Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a975a5d-2307-4688-a186-4a355ff45581/17250f54-5119-3396-8248-a8f3e305a3f8.roa
File:                     17250f54-5119-3396-8248-a8f3e305a3f8.roa (raw, json)
Hash identifier:          hx1ANgg4eElcixVqi2IAo4b8hrmuaWrKe2etdC1nXFw=
Subject key identifier:   08:74:16:B4:81:07:D8:38:52:C8:51:12:F4:A7:0B:E4:50:B9:41:83
Certificate issuer:       /CN=3a975a5d-2307-4688-a186-4a355ff45581
Certificate serial:       010D0C9F4328584965E97E217F696384BBD78280
Authority key identifier: 0C:2D:81:CC:F7:46:F4:16:73:1E:6C:69:B6:5D:95:2B:82:6C:51:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a975a5d-2307-4688-a186-4a355ff45581.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a975a5d-2307-4688-a186-4a355ff45581/17250f54-5119-3396-8248-a8f3e305a3f8.roa
Signing time:             Thu 03 Apr 2025 01:00:46 +0000
ROA not before:           Thu 03 Apr 2025 01:00:46 +0000
ROA not after:            Wed 02 Jul 2025 01:00:46 +0000
asID:                     32473
IP address blocks:        2605:6740::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:65:e9:7e:21:7f:69:63:84:bb:d7:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a975a5d-2307-4688-a186-4a355ff45581
        Validity
            Not Before: Apr  3 01:00:46 2025 GMT
            Not After : Jul  2 01:00:46 2025 GMT
        Subject: CN=11d20578-fe0c-4cf0-b3f5-1eff48bd429f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3b:fd:94:2e:97:69:89:3d:77:5f:3f:60:fa:
                    d0:bd:b1:ba:09:f9:ca:11:57:66:d8:b2:f5:bd:91:
                    97:fc:f3:9d:75:46:31:61:ae:74:48:8e:77:7a:bf:
                    57:6c:e1:34:6c:32:05:f2:3e:c4:1e:a3:f5:3f:33:
                    65:36:69:2f:7a:b2:7e:c3:f9:6c:47:5e:e4:7e:1c:
                    6a:03:ea:21:dc:22:85:f4:90:50:d9:b8:1c:1a:ca:
                    da:8e:de:ed:ff:9a:f3:84:73:e8:dc:fe:a2:46:5f:
                    f5:df:c3:1b:7d:0d:5e:a6:f5:8d:7b:9a:5a:fe:1a:
                    68:8c:cf:f1:91:3c:e5:78:ee:04:b5:f9:85:b4:a8:
                    ea:14:29:e7:59:e3:54:e3:2b:08:44:1c:0d:e7:52:
                    90:52:a6:b9:9f:a4:5a:ab:22:bc:7d:53:d0:65:43:
                    c4:af:2e:3e:55:7a:65:96:e0:26:70:a6:dd:85:1f:
                    f2:ab:a3:30:f0:11:53:03:f8:7d:90:f1:e3:42:a1:
                    1a:04:56:ac:1a:09:f0:ba:d5:cc:94:ed:df:2a:b0:
                    54:b5:7d:34:cc:b1:ac:b7:6a:d9:5e:47:c9:5b:b8:
                    5c:4c:e8:8d:a2:f8:63:ac:87:f8:8a:bf:03:01:af:
                    02:34:1b:e4:15:b1:7c:fd:72:a8:94:f4:84:12:7a:
                    16:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:74:16:B4:81:07:D8:38:52:C8:51:12:F4:A7:0B:E4:50:B9:41:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a975a5d-2307-4688-a186-4a355ff45581/17250f54-5119-3396-8248-a8f3e305a3f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a975a5d-2307-4688-a186-4a355ff45581/3a975a5d-2307-4688-a186-4a355ff45581.crl

            X509v3 Authority Key Identifier:
                keyid:0C:2D:81:CC:F7:46:F4:16:73:1E:6C:69:B6:5D:95:2B:82:6C:51:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a975a5d-2307-4688-a186-4a355ff45581.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:6740::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:b7:12:78:bc:d7:af:d7:e2:6c:ca:1f:8c:48:bc:c9:7f:d1:
         50:4b:5b:45:40:e5:20:1a:c2:af:c9:d9:32:1f:7b:1c:65:cb:
         46:68:46:cf:d4:e1:60:4f:1d:5b:2f:a1:53:1e:b0:b8:7b:65:
         a7:5b:61:3d:63:28:0f:3a:d0:0d:b7:bb:9f:d5:4f:3f:88:0e:
         5f:47:20:68:1e:6c:33:8b:6c:9d:36:84:c7:9e:ef:09:55:aa:
         46:5a:0b:b1:18:c5:b8:11:7c:5b:00:f2:1c:da:8b:29:31:c3:
         35:ba:e7:85:c9:a9:db:bf:e4:3b:c1:dc:ae:d8:24:dd:3f:23:
         a0:be:4a:47:f3:51:ac:48:df:02:0e:f3:94:6e:4c:05:56:75:
         11:92:91:6c:c4:fb:27:da:2a:f2:9c:26:ab:16:86:d2:66:71:
         bd:41:16:87:8f:dd:36:3a:09:09:38:85:96:19:5b:e0:a2:00:
         70:e1:e6:f1:60:4f:0c:5b:44:f4:41:9d:36:ac:5e:32:23:81:
         5f:ab:26:cd:95:36:e1:81:22:37:1e:c5:54:7f:4f:01:94:07:
         f3:68:75:e6:a1:12:a7:02:05:3c:8b:77:c0:cb:72:cb:9c:be:
         28:6c:fb:23:0d:9d:60:56:fb:6e:e1:72:e1:7d:06:06:0e:ef:
         13:11:2f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----