Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/186c9d47-962c-3e11-ab2f-5c5d9cd37943.roa
File:                     186c9d47-962c-3e11-ab2f-5c5d9cd37943.roa (raw, json)
Hash identifier:          NgHa1CqZepRVn1W2iZr+Ffm38ucE6VYZ1O7Lzq4IJnI=
Subject key identifier:   5D:D2:4D:78:9D:0A:11:2A:76:80:8C:62:51:28:FA:F9:88:59:89:2E
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F432858495EEEEADB1AC87114C5D51380
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/186c9d47-962c-3e11-ab2f-5c5d9cd37943.roa
Signing time:             Mon 31 Mar 2025 13:00:59 +0000
ROA not before:           Mon 31 Mar 2025 13:00:59 +0000
ROA not after:            Sun 29 Jun 2025 13:00:59 +0000
asID:                     20253
IP address blocks:        2606:bc40:f001::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5e:ee:ea:db:1a:c8:71:14:c5:d5:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: Mar 31 13:00:59 2025 GMT
            Not After : Jun 29 13:00:59 2025 GMT
        Subject: CN=a97c9c0b-4028-48f1-a420-9b049b914f06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:51:b3:f6:93:7c:3b:64:6c:a4:78:57:12:ce:
                    a1:28:56:79:9e:a2:78:1f:c3:fc:74:fa:a2:56:f0:
                    99:e2:3a:3e:6a:8f:61:46:25:25:dd:85:c4:87:b9:
                    57:50:fb:7f:ff:cf:b6:8e:20:61:64:33:eb:5d:c2:
                    ca:05:27:86:01:cf:31:27:a8:de:00:2c:60:0c:00:
                    c8:de:ce:5d:04:76:1e:40:54:b0:96:0b:57:d2:12:
                    32:ee:ed:c0:bd:4b:3a:a6:74:dc:dc:83:0c:e1:59:
                    3d:39:01:a7:bd:2b:40:20:da:dd:f0:39:65:eb:0e:
                    7d:9a:ba:8c:08:85:e2:50:43:6b:25:69:15:b6:11:
                    18:68:bc:96:4e:15:b9:5f:9b:3d:89:75:b8:d5:dd:
                    0f:54:53:1e:62:fa:17:90:68:89:2f:f7:b0:22:fd:
                    03:1f:95:f0:e8:31:18:9c:c7:10:21:1c:d7:6e:24:
                    23:15:a3:33:ce:70:6e:5e:93:6e:d3:0f:9d:69:20:
                    1a:13:d4:22:92:8f:56:3f:d1:7d:53:cc:43:8e:45:
                    9e:8d:f5:a9:08:0f:00:bf:31:63:fd:96:6a:e0:74:
                    6c:1d:12:10:08:73:35:cc:3e:8d:41:4b:2d:72:4f:
                    96:93:ab:f2:be:2d:c3:36:70:8a:04:5d:c6:30:d7:
                    d7:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:D2:4D:78:9D:0A:11:2A:76:80:8C:62:51:28:FA:F9:88:59:89:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/186c9d47-962c-3e11-ab2f-5c5d9cd37943.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:f001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:b0:11:96:92:ae:dd:bb:fc:74:40:7c:b6:88:26:83:ec:ef:
         97:11:89:ee:47:8c:97:c5:9f:23:f5:c0:d9:83:ce:71:71:ca:
         53:f1:dc:bd:4f:e4:e2:59:92:e9:25:64:c9:b6:82:39:d0:8b:
         22:d1:b9:66:da:79:52:52:62:a0:b8:22:b0:51:ea:f2:e3:70:
         e6:d1:b4:a1:22:9a:ea:50:77:25:75:97:5a:b4:34:b1:63:cf:
         e2:5e:3f:aa:be:6f:d7:a6:bf:1a:81:d6:c8:74:4e:bd:7b:28:
         5c:6f:ba:9b:df:d3:e4:7e:ef:69:ae:c8:56:6c:32:4f:91:0c:
         1c:bf:00:c9:68:f5:f9:a9:d2:6b:2d:24:fa:c1:51:4c:25:c5:
         d7:70:dc:4b:1c:26:62:e3:6b:c3:1a:c3:2e:fd:cf:0b:4c:3c:
         e6:b4:af:72:8b:b2:f4:06:3d:b3:e0:25:b0:ff:f1:8c:07:d4:
         86:d8:22:2a:06:c9:fd:3f:c6:0d:e0:48:a4:cf:d3:00:6a:3b:
         6a:80:71:ec:2a:32:72:5b:63:e4:ad:f8:2b:d6:7f:8e:e2:d7:
         25:db:ac:6b:d2:d6:5e:d4:80:5a:82:ec:5d:ed:f6:d4:93:8e:
         9b:9b:97:3e:e6:96:08:9a:a7:ca:f9:df:71:a5:5c:55:e0:98:
         a5:b3:3d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----