Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/56a98557-a076-3cf9-a5eb-20859e243d26.roa
File:                     56a98557-a076-3cf9-a5eb-20859e243d26.roa (raw, json)
Hash identifier:          nuvPqDhczu566FHtccqQj4C13rp/aK8QhGpEYJige/Y=
Subject key identifier:   FD:C6:A9:58:74:CC:0D:55:90:DA:35:21:49:5E:8E:7F:89:D9:79:E9
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F43285848EF613B0C50126EC49814B380
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/56a98557-a076-3cf9-a5eb-20859e243d26.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     20253
IP address blocks:        2606:bc40:21::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:3b:0c:50:12:6e:c4:98:14:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=b255ee40-9c8a-42fc-915a-12d670345349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:da:6d:e6:94:85:c8:10:f5:82:32:2a:85:40:
                    6e:70:45:0f:18:8f:9d:bd:24:a2:2b:88:59:17:2d:
                    10:78:c8:d3:f3:15:81:88:9f:47:c1:66:fb:c7:f1:
                    c3:90:1b:15:fe:04:d4:d0:63:77:38:4e:25:cb:e4:
                    c7:7a:85:cf:97:cf:cb:dc:86:e9:98:45:9a:6c:4c:
                    21:39:41:ce:c9:48:a2:fc:a6:14:c1:9c:ea:6e:24:
                    0a:6f:83:13:37:e0:b3:c5:0b:e4:06:b4:e2:f1:ca:
                    3d:c8:bf:ef:9c:7c:b6:0e:b4:39:11:75:6f:57:53:
                    f0:d4:54:2c:d6:45:ac:eb:4b:43:2c:ae:76:f3:c2:
                    7a:97:14:b6:2a:09:52:e7:da:ca:2a:1f:6f:9e:20:
                    09:a8:c0:c3:59:ee:bb:2c:a7:91:fb:36:9d:3a:10:
                    05:19:5f:e0:74:c0:85:74:e3:0d:d2:61:1e:a2:92:
                    86:d6:06:52:72:7a:3a:c4:bd:c5:1a:1e:9d:f7:21:
                    8f:6b:3a:99:7d:9a:c4:b0:8f:ad:3f:cc:06:9c:63:
                    3c:80:1c:ad:ee:2f:af:11:c3:74:60:b3:ed:04:a2:
                    f4:55:ac:88:0f:38:ce:05:e7:68:6d:3f:df:29:7a:
                    ae:3f:80:b1:e9:98:21:4a:5f:7b:73:3a:07:87:45:
                    02:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:C6:A9:58:74:CC:0D:55:90:DA:35:21:49:5E:8E:7F:89:D9:79:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/56a98557-a076-3cf9-a5eb-20859e243d26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:21::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:f8:7a:da:b7:11:8d:3b:c2:c5:14:e4:59:b8:f7:63:69:09:
         b8:b1:d3:b3:b0:d9:85:ca:df:c1:39:47:25:38:a1:39:be:82:
         77:c2:ed:ca:4f:94:a6:31:be:1a:ef:ae:99:4f:0e:7a:cb:77:
         b3:32:ba:65:d9:9f:4a:9d:71:95:54:ec:97:c4:d8:ea:c8:fe:
         b8:b3:c2:8f:5e:7b:7e:83:ee:f7:59:80:07:c3:17:de:2b:ea:
         83:ea:dd:52:8e:c9:ee:d4:f2:95:ae:da:6e:32:66:5d:fc:81:
         4c:7f:b1:cb:ae:de:3c:68:f8:d1:26:50:32:cf:63:11:c2:58:
         19:81:cc:21:05:6d:fb:7c:58:bd:ca:8c:b4:f3:29:35:cc:84:
         34:a5:25:21:65:a0:77:18:d8:6f:2b:89:ff:d0:06:c7:c6:07:
         5c:fa:1f:5a:f4:6d:e3:09:e6:dc:7f:26:62:e4:ca:b4:9b:1c:
         f0:e5:59:6e:87:cd:bd:86:8c:d0:3f:aa:57:e5:76:1d:5a:37:
         c1:ad:de:0d:b7:88:24:21:3e:e6:8c:e0:ce:82:c7:e8:97:71:
         09:b7:25:db:af:0f:7b:23:7a:32:76:0e:bf:b8:0a:73:98:c7:
         42:45:25:9f:c3:45:a0:30:3e:7e:0f:d3:e4:e4:12:b7:ee:d2:
         5c:5f:bc:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----