Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/41415190-afe9-4f90-902f-9102f69180fb/52e44aaf-a924-372c-9c6a-97e3db3be55c.roa
File:                     52e44aaf-a924-372c-9c6a-97e3db3be55c.roa (raw, json)
Hash identifier:          1BrbS+6Qj1DfqTaZrfvu8ZdiC/AvoGzLU+cFLGKk90Y=
Subject key identifier:   00:0E:DF:9F:3E:52:8C:18:39:85:14:12:AB:39:A3:12:24:AD:4E:17
Certificate issuer:       /CN=41415190-afe9-4f90-902f-9102f69180fb
Certificate serial:       010D0C9F4328584905B6A723D18BC4A1A95EFD80
Authority key identifier: 9D:32:13:D8:0E:43:8D:3C:78:6F:3D:1C:D7:25:FA:9C:22:59:69:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/41415190-afe9-4f90-902f-9102f69180fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/41415190-afe9-4f90-902f-9102f69180fb/52e44aaf-a924-372c-9c6a-97e3db3be55c.roa
Signing time:             Thu 27 Feb 2025 14:00:51 +0000
ROA not before:           Thu 27 Feb 2025 14:00:51 +0000
ROA not after:            Wed 28 May 2025 13:00:51 +0000
asID:                     0
IP address blocks:        2602:801:30ff::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:05:b6:a7:23:d1:8b:c4:a1:a9:5e:fd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41415190-afe9-4f90-902f-9102f69180fb
        Validity
            Not Before: Feb 27 14:00:51 2025 GMT
            Not After : May 28 13:00:51 2025 GMT
        Subject: CN=9b5c0914-0cae-4431-ae74-23c10000966e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b6:8c:fa:08:be:62:40:c4:0c:fa:b3:33:5e:
                    6b:55:d2:99:5e:8c:dc:2e:7b:13:e6:3b:15:3c:de:
                    fc:ed:58:8b:48:8e:2b:10:6c:ef:d7:4c:2a:d3:a3:
                    e9:87:ea:fc:cb:b6:c3:19:81:8e:91:cb:d3:5e:af:
                    ab:52:1d:3e:0a:f7:f5:44:ca:4d:86:c5:f1:b3:ac:
                    cc:56:19:dd:56:8c:42:b6:9b:b3:e1:b6:3b:c9:e4:
                    26:42:0b:9f:0d:f5:52:d4:d3:f5:7c:ed:65:b6:75:
                    55:7f:5b:f6:d4:53:80:29:38:39:f6:c8:69:69:16:
                    e8:4f:d3:28:af:34:22:19:74:bf:3f:c6:25:99:ad:
                    c2:ce:4a:1e:5b:4f:6f:e7:0a:b3:f1:fc:ee:ff:aa:
                    0d:bb:19:bf:4c:33:26:dc:05:68:d6:41:bb:2e:ab:
                    63:8a:6d:81:96:64:26:2c:8b:bf:19:4a:cc:08:c3:
                    84:16:8e:b5:26:f0:e4:c1:ee:8c:1a:6d:18:08:59:
                    8d:7c:1a:b8:51:d8:42:b7:43:74:59:46:6c:4b:ad:
                    ee:ab:16:15:58:a8:59:95:0d:55:1e:de:30:92:85:
                    ca:e5:7a:0f:a8:cd:b0:40:72:1e:45:7e:73:93:e6:
                    df:0e:7a:0d:d6:df:f2:89:a5:09:a3:f2:76:50:6e:
                    f3:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:0E:DF:9F:3E:52:8C:18:39:85:14:12:AB:39:A3:12:24:AD:4E:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/41415190-afe9-4f90-902f-9102f69180fb/52e44aaf-a924-372c-9c6a-97e3db3be55c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/41415190-afe9-4f90-902f-9102f69180fb/41415190-afe9-4f90-902f-9102f69180fb.crl

            X509v3 Authority Key Identifier:
                keyid:9D:32:13:D8:0E:43:8D:3C:78:6F:3D:1C:D7:25:FA:9C:22:59:69:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/41415190-afe9-4f90-902f-9102f69180fb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:801:30ff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:f9:10:38:42:39:c2:96:ae:7d:51:a0:61:90:13:ec:d9:0c:
         0b:58:30:bc:75:10:55:1b:32:2d:d0:da:39:a6:b2:d5:eb:5c:
         f4:63:75:1a:63:0d:bc:22:37:3f:16:a0:16:5a:68:11:16:db:
         47:65:af:03:50:d8:06:58:3c:4f:92:bf:16:d6:92:a7:a6:15:
         a1:e7:cb:48:00:10:e3:00:ca:4d:46:56:21:92:f1:b8:39:9c:
         a5:0e:07:a7:9d:dd:2b:b2:25:18:b9:59:da:98:d4:31:2d:99:
         bd:47:1f:8f:3c:42:10:09:95:12:91:cf:ab:40:ab:a5:8f:02:
         a4:01:93:e7:db:57:6f:e2:bc:d8:35:b1:18:06:3b:77:6b:89:
         69:d7:ad:c0:a9:68:f6:fc:fc:5b:9c:18:af:0b:c9:88:d9:92:
         5a:cc:be:5b:d2:37:cf:6f:93:d7:fd:64:2a:81:64:95:c4:fb:
         ee:fc:45:1b:f6:70:58:da:e6:87:aa:1a:98:1f:50:86:f4:31:
         fb:de:f2:10:f3:a4:27:f1:25:7b:0f:cb:df:c8:2b:7c:65:da:
         1d:7e:7f:b1:b9:51:2c:86:77:d2:4b:d2:a4:2a:85:4b:45:4e:
         99:fe:54:46:f1:3f:91:4a:3d:fc:42:e8:f9:83:94:5e:c0:83:
         29:95:15:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----