Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/09ac24ee-ac4d-32e2-b8b5-ed10e4b94312.roa
File:                     09ac24ee-ac4d-32e2-b8b5-ed10e4b94312.roa (raw, json)
Hash identifier:          +A7v5nKo+QFfBSRJxolbkZ0uZiI5iddDe/C2+AWVyKA=
Subject key identifier:   38:6D:7B:8F:FA:E0:5C:B4:82:A6:A7:4A:81:9E:7B:6D:4B:B3:5E:69
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F4328584953C44C3B84F28C896ACBCCC0
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/09ac24ee-ac4d-32e2-b8b5-ed10e4b94312.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     11290
IP address blocks:        2602:210::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:4c:3b:84:f2:8c:89:6a:cb:cc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=62238ee3-60c1-42ec-a8b9-6cd2cb52318e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:0f:92:0d:f7:e1:74:74:9a:55:6e:2e:47:b1:
                    62:f7:5c:5e:d6:1d:16:ea:f1:09:9f:7c:59:7f:4e:
                    2e:6f:6c:70:de:aa:cb:7d:f3:be:e1:63:6f:55:f6:
                    55:85:06:95:63:19:eb:d7:f0:68:ec:22:b0:aa:9b:
                    40:bd:ff:2a:79:8e:89:7f:b4:29:42:87:09:4e:b9:
                    0f:07:8b:19:58:24:ae:46:75:fc:6e:12:09:cf:d5:
                    8c:ed:3f:1e:47:ec:77:14:ba:2a:aa:39:95:e5:62:
                    a0:88:f9:a1:88:ea:46:11:73:ff:c0:16:62:f9:21:
                    6d:8f:c1:ac:9c:4c:08:df:f1:78:1d:eb:9c:6b:4a:
                    25:72:37:02:1b:93:73:db:a9:4b:31:bb:f0:e4:39:
                    9d:2f:3c:f3:84:7e:1f:8e:05:f4:9e:7b:61:50:26:
                    d6:9a:28:15:99:76:b4:88:a9:67:eb:2d:26:60:63:
                    ab:55:7e:19:9d:dc:35:b3:5f:89:63:cd:2b:b2:e1:
                    62:d8:07:9a:ec:93:f6:4b:f0:05:80:74:76:fa:67:
                    15:56:62:26:35:7d:8f:99:54:53:48:91:4b:b1:86:
                    71:0f:3a:0c:de:ce:e1:c1:39:38:d4:6d:42:62:80:
                    fa:b5:08:2f:1c:9b:ab:5d:09:e7:dc:d1:9c:cd:b1:
                    7d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:6D:7B:8F:FA:E0:5C:B4:82:A6:A7:4A:81:9E:7B:6D:4B:B3:5E:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/09ac24ee-ac4d-32e2-b8b5-ed10e4b94312.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:210::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:e9:4b:9c:a7:49:d7:84:41:5e:04:cb:90:90:ec:b2:27:89:
         fe:a4:2e:30:03:6a:30:ed:03:82:98:64:77:60:8e:0a:c2:67:
         c6:1a:4a:60:98:30:fe:d2:8b:c7:ed:b8:29:a6:90:f2:53:cf:
         73:fb:c0:1f:22:5a:15:b5:a7:2d:5d:31:21:bd:64:84:74:f8:
         88:21:39:ce:3d:d9:9a:a6:b6:e8:69:9d:cd:00:4e:00:63:58:
         b7:cd:93:e1:ff:47:8c:f9:ca:45:89:28:06:23:81:8e:90:9d:
         7a:9d:94:ae:99:90:75:d8:67:71:9a:d7:05:99:44:5d:82:1c:
         aa:24:b4:40:a7:d5:98:fd:9a:17:7e:65:be:b1:3e:bf:94:2a:
         2f:1c:e6:28:64:a9:db:60:1a:f2:c3:40:83:ac:0c:69:8f:51:
         38:ca:db:0b:bc:ea:21:9c:6d:d0:89:f6:a1:50:91:fa:d1:c2:
         f9:c5:0d:43:45:62:50:25:89:f3:22:2c:cb:33:5c:fb:20:c9:
         62:29:8f:3a:aa:6d:7e:92:ce:d2:38:7c:f2:01:fc:b9:dc:43:
         d9:65:64:69:4a:85:d8:de:bd:b5:a9:29:67:53:08:f4:8a:a4:
         8c:4e:72:ff:4c:3a:8f:27:60:ea:f0:4b:8b:78:21:2a:95:ae:
         1f:db:83:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----