Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/6ccdf820-69dc-3ad4-8e96-6aec7ff0c4a7.roa
File:                     6ccdf820-69dc-3ad4-8e96-6aec7ff0c4a7.roa (raw, json)
Hash identifier:          KtwvW235wrWUucXf15FzpILkGGHjVrXlc0gnMBSakB8=
Subject key identifier:   44:5B:3D:61:7E:96:DA:BB:D8:C0:88:7B:F3:0D:05:B7:0C:A5:83:D6
Certificate issuer:       /CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311
Certificate serial:       010D0C9F432858496CE454DB69F200A5444270C0
Authority key identifier: 0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/6ccdf820-69dc-3ad4-8e96-6aec7ff0c4a7.roa
Signing time:             Sat 05 Apr 2025 13:01:01 +0000
ROA not before:           Sat 05 Apr 2025 13:01:01 +0000
ROA not after:            Fri 04 Jul 2025 13:01:01 +0000
asID:                     25697
IP address blocks:        2604:ed40::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6c:e4:54:db:69:f2:00:a5:44:42:70:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311
        Validity
            Not Before: Apr  5 13:01:01 2025 GMT
            Not After : Jul  4 13:01:01 2025 GMT
        Subject: CN=85c42a48-5a09-424b-9a4b-158e759144c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:0b:51:8d:a0:f9:9f:62:91:6f:8f:ca:4e:9c:
                    e1:22:18:a6:b2:28:6c:8a:91:9a:ad:df:31:b0:be:
                    8e:7b:cd:f3:e1:ce:7e:f0:fa:02:bb:12:6f:17:e2:
                    10:a4:28:40:29:7c:ee:66:60:ba:7c:36:13:3e:c6:
                    13:63:b8:25:8f:a0:59:bd:ba:dd:78:94:97:2a:56:
                    0e:41:96:cb:34:fd:e4:67:05:3f:4b:66:21:b2:88:
                    93:e9:86:76:2b:36:5c:d4:5c:f5:2b:0d:99:8d:84:
                    ce:76:b9:48:00:d9:4a:ab:2a:69:b7:2c:6d:27:b5:
                    cb:42:ba:4f:b0:c3:5f:bd:ef:06:f1:88:4e:48:66:
                    34:23:c8:35:80:c4:9f:f8:f8:55:35:a8:3d:9e:ae:
                    e7:1b:26:01:c3:15:7f:07:52:db:ea:fe:92:e2:5d:
                    76:e7:a9:a7:a1:cc:9c:71:90:27:ec:d5:72:8e:71:
                    cf:ee:f2:ea:ec:e9:40:d0:76:6b:27:69:73:51:5b:
                    49:7b:d6:e2:0d:07:93:d2:83:ed:9a:06:e0:8c:a9:
                    64:5a:1e:3b:d8:73:ff:1b:b1:f2:4a:ee:56:22:b6:
                    05:6a:86:ad:ab:08:1b:15:32:32:ea:13:33:46:54:
                    7d:e9:ae:51:9a:38:b6:da:8e:61:0b:da:61:39:78:
                    b2:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:5B:3D:61:7E:96:DA:BB:D8:C0:88:7B:F3:0D:05:B7:0C:A5:83:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/6ccdf820-69dc-3ad4-8e96-6aec7ff0c4a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl

            X509v3 Authority Key Identifier:
                keyid:0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:ed40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:75:71:e8:00:9c:63:ec:1f:b5:68:ca:bb:5f:2b:f0:d7:cf:
         4b:36:5b:68:d6:15:78:58:f2:09:cf:e7:4c:15:aa:19:09:52:
         77:8c:3d:e4:06:63:81:08:15:57:88:63:15:99:c1:ef:ac:26:
         79:7f:0d:c3:40:d3:eb:f9:77:c0:a7:58:64:8e:c9:ea:6a:5f:
         3a:d8:8b:04:1e:d6:ff:68:7e:61:3d:f8:04:76:2c:e5:bf:61:
         f8:79:5c:45:fb:1b:f6:aa:b7:24:35:54:23:fb:c8:6c:d1:bc:
         f9:18:65:1b:ea:3e:43:9f:3b:6d:87:77:17:c6:9a:ea:4e:a8:
         88:bb:45:c0:b7:f5:1b:25:62:bb:a7:9e:b1:f0:89:4a:e1:9d:
         94:5f:da:8c:86:ac:e6:6c:43:0a:ad:a2:9b:6e:f1:b2:75:6a:
         b8:5c:11:35:89:78:56:0d:44:0c:bb:ed:db:1f:bb:b6:cc:81:
         ab:1e:c4:38:cd:9f:b1:3e:45:1d:5f:11:d8:6d:44:48:14:53:
         6a:c4:35:54:1a:c4:83:c1:45:0f:42:46:16:e7:7d:65:40:75:
         22:6a:f4:f3:ba:b3:4e:53:9f:33:41:a4:59:0f:65:cf:d6:22:
         20:14:ca:9a:fc:f4:ff:47:1f:b5:11:dd:d3:c3:d4:90:40:3c:
         1a:75:5a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----