Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8/bb8cca25-c470-319d-94a9-304db5760ead.roa
File:                     bb8cca25-c470-319d-94a9-304db5760ead.roa (raw, json)
Hash identifier:          kHT2+YjGFJRysuLvdYuw5jO+yRWzkZFnlH0wtjr6JSE=
Subject key identifier:   B4:5F:9A:B1:35:9E:21:8F:BA:68:96:63:C2:8E:26:35:52:ED:1B:2A
Certificate issuer:       /CN=932105b1-ce56-44a7-9670-6f4e56578ef8
Certificate serial:       010D0C9F43285848BE25C3803EBD05EAD5967780
Authority key identifier: DA:85:D7:87:30:4F:B5:0F:C3:7A:12:C4:6E:32:82:EE:26:BD:42:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8/bb8cca25-c470-319d-94a9-304db5760ead.roa
Signing time:             Sat 01 Feb 2025 22:46:34 +0000
ROA not before:           Sat 01 Feb 2025 22:46:34 +0000
ROA not after:            Fri 02 May 2025 21:46:34 +0000
asID:                     53724
IP address blocks:        2602:f7f8:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:be:25:c3:80:3e:bd:05:ea:d5:96:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=932105b1-ce56-44a7-9670-6f4e56578ef8
        Validity
            Not Before: Feb  1 22:46:34 2025 GMT
            Not After : May  2 21:46:34 2025 GMT
        Subject: CN=7dd1b5b7-cb2c-48e0-8f8a-af4c5acbc7e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:cb:26:eb:ef:48:35:96:7d:26:3c:39:9b:bf:
                    5a:37:b7:10:b4:43:85:57:96:c6:38:25:97:59:e1:
                    ca:17:82:d0:3a:ab:3c:62:e0:2d:6f:22:f6:c6:20:
                    1d:62:fd:81:33:82:0f:73:d6:df:57:5d:8a:16:56:
                    c3:09:b9:0d:75:98:c8:3f:e4:35:6b:5e:2f:e3:4e:
                    a8:3e:96:83:57:58:81:21:d8:d0:6c:62:f2:22:cf:
                    37:6b:15:4a:8c:91:25:75:af:7e:a4:32:74:28:d4:
                    a5:61:33:2e:58:94:80:da:9d:76:d5:b4:2f:23:4a:
                    45:10:40:e7:4f:4d:45:5b:da:61:c5:c8:30:b9:e0:
                    5d:2f:46:cc:8d:71:ec:5b:1d:23:62:57:e8:43:ca:
                    31:bd:ab:c4:fd:d6:13:3a:0d:1a:ba:4e:fe:7a:bb:
                    0c:d1:bf:99:22:dd:6d:1b:83:88:bc:b4:93:65:a6:
                    05:e5:41:e9:6f:db:2c:82:68:fa:1f:17:64:82:65:
                    43:db:a6:30:f5:1c:f6:da:b0:cc:dd:89:b7:af:fd:
                    dd:82:42:a6:96:99:bd:a8:4c:86:af:47:7b:7e:72:
                    7b:89:2a:b9:a3:d8:4c:c0:e3:65:8f:35:cf:0a:32:
                    ca:48:7d:00:bd:7f:94:c9:21:5c:dd:46:f8:9f:d0:
                    07:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:5F:9A:B1:35:9E:21:8F:BA:68:96:63:C2:8E:26:35:52:ED:1B:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8/bb8cca25-c470-319d-94a9-304db5760ead.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8/932105b1-ce56-44a7-9670-6f4e56578ef8.crl

            X509v3 Authority Key Identifier:
                keyid:DA:85:D7:87:30:4F:B5:0F:C3:7A:12:C4:6E:32:82:EE:26:BD:42:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7f8:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:f2:df:5f:ec:62:15:73:01:df:d9:25:60:80:19:a0:15:61:
         33:72:bb:05:b1:dd:8d:7d:76:11:0c:ad:26:d8:19:d0:96:06:
         f0:0c:16:0e:4c:c8:c9:24:68:5f:cd:4a:48:54:af:ad:27:df:
         2a:7f:fd:d4:18:bb:00:fd:97:05:e1:15:c1:9e:4e:69:0c:4b:
         57:3f:07:76:43:dc:b9:50:61:1b:85:97:ac:0a:eb:9c:92:6c:
         1f:44:6a:30:51:a2:a4:e5:81:6a:ef:8a:81:0b:7b:76:3f:04:
         80:5d:3b:e0:de:6f:7a:b5:d2:69:7f:4b:9f:84:60:48:df:b2:
         1c:84:34:e4:21:d6:71:b7:2c:46:0d:61:3b:7b:8f:be:b2:9b:
         56:e3:4e:dc:b3:45:e4:1a:49:7f:1c:44:53:9d:97:ab:26:71:
         0d:d5:c2:e1:a6:d7:e0:b0:66:53:e4:73:82:ff:15:4b:a3:03:
         56:01:5f:e7:a3:f4:8c:40:42:3f:04:84:d2:49:db:b3:4f:b0:
         94:23:80:c7:c0:4f:68:1a:40:13:a7:ca:59:75:e1:7d:97:35:
         42:99:19:fa:b1:b4:46:29:b3:d0:d1:b8:7f:2a:31:43:5f:5a:
         e9:11:29:a3:59:17:c4:6a:ba:fb:62:0d:14:bd:4c:58:60:da:
         48:f5:bc:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----