Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/338be5f2-8ac7-3ba5-9034-0da9c44989cf.roa
File:                     338be5f2-8ac7-3ba5-9034-0da9c44989cf.roa (raw, json)
Hash identifier:          iMAE5eL9MUIZa09/WWANCwU7Zn7X/5/cgZvXqaiYX/E=
Subject key identifier:   21:35:13:9B:77:D8:DB:88:C1:28:E4:94:F6:3F:36:89:20:36:3F:A9
Certificate issuer:       /CN=3a3095c5-fb6a-4400-bb74-b55eff2073bc
Certificate serial:       010D0C9F43285848EFC6470938CFD999F0CD5180
Authority key identifier: 10:A0:E1:F5:16:FB:75:75:1F:9D:D3:8F:00:2D:CE:15:BE:77:4E:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/338be5f2-8ac7-3ba5-9034-0da9c44989cf.roa
Signing time:             Wed 19 Feb 2025 17:24:35 +0000
ROA not before:           Wed 19 Feb 2025 17:24:35 +0000
ROA not after:            Tue 20 May 2025 16:24:35 +0000
asID:                     399970
IP address blocks:        2602:fc3b:500::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:c6:47:09:38:cf:d9:99:f0:cd:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a3095c5-fb6a-4400-bb74-b55eff2073bc
        Validity
            Not Before: Feb 19 17:24:35 2025 GMT
            Not After : May 20 16:24:35 2025 GMT
        Subject: CN=72dca560-c42d-4014-877a-b29f86134726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:55:be:fc:84:7c:92:8c:51:d8:52:dc:b3:0f:
                    3a:c8:4d:05:83:ce:c3:19:9a:c9:94:28:cf:d5:df:
                    9d:ce:1e:f7:61:bd:f7:87:fb:1f:1d:b9:45:b1:ef:
                    ee:d2:c5:12:10:9f:a9:50:b7:e2:3b:de:6f:c6:e0:
                    60:8c:9c:25:be:32:30:f2:b1:1b:5f:7b:ff:fc:7d:
                    d6:00:82:d0:63:e5:e9:27:1f:2c:89:5a:22:11:b7:
                    de:53:f5:ab:bf:cf:ea:a2:cb:45:95:5a:ef:e5:e9:
                    7f:24:e8:2a:cb:c0:8d:67:a6:37:2a:72:bc:a5:92:
                    d5:36:12:35:99:d3:b0:e6:51:0a:ff:1e:e9:c6:a3:
                    c0:42:76:41:02:fe:2c:08:c4:36:e3:07:40:3c:95:
                    98:90:de:71:ec:d9:f3:88:a7:a7:9c:ba:2d:16:f7:
                    d4:17:9a:80:d1:c6:f6:b6:6c:e3:db:9a:5a:84:2d:
                    54:97:d4:ce:e1:ca:4a:22:bd:87:e4:b5:f3:98:ad:
                    c1:89:5d:24:25:d8:35:b5:e2:84:58:2d:3c:1f:98:
                    f1:65:78:a6:49:9a:6b:7d:9e:9f:f7:90:4f:62:63:
                    19:ff:9f:fd:ed:a7:b9:c4:86:f9:4f:d5:0d:c4:f1:
                    8a:13:dd:69:66:f5:4b:bc:1e:b1:95:93:1e:8a:16:
                    6a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:35:13:9B:77:D8:DB:88:C1:28:E4:94:F6:3F:36:89:20:36:3F:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/338be5f2-8ac7-3ba5-9034-0da9c44989cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/3a3095c5-fb6a-4400-bb74-b55eff2073bc.crl

            X509v3 Authority Key Identifier:
                keyid:10:A0:E1:F5:16:FB:75:75:1F:9D:D3:8F:00:2D:CE:15:BE:77:4E:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:500::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:f5:24:7c:5f:55:a5:67:b2:15:43:0c:c0:2a:40:68:4a:38:
         eb:50:98:44:c0:2b:6b:5c:af:3d:48:39:79:25:56:ca:80:7d:
         a0:fc:39:5e:08:0f:e2:d7:12:d5:37:8c:93:90:ba:90:b0:f8:
         23:9b:34:34:82:47:96:e0:71:e9:fb:ce:b9:ce:df:dd:16:a3:
         73:7b:fc:c8:4f:62:cb:4c:1a:71:f2:9c:40:e4:36:17:19:28:
         f8:29:28:b6:74:07:c7:ba:25:4f:e3:4d:7e:cd:87:a3:bf:57:
         da:14:99:4d:40:5d:09:68:5f:e3:a1:df:97:2e:bb:2b:6b:b1:
         aa:c1:39:87:bc:44:67:70:52:98:db:ab:ac:33:a1:7c:6d:fc:
         10:2a:e9:a1:34:c3:8b:fc:c5:6b:02:09:55:49:be:5d:18:e5:
         ea:b7:d0:d1:4c:ce:6c:e9:51:67:35:2f:05:4e:a0:b9:8c:14:
         c2:47:ea:3a:1c:56:ac:79:96:05:e9:1d:3c:9b:27:79:05:2b:
         cb:73:3e:39:de:95:99:22:cd:9f:f9:a0:14:15:fa:d4:7b:67:
         ac:cb:5e:dc:fd:5a:c3:61:97:02:d2:11:4e:46:62:3c:83:fe:
         a3:40:2b:7d:43:6c:0c:23:58:fe:b8:c7:df:f9:28:3e:31:01:
         62:9e:1e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----