Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66/eb2b6b77-071b-3f3f-8a72-b50512321be8.roa
File:                     eb2b6b77-071b-3f3f-8a72-b50512321be8.roa (raw, json)
Hash identifier:          elYNm5YbuEPchleWlWbgSHA8GODwL/DqKmgOj7NqqGc=
Subject key identifier:   CA:6C:F7:86:35:3D:8F:CE:BE:81:83:07:A0:BE:CF:93:90:F7:AA:6C
Certificate issuer:       /CN=423dceca-a5b5-4f9a-8509-49ac01f41c66
Certificate serial:       010D0C9F43285848CE9B7F0FD258F7D9C472F930
Authority key identifier: FF:75:5D:D3:4A:2F:06:D2:A2:77:F0:71:10:E1:88:FB:FE:C1:D7:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66/eb2b6b77-071b-3f3f-8a72-b50512321be8.roa
Signing time:             Fri 07 Feb 2025 20:16:43 +0000
ROA not before:           Fri 07 Feb 2025 20:16:43 +0000
ROA not after:            Thu 08 May 2025 19:16:43 +0000
asID:                     63101
IP address blocks:        2602:f824:2::/48 maxlen: 48
                          2602:f824:3::/48 maxlen: 48
                          2602:f824:4::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ce:9b:7f:0f:d2:58:f7:d9:c4:72:f9:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=423dceca-a5b5-4f9a-8509-49ac01f41c66
        Validity
            Not Before: Feb  7 20:16:43 2025 GMT
            Not After : May  8 19:16:43 2025 GMT
        Subject: CN=2f1e017b-f021-4866-b72a-1e92734935b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:af:bc:93:4d:32:59:06:e7:58:64:22:fe:f1:
                    a1:c4:96:6e:b6:4c:a9:25:45:3d:79:78:fb:92:91:
                    1d:f6:65:a7:74:fe:e9:45:d1:e1:ce:b4:f5:97:1d:
                    72:bf:b3:e3:19:72:0c:2e:00:9d:90:ef:8c:43:b3:
                    bd:b2:f7:15:90:54:81:ae:b0:01:18:85:e2:a5:96:
                    7b:d9:b7:fc:b5:89:23:78:cb:c2:da:56:57:ff:0e:
                    a4:84:3d:62:1f:81:b7:05:be:ef:a9:fa:e4:da:57:
                    b6:4c:a6:ac:a4:0b:50:64:44:a2:b6:de:36:2c:3d:
                    28:a5:be:2b:3a:6c:2a:01:6e:0d:e8:01:b2:b1:70:
                    12:3c:ab:39:6e:e8:4f:5c:7c:bf:91:c0:d9:4f:18:
                    15:ca:36:c0:44:d9:32:e9:3b:33:df:62:2a:52:77:
                    7b:6c:d0:f4:7a:f8:24:03:fc:4b:24:4e:68:d9:7a:
                    c4:f6:ef:2d:3f:e1:cf:7e:6e:e6:86:63:95:a7:62:
                    f1:38:4f:95:a7:d4:89:09:7b:c7:fb:0a:02:01:b0:
                    cb:58:e6:84:98:fa:34:b6:81:2a:b7:f2:f3:bf:9c:
                    2c:5e:5e:c6:77:45:62:41:1d:c8:89:00:80:3b:af:
                    95:62:f5:fa:56:06:4f:0b:21:1f:ce:02:a7:73:7f:
                    b2:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:6C:F7:86:35:3D:8F:CE:BE:81:83:07:A0:BE:CF:93:90:F7:AA:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66/eb2b6b77-071b-3f3f-8a72-b50512321be8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66/423dceca-a5b5-4f9a-8509-49ac01f41c66.crl

            X509v3 Authority Key Identifier:
                keyid:FF:75:5D:D3:4A:2F:06:D2:A2:77:F0:71:10:E1:88:FB:FE:C1:D7:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f824:2::-2602:f824:4:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:32:4c:14:b9:1f:b0:99:c6:f6:48:00:10:6a:bd:20:05:16:
         76:b6:d1:71:d0:2d:6b:46:2b:6e:cf:de:e6:07:61:fd:1b:e0:
         74:c6:98:f4:04:5b:85:c0:65:2f:bd:29:69:13:d1:ca:6a:ea:
         08:f0:f0:19:5d:02:6f:25:dc:d6:f7:1b:61:33:a4:55:d0:02:
         7b:12:77:ef:c8:7c:19:4b:cd:b2:b4:83:6c:7c:97:73:99:91:
         96:cb:67:5e:06:54:8b:71:6f:38:e8:08:41:68:ed:88:1d:55:
         8d:e2:53:ca:f6:16:01:b5:c4:18:de:de:1b:64:30:23:8d:ea:
         89:53:82:f1:ec:0d:c8:33:c6:9d:78:3c:23:03:6c:40:00:a7:
         8d:03:cb:d7:e0:d5:dd:70:31:a2:a6:8c:b3:28:24:be:be:5a:
         fc:a6:4e:5d:dd:5f:9a:67:3d:48:5f:72:6d:e1:b9:36:90:29:
         b3:46:33:36:fa:8d:95:83:bc:c7:f2:8e:b8:4e:27:ac:e7:49:
         53:67:22:46:a9:ad:0a:ce:1c:d4:15:1f:1d:7b:0d:5c:32:f5:
         c7:51:83:53:6b:cb:7a:62:39:78:da:92:01:08:2a:c8:d6:65:
         2d:6a:73:f2:e2:c8:7b:dd:43:d0:53:ba:d4:6f:33:70:1d:be:
         0c:6e:19:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----