Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/0f6936b7-e0af-318f-ad3a-94e92925bc95.roa
File:                     0f6936b7-e0af-318f-ad3a-94e92925bc95.roa (raw, json)
Hash identifier:          dRYMvalroLFS+V6q5fKHIu3EyvSedGPfIeeWM8LRfHQ=
Subject key identifier:   16:C0:7E:94:7A:1D:65:CA:AA:0E:4E:89:9B:B0:12:0B:E6:32:27:A4
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F432858494CC9467280666AC6486B5480
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/0f6936b7-e0af-318f-ad3a-94e92925bc95.roa
Signing time:             Tue 25 Mar 2025 01:00:40 +0000
ROA not before:           Tue 25 Mar 2025 01:00:40 +0000
ROA not after:            Mon 23 Jun 2025 01:00:40 +0000
asID:                     26744
IP address blocks:        2605:a00::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4c:c9:46:72:80:66:6a:c6:48:6b:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Mar 25 01:00:40 2025 GMT
            Not After : Jun 23 01:00:40 2025 GMT
        Subject: CN=8164a835-8c93-4630-b046-cf6c86a1a5e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:ad:31:02:bb:0f:51:8f:bf:1d:4d:7e:3c:80:
                    ba:32:0b:35:3c:d5:a2:a8:7c:cd:5f:2c:91:f5:7b:
                    d7:87:f6:10:1a:4b:8e:ef:8d:ec:c1:a0:95:29:5f:
                    64:eb:0a:f4:57:30:0f:0a:93:d6:94:cf:0f:c7:dc:
                    c5:53:c8:45:04:9c:b1:dd:a2:af:a2:1e:da:89:9e:
                    ba:ca:0f:86:7f:6d:7e:c9:bf:b1:9b:27:95:55:5d:
                    e2:4b:1b:2d:eb:bb:65:88:19:af:6c:95:41:23:a1:
                    61:40:67:2a:a8:dc:7e:76:09:12:86:36:f7:60:e7:
                    5e:b4:b6:d2:31:7c:47:d1:77:f3:da:27:90:59:6a:
                    db:ec:c2:a4:32:23:bb:79:04:22:36:59:c5:ee:a6:
                    eb:1f:e4:2f:84:cd:28:9e:ad:ae:1f:80:39:67:71:
                    b2:85:b1:fe:8e:22:43:90:74:02:84:63:50:74:c9:
                    eb:6b:27:d4:71:e3:c2:6c:04:18:a7:45:8c:50:08:
                    91:db:6d:18:47:7b:7f:a2:12:05:a3:c1:1d:34:fa:
                    22:1b:5d:f4:17:89:06:ea:93:9f:d9:d3:cd:8b:fe:
                    e0:c5:da:d9:26:40:8b:f1:4b:91:19:82:74:fb:3e:
                    49:9f:a6:5c:61:7d:c0:60:31:60:4f:32:33:ce:4c:
                    67:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:C0:7E:94:7A:1D:65:CA:AA:0E:4E:89:9B:B0:12:0B:E6:32:27:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/0f6936b7-e0af-318f-ad3a-94e92925bc95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:bf:47:d9:57:17:47:31:2d:a6:d9:ae:f4:60:81:2b:0d:73:
         38:e3:8f:d7:1c:e3:e5:43:02:1d:63:6a:87:bf:fe:99:97:8a:
         82:1e:81:af:39:37:ba:6a:c1:ce:8d:dc:13:73:80:7d:1a:2c:
         c5:c6:d4:bb:ff:03:dc:51:00:1f:62:3f:19:c2:70:67:c9:60:
         3a:91:ef:81:79:3e:66:eb:49:5e:c2:01:26:8e:b9:f0:7b:c1:
         35:ab:54:25:46:b7:ec:b6:d1:9d:79:0b:fb:0e:f4:7f:e0:7a:
         1e:26:c4:34:20:01:5d:e5:8d:4a:7e:12:91:77:8f:80:f2:96:
         dd:be:21:aa:a0:2b:20:91:e0:61:d0:62:1e:92:06:cf:41:7f:
         a2:dd:f1:94:6f:c2:1a:29:ad:4c:56:25:ca:9b:1b:fa:a9:ca:
         9a:05:e8:d5:5b:f9:82:22:48:d1:4a:5d:83:f4:c9:5a:ef:e2:
         d0:0c:6a:6a:d8:66:30:5e:ab:56:b0:bf:3e:fa:4c:6f:1e:e1:
         1d:52:a8:ae:59:38:9d:61:87:db:f3:e6:33:b7:9a:03:7c:0e:
         58:67:31:d9:4c:5d:fe:f6:ce:06:11:c9:4e:03:11:ea:d5:8a:
         fb:4b:aa:29:52:52:39:80:db:ab:bf:ea:0a:3c:3f:a2:27:43:
         4c:e6:97:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----