Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66/69e4c6e1-7d31-3219-97d4-24ced0dc33d4.roa
File:                     69e4c6e1-7d31-3219-97d4-24ced0dc33d4.roa (raw, json)
Hash identifier:          yWJbajaOua+z117hRG4BpbRQH6RZ2zVqgZ9rf5gBVaM=
Subject key identifier:   9A:40:02:A7:78:80:0E:07:47:F5:A3:2C:A9:C0:2F:33:CE:EC:E8:B1
Certificate issuer:       /CN=423dceca-a5b5-4f9a-8509-49ac01f41c66
Certificate serial:       010D0C9F43285848D6411334C088E7A9C8A3BEC0
Authority key identifier: FF:75:5D:D3:4A:2F:06:D2:A2:77:F0:71:10:E1:88:FB:FE:C1:D7:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66/69e4c6e1-7d31-3219-97d4-24ced0dc33d4.roa
Signing time:             Mon 10 Feb 2025 14:00:52 +0000
ROA not before:           Mon 10 Feb 2025 14:00:52 +0000
ROA not after:            Sun 11 May 2025 13:00:52 +0000
asID:                     63101
IP address blocks:        2602:f824::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d6:41:13:34:c0:88:e7:a9:c8:a3:be:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=423dceca-a5b5-4f9a-8509-49ac01f41c66
        Validity
            Not Before: Feb 10 14:00:52 2025 GMT
            Not After : May 11 13:00:52 2025 GMT
        Subject: CN=4141e1b9-7d58-460b-b5bc-6b8caea2a9b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a2:4c:3e:c2:28:b0:ff:5d:44:9a:4e:f1:e3:
                    f2:28:a9:10:d3:6f:f9:13:5d:90:0f:d5:12:3c:c2:
                    25:36:8a:e2:20:68:63:f8:be:d7:a4:62:f5:ac:35:
                    ad:09:9f:8a:8e:a8:63:90:88:fd:5f:31:ee:e2:10:
                    a4:0f:2f:1d:fb:90:0e:6d:1e:83:ef:78:1e:07:06:
                    b7:86:41:79:c0:9a:e1:95:45:77:dc:e4:13:2e:41:
                    ac:11:21:ed:76:4c:32:80:07:af:2d:b2:95:c8:87:
                    99:17:a4:5e:58:82:74:f4:f7:20:7b:51:77:3e:42:
                    0a:e9:0c:5a:aa:d7:6b:59:b0:23:12:8d:d3:a8:3a:
                    78:23:5e:5a:51:ad:8a:ee:04:b2:ca:ef:f4:fe:2c:
                    d6:93:1d:c2:29:b3:ca:6b:ed:92:3f:79:d0:3e:b1:
                    d4:ec:f6:9e:57:bc:13:d0:01:44:66:87:1a:f5:af:
                    30:7d:90:e2:46:ba:84:f7:55:48:59:94:47:a9:f2:
                    26:2b:ab:83:31:de:52:d1:39:3c:7d:e3:af:4b:b7:
                    11:32:d0:b8:88:16:96:a5:45:45:9d:b0:51:03:c4:
                    89:94:4c:61:92:81:74:56:66:d9:73:db:92:ab:c2:
                    50:3d:5c:73:f7:cc:ea:d8:0e:c2:71:0a:57:68:64:
                    45:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:40:02:A7:78:80:0E:07:47:F5:A3:2C:A9:C0:2F:33:CE:EC:E8:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66/69e4c6e1-7d31-3219-97d4-24ced0dc33d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66/423dceca-a5b5-4f9a-8509-49ac01f41c66.crl

            X509v3 Authority Key Identifier:
                keyid:FF:75:5D:D3:4A:2F:06:D2:A2:77:F0:71:10:E1:88:FB:FE:C1:D7:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f824::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:56:73:3f:63:cf:a5:ff:6e:4b:19:25:db:7f:66:2d:00:af:
         f2:a1:65:e8:73:19:7d:f9:0c:b2:70:28:d4:c3:35:9d:a6:3b:
         80:fc:f3:88:b9:08:3f:f9:b5:9a:55:a5:7f:d8:0a:c6:50:cb:
         52:f6:75:2b:85:38:db:07:95:48:f4:c1:15:7e:2e:c3:9c:e4:
         f5:fa:00:3c:45:6b:ec:ef:86:2d:28:51:74:9b:93:20:a2:dd:
         15:36:a5:55:a0:dc:30:ef:16:c5:cf:e8:66:52:f4:bd:a3:6b:
         b1:4d:f5:fc:e8:04:99:a3:3c:3d:dd:93:84:a3:a0:54:e3:68:
         88:e0:c9:4e:82:fd:21:53:c8:92:66:ee:33:c5:56:ff:fd:aa:
         69:39:d5:7a:93:12:55:bf:7c:86:32:95:81:9f:d9:ee:0b:e7:
         3d:17:05:12:0b:57:23:a0:63:18:e6:1d:04:1e:67:2e:29:0e:
         80:b7:d1:52:b2:e9:f4:43:9e:28:35:03:4b:f1:9e:66:30:c7:
         d9:4d:80:59:ff:b2:d9:7e:c0:5d:9d:68:af:0b:90:0a:56:30:
         97:a7:ce:16:e0:fb:60:13:8c:16:93:69:5a:0c:9a:17:2a:60:
         94:79:99:92:51:8c:2d:e1:62:57:35:c8:b8:8c:69:b8:18:60:
         81:00:06:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----