Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/7fc0aa8c-5584-3cdc-936e-312cc57cf16d.roa
File:                     7fc0aa8c-5584-3cdc-936e-312cc57cf16d.roa (raw, json)
Hash identifier:          zlqeDu1iQ3uXCKck/XWSO+3AFnA66XdHnihce+aFFx4=
Subject key identifier:   BF:00:D6:D7:09:C8:41:82:B8:93:EC:28:F9:E8:8E:15:E4:F9:05:FA
Certificate issuer:       /CN=48b02ed2-f897-45be-b9fb-346294418ecb
Certificate serial:       010D0C9F43285848F926974962CC3BBA82F41C40
Authority key identifier: F1:28:43:67:33:74:AE:F1:64:92:07:BD:AD:45:63:79:C0:A8:82:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/7fc0aa8c-5584-3cdc-936e-312cc57cf16d.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     19331
IP address blocks:        2606:6500::/28 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:97:49:62:cc:3b:ba:82:f4:1c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48b02ed2-f897-45be-b9fb-346294418ecb
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=b710510e-ca93-4704-baeb-785b93c8e2f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8d:1e:83:86:b3:f7:4c:0f:06:51:5e:bf:1c:
                    4a:5d:bb:35:cd:ae:ac:76:4e:b8:70:a9:4f:c7:3a:
                    c1:5d:75:7c:bb:98:d5:43:34:68:72:14:e9:f6:90:
                    1e:d4:dd:2d:cf:1f:cb:b6:f6:61:23:4e:79:44:50:
                    d3:a9:24:b5:93:79:74:eb:ee:b8:64:ae:0d:ca:a5:
                    66:72:99:7f:25:6f:20:1c:2a:31:4a:5c:ab:86:46:
                    e6:67:a0:e4:8a:bb:58:09:df:12:ca:2d:a8:50:5b:
                    f1:fa:99:e4:be:80:37:26:99:d4:72:d5:20:ae:c6:
                    8a:ae:7f:c2:b3:bb:ec:83:7e:af:f7:e0:78:8a:6c:
                    6e:e2:3b:9a:14:32:d4:14:cc:ad:aa:0d:f9:64:23:
                    ae:e1:d7:29:af:ee:44:04:89:2b:8d:55:35:7b:19:
                    45:6c:c2:e0:e4:1d:b3:e0:d0:57:fe:46:a4:4e:33:
                    79:af:ee:76:65:6e:61:63:41:35:4b:27:98:00:e5:
                    9c:44:52:c2:ba:2d:38:59:d4:29:56:73:23:b8:98:
                    9c:07:c7:23:10:f6:8a:34:14:5b:24:db:37:39:55:
                    0a:0a:e4:6e:01:29:7a:1e:07:24:54:94:29:77:bb:
                    40:9f:fd:26:b9:dc:b5:20:0d:15:42:02:e1:17:22:
                    81:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:00:D6:D7:09:C8:41:82:B8:93:EC:28:F9:E8:8E:15:E4:F9:05:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/7fc0aa8c-5584-3cdc-936e-312cc57cf16d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/48b02ed2-f897-45be-b9fb-346294418ecb.crl

            X509v3 Authority Key Identifier:
                keyid:F1:28:43:67:33:74:AE:F1:64:92:07:BD:AD:45:63:79:C0:A8:82:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:6500::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:9f:7a:d7:7f:f1:3a:d0:e6:53:0c:b9:1c:6c:05:2a:f1:3f:
         0a:53:33:dd:07:41:d6:0b:78:ec:e6:02:07:de:78:70:f6:1e:
         fd:9a:51:1c:95:2b:85:f3:6c:68:dd:32:85:f2:e0:ca:c7:03:
         c9:53:44:95:45:04:4a:bf:b4:8c:d1:15:ef:a5:00:c8:4e:0a:
         db:84:f5:c8:cc:da:78:78:a2:04:4f:37:d1:e9:d9:d4:90:3e:
         77:80:3a:3f:0e:6e:58:c9:2e:76:52:f4:7f:38:53:37:17:51:
         8b:cc:21:d7:33:e5:47:e2:22:c0:38:eb:ae:ea:55:89:e5:e0:
         47:03:38:56:80:e4:97:62:5c:77:56:df:f9:3a:ea:d8:ab:62:
         7d:67:66:a3:6d:4f:79:94:78:b8:d8:38:17:cc:b8:f7:05:ed:
         7d:cd:93:50:f2:e7:55:fa:62:64:60:71:44:84:ed:ba:ca:73:
         c8:cc:dc:d6:b5:95:b3:00:af:c7:d4:ce:06:60:9f:b5:c8:3b:
         b2:b9:50:b0:28:8e:83:d5:ad:a8:a1:a6:2d:52:db:f2:f5:9f:
         73:90:bc:09:9c:eb:a3:64:42:7e:af:bd:fb:08:e7:01:77:fe:
         0e:d2:95:a2:5d:b3:cd:4f:fa:e0:dc:cc:fd:28:15:97:a1:d9:
         9c:52:d9:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----