Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/1f84397b-44ed-30dc-81f9-30616da81340.roa
File:                     1f84397b-44ed-30dc-81f9-30616da81340.roa (raw, json)
Hash identifier:          xliRBTEYRdsgaeMv159NpXilw7iBs3scuJB1l/EezAk=
Subject key identifier:   CD:85:D6:15:20:1B:9A:35:8A:0C:50:B9:BC:64:DF:94:E0:BE:ED:68
Certificate issuer:       /CN=0edec576-87d0-4ec6-9e13-394230996e53
Certificate serial:       010D0C9F43285848EF615D0423B058321D384F00
Authority key identifier: 55:54:75:F0:0F:6F:F6:46:C3:4E:32:A8:4D:5F:C5:CA:E6:98:08:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/1f84397b-44ed-30dc-81f9-30616da81340.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     398493
IP address blocks:        2602:fd37:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:5d:04:23:b0:58:32:1d:38:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0edec576-87d0-4ec6-9e13-394230996e53
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=54ec25a9-2054-4ee6-8669-2b5ce5bcab07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f4:73:a6:91:69:f2:ae:0d:4d:ee:4d:41:f0:
                    50:e6:ad:ec:5a:4f:ce:93:02:5d:0d:b6:76:ac:1f:
                    c9:a7:5e:21:c3:52:75:8b:41:74:c2:f8:7f:9a:3b:
                    07:60:f2:00:00:d0:11:5a:0c:31:4c:ad:f2:0d:ab:
                    6a:08:ce:6b:e7:ae:e3:ae:fb:e5:65:79:80:25:ea:
                    5a:3c:c8:f6:f6:5b:01:8e:f6:d1:32:e3:ef:65:06:
                    56:d3:da:d2:06:14:66:1f:58:83:e5:8e:2b:fa:af:
                    9f:3b:34:f8:19:8e:14:05:0e:1d:02:a6:78:f3:69:
                    f7:1c:3e:97:79:71:45:45:c0:5a:63:03:fc:05:f4:
                    cb:0c:46:0a:f3:62:0e:26:99:e6:6b:66:42:06:04:
                    b9:8b:61:0f:3d:b1:ce:6a:4d:d7:36:f9:1c:b7:b3:
                    b6:f5:ac:7d:7c:bc:40:4e:64:0d:6f:e8:30:70:9e:
                    9e:c0:b3:43:b4:35:e5:10:3c:14:a6:b7:3e:55:29:
                    9b:84:ff:a2:bf:7f:33:ce:0b:00:2b:13:50:a1:8c:
                    2f:62:99:21:35:b6:a9:6b:8e:7a:f5:3f:f6:f1:08:
                    e5:9f:44:9e:6f:10:c4:63:6b:14:2b:3d:2e:7d:c6:
                    b6:c6:ee:59:a7:38:0b:df:70:cf:d9:31:b6:a3:57:
                    eb:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:85:D6:15:20:1B:9A:35:8A:0C:50:B9:BC:64:DF:94:E0:BE:ED:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/1f84397b-44ed-30dc-81f9-30616da81340.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/0edec576-87d0-4ec6-9e13-394230996e53.crl

            X509v3 Authority Key Identifier:
                keyid:55:54:75:F0:0F:6F:F6:46:C3:4E:32:A8:4D:5F:C5:CA:E6:98:08:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd37:3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         da:95:21:34:eb:c5:73:1c:58:f7:3c:e6:1f:4b:ff:b0:2d:e9:
         09:fc:fc:f0:55:c1:3f:78:ab:11:f4:8c:99:35:ee:79:52:c1:
         ee:a7:c7:3c:59:d3:81:eb:97:e5:87:b4:e8:eb:29:ab:77:78:
         17:8b:86:59:48:35:2e:a5:e6:0e:c1:c2:db:66:9c:f4:2f:0a:
         cf:2c:67:96:ed:d5:37:a5:92:2e:d3:71:ff:ad:c5:42:a4:1b:
         f1:7c:e1:87:e1:84:79:01:b0:cb:de:bc:ad:95:d1:49:b7:bc:
         72:86:79:35:66:b2:9a:5d:48:4f:ef:54:a1:9b:6d:ca:ee:19:
         70:77:28:66:b8:5f:df:b0:f9:c9:e3:64:e4:2f:bd:0d:4e:78:
         40:3f:17:46:27:03:d5:7e:19:ce:fe:0d:76:09:7e:95:16:25:
         61:c5:9c:c5:e6:46:a9:4b:52:c6:dc:e2:6d:11:f9:74:17:59:
         a6:f6:bd:3e:a4:0c:f1:70:ad:32:95:04:8e:d1:6e:df:80:68:
         cb:0c:91:d8:12:f1:69:72:6a:22:2a:11:72:7f:a6:b5:85:f2:
         29:5d:f7:1d:70:bb:88:f8:97:d0:33:ae:dc:c9:cb:96:2a:b9:
         5b:62:90:07:08:be:a6:c6:77:ef:7c:17:fd:ec:a2:65:56:71:
         bf:5c:a4:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----