1290b-e045-43ca-96b8-a3da87e72c4b/2e8bbd12-84cd-3bf6-8457-b7de7486aa15.roa
Signing time:             Mon 07 Apr 2025 13:00:59 +0000
ROA not before:           Mon 07 Apr 2025 13:00:59 +0000
ROA not after:            Sun 06 Jul 2025 13:00:59 +0000
asID:                     400191
IP address blocks:        2602:fc0a::/36 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:72:79:b9:b9:80:bc:f7:25:e0:14:0d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76d1290b-e045-43ca-96b8-a3da87e72c4b
        Validity
            Not Before: Apr  7 13:00:59 2025 GMT
            Not After : Jul  6 13:00:59 2025 GMT
        Subject: CN=91038502-ce3a-4e5e-8c95-442b619e78b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:cc:0f:b1:fa:23:8e:3e:fc:de:2e:d7:39:20:
                    1b:c9:62:5c:98:e9:ee:05:7d:7d:36:f8:6b:f1:98:
                    ca:26:39:78:ed:96:b4:de:36:52:f2:1e:be:37:59:
                    be:5d:4d:62:d0:c9:4a:1a:1c:b0:38:14:42:c5:35:
                    72:99:bc:1e:83:f5:33:4a:5a:4c:b8:64:61:42:95:
                    50:b0:53:d3:34:58:e5:b0:9b:9c:d0:59:e3:60:5d:
                    a0:0b:67:d8:3a:a0:45:3b:8c:a2:be:49:95:72:11:
                    43:41:c9:74:32:7a:55:13:b6:5f:b2:ac:5e:e1:51:
                    f2:6c:6d:58:80:6e:a9:f2:d6:b8:78:ee:c0:44:26:
                    b9:fd:c4:a0:8d:80:7a:48:52:cf:50:28:67:e3:ad:
                    9d:ed:82:9e:61:cd:39:a7:ca:c3:e6:04:7c:d7:b7:
                    41:2a:6b:3b:fc:85:fc:f9:fb:bf:b0:cc:14:2e:fa:
                    a9:63:31:a7:a9:af:71:10:11:14:01:3f:f4:63:22:
                    39:72:56:8b:a2:12:87:06:86:d2:a0:ec:28:d4:1d:
                    e5:88:4a:13:01:ff:42:6b:17:e9:ab:d9:40:50:de:
                    31:19:90:72:4a:46:a0:c9:53:e3:30:44:15:5e:5a:
                    3c:2e:cd:25:94:9e:42:09:18:15:30:f3:c2:eb:7b:
                    54:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:E6:B8:E2:B6:A2:BD:1F:0B:59:A6:5A:BF:67:9D:20:B8:2F:97:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/76d1290b-e045-43ca-96b8-a3da87e72c4b/2e8bbd12-84cd-3bf6-8457-b7de7486aa15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/76d1290b-e045-43ca-96b8-a3da87e72c4b/76d1290b-e045-43ca-96b8-a3da87e72c4b.crl

            X509v3 Authority Key Identifier:
                keyid:7F:96:EF:CA:02:7E:0C:BE:ED:E1:6B:31:77:0E:29:D4:0A:B4:F3:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/76d1290b-e045-43ca-96b8-a3da87e72c4b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc0a::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:de:0a:bf:b9:3a:4c:c8:34:0e:66:7e:c9:a7:cb:b3:3f:94:
         cb:9f:04:f3:6e:f2:3f:ed:5d:f5:6c:98:64:ad:74:b2:71:44:
         fe:aa:35:2f:49:78:65:aa:2f:d2:b3:02:9d:bd:f7:c0:46:81:
         b5:21:b0:78:73:cb:58:e2:6d:02:11:3a:98:ca:a8:9d:ff:2d:
         86:98:c1:3a:e8:37:53:1a:8b:b2:84:97:13:52:44:bf:77:2f:
         b2:ea:ff:64:92:29:eb:8a:41:f1:12:ee:1c:e7:6f:f5:f4:29:
         ab:ae:85:f1:21:cf:4d:2a:7e:45:5d:44:18:9b:54:c3:62:ed:
         47:eb:ab:00:b3:13:fd:4f:4f:1d:cb:9c:69:a7:d7:c0:06:9d:
         3f:97:68:57:2b:3e:70:a4:e2:db:1c:d5:42:51:3e:53:e6:c6:
         65:e9:b7:28:95:75:7d:31:3a:87:bd:30:78:b3:bc:a3:d2:91:
         91:6b:9b:df:12:af:f5:0c:17:06:80:d3:fd:84:f1:10:8c:33:
         cf:e8:1f:e4:47:4a:c1:87:db:60:b5:4f:78:34:40:4d:9b:72:
         b0:e5:47:a2:5e:e7:34:2e:5e:f8:db:34:09:03:22:d6:72:ea:
         4e:26:41:87:39:96:e2:21:6d:b1:54:27:7c:a7:e2:8a:3a:46:
         08:1d:90:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----