Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/7b77de71-0ff6-3e56-8573-0133242c5348.roa
File:                     7b77de71-0ff6-3e56-8573-0133242c5348.roa (raw, json)
Hash identifier:          nMXCa4hEc9Rb1y/X9Mcs75YFIngF8eliafH8yINMMU4=
Subject key identifier:   53:20:DF:C8:07:77:FF:AD:ED:A7:9F:A0:84:40:FA:50:13:D8:6E:E5
Certificate issuer:       /CN=e02d82fe-95a7-4e09-9a2a-be1e154ba38d
Certificate serial:       010D0C9F432858497AD9C0699A9E81A9052B9980
Authority key identifier: A4:C5:B7:53:0A:F7:6C:A4:E1:F7:C3:04:23:AB:D8:5B:05:70:84:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/7b77de71-0ff6-3e56-8573-0133242c5348.roa
Signing time:             Thu 10 Apr 2025 13:00:59 +0000
ROA not before:           Thu 10 Apr 2025 13:00:59 +0000
ROA not after:            Wed 09 Jul 2025 13:00:59 +0000
asID:                     399244
IP address blocks:        2602:fb89::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7a:d9:c0:69:9a:9e:81:a9:05:2b:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e02d82fe-95a7-4e09-9a2a-be1e154ba38d
        Validity
            Not Before: Apr 10 13:00:59 2025 GMT
            Not After : Jul  9 13:00:59 2025 GMT
        Subject: CN=c350b354-6f35-4bda-b7ee-988fd6da5222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:7d:6f:1c:92:bf:58:8d:25:7a:ff:39:94:b0:
                    47:b5:d8:d8:e3:25:55:2b:a8:d2:46:1d:c2:0c:1e:
                    89:98:57:7f:37:f8:97:52:1d:05:d5:d1:d1:16:53:
                    c8:7a:f0:ce:83:8c:a5:f5:7d:e3:c1:ee:25:02:97:
                    55:1a:7c:24:2c:ae:4a:82:7f:77:62:1f:bf:1a:82:
                    d6:27:47:53:ae:ce:bd:98:ca:fa:f3:b5:67:64:ca:
                    de:85:3b:dc:0e:d4:7b:6a:cc:40:71:fb:86:d0:8b:
                    6c:ed:d1:92:7c:58:bc:e4:20:8d:74:fc:19:dc:50:
                    57:00:ae:c6:5b:3b:e9:aa:b7:f8:c7:e7:57:b7:d8:
                    26:a1:ab:97:86:e8:73:68:8d:4d:55:9b:00:47:55:
                    76:11:42:0c:27:6c:f2:b4:32:75:fe:ec:4f:20:09:
                    98:b7:65:f1:dc:93:d8:ce:55:f0:07:f1:61:04:66:
                    68:dc:8c:b3:0a:b6:28:12:87:9a:58:df:2e:6a:4f:
                    01:7c:17:fd:10:e3:ba:1d:a7:2d:7c:f6:c8:b7:2e:
                    ca:c8:a5:f6:0d:93:a3:80:37:ca:91:10:74:5a:16:
                    f8:69:05:8b:90:69:8c:7f:c0:4f:72:1a:01:d8:57:
                    0b:e7:4a:7b:ea:39:f8:e7:9f:80:d1:6b:0b:04:45:
                    3a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:20:DF:C8:07:77:FF:AD:ED:A7:9F:A0:84:40:FA:50:13:D8:6E:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/7b77de71-0ff6-3e56-8573-0133242c5348.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.crl

            X509v3 Authority Key Identifier:
                keyid:A4:C5:B7:53:0A:F7:6C:A4:E1:F7:C3:04:23:AB:D8:5B:05:70:84:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb89::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:83:4a:d1:29:60:99:6c:53:36:1f:b3:41:de:74:9f:22:84:
         2a:7c:f2:92:12:ab:f9:31:f4:f1:f9:38:79:74:e6:ec:de:5f:
         43:91:5c:27:17:51:e8:29:25:d2:0f:02:52:46:2d:d9:a8:c7:
         97:e2:90:68:d1:48:e2:35:74:d3:0e:24:93:ea:e8:d1:88:3a:
         a4:88:1b:65:d2:b1:4c:f4:31:60:e4:67:32:88:ac:48:fe:02:
         ad:d1:78:b5:5e:84:2b:83:db:72:68:73:f5:d3:9e:d5:b8:3e:
         49:2a:47:2f:88:9b:d5:a1:7d:ab:4e:68:f1:da:f6:d6:8f:a3:
         08:f0:05:c7:c8:7f:2f:fd:7f:01:cc:68:8a:49:22:73:11:6b:
         7f:96:17:d0:e1:20:7d:c9:13:60:90:01:3f:73:76:62:64:eb:
         ec:d4:ef:5f:07:aa:91:7b:f2:fc:58:fa:ed:95:47:3e:90:67:
         cf:0f:91:c4:2d:3d:3c:ba:51:56:66:2f:8a:67:3a:43:a1:11:
         12:67:dc:01:5e:53:7e:fb:c4:5b:75:9a:9c:38:8c:b9:be:26:
         c0:8a:95:13:df:21:a1:f2:94:3a:0a:74:21:3f:c6:89:d9:0e:
         42:cb:44:45:c4:36:30:fe:fe:99:0a:b4:42:e2:17:bf:bc:d7:
         bf:31:50:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----