Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/24b668fc-a509-3a42-8684-d6b7501ff35b.roa
File:                     24b668fc-a509-3a42-8684-d6b7501ff35b.roa (raw, json)
Hash identifier:          KcPJ0RBOewCwhwN9rq/WNTeD5dLCCQ4134NTQfrlakk=
Subject key identifier:   E4:C2:AB:C0:6C:9A:07:E5:E0:66:58:B3:46:FB:6F:2B:17:BE:72:09
Certificate issuer:       /CN=7e4eda42-1b89-4124-8a06-63381278375d
Certificate serial:       010D0C9F43285849088175B71BDC3C78AE9C2380
Authority key identifier: 8A:4F:5E:F7:FA:39:D8:47:50:32:90:17:1C:E3:C3:CB:E6:D3:B0:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/24b668fc-a509-3a42-8684-d6b7501ff35b.roa
Signing time:             Fri 28 Feb 2025 14:00:52 +0000
ROA not before:           Fri 28 Feb 2025 14:00:52 +0000
ROA not after:            Thu 29 May 2025 13:00:52 +0000
asID:                     398646
IP address blocks:        2602:fe6b::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:08:81:75:b7:1b:dc:3c:78:ae:9c:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e4eda42-1b89-4124-8a06-63381278375d
        Validity
            Not Before: Feb 28 14:00:52 2025 GMT
            Not After : May 29 13:00:52 2025 GMT
        Subject: CN=a6aa3d89-f3fb-4290-9851-624ba7bc8b45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:9b:c3:d9:b3:d4:ea:89:85:ce:9d:cf:e2:5f:
                    2a:1f:72:66:ce:35:f3:88:0a:f6:2c:6b:8e:ed:59:
                    83:48:21:2b:16:09:45:63:86:ac:01:6c:80:19:9f:
                    42:66:52:6e:b6:bb:72:09:c8:99:47:10:41:96:30:
                    85:bc:ec:36:3d:a1:32:cc:6b:9b:11:47:0a:61:18:
                    f2:30:59:f3:16:8e:0c:c9:a4:19:1e:16:6b:45:4b:
                    34:b0:80:9e:86:0d:bc:58:de:37:17:b2:74:18:10:
                    6c:55:ea:4c:5c:b4:e6:89:44:22:a6:87:c4:83:45:
                    aa:6f:06:37:11:db:97:9c:71:1b:fe:16:c1:c9:a9:
                    13:45:9e:a7:07:fc:cc:69:92:40:e2:c6:fa:3a:88:
                    6a:08:b6:1d:1b:96:50:5d:56:1f:ec:84:bc:45:1d:
                    ae:be:fa:ed:f2:63:71:a0:43:38:29:d1:91:48:96:
                    34:ec:ac:37:a0:1f:c7:92:57:53:7d:cb:11:5a:cc:
                    5a:00:4e:a0:6b:38:f1:59:7f:85:f2:c9:7a:b5:12:
                    59:d2:4c:73:4b:e9:c2:86:75:c1:b0:4a:73:56:38:
                    8d:0e:5a:a1:c9:26:ad:aa:5b:b9:da:2a:78:b9:8a:
                    1d:bf:fd:43:78:ea:e8:17:28:14:aa:55:3c:ef:18:
                    43:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:C2:AB:C0:6C:9A:07:E5:E0:66:58:B3:46:FB:6F:2B:17:BE:72:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/24b668fc-a509-3a42-8684-d6b7501ff35b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/7e4eda42-1b89-4124-8a06-63381278375d.crl

            X509v3 Authority Key Identifier:
                keyid:8A:4F:5E:F7:FA:39:D8:47:50:32:90:17:1C:E3:C3:CB:E6:D3:B0:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe6b::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:3d:30:13:56:bc:7e:0d:cb:dc:f4:2f:61:60:be:7c:c9:30:
         62:91:42:6a:f3:32:55:4a:70:39:d0:e4:0b:96:81:25:fd:65:
         32:d4:e1:a5:0a:35:9f:7d:4a:2a:74:bb:7f:ad:fa:40:da:16:
         76:61:ec:c6:ba:7b:85:20:ec:4f:0a:4d:c3:ab:94:58:b4:c7:
         c0:2a:2e:7b:d0:e6:4e:d2:a9:a0:b5:bb:a0:31:10:c3:f4:03:
         6b:4a:f7:05:96:af:14:84:c9:34:34:ff:cd:0e:26:a9:57:0c:
         19:90:ee:30:ec:1e:d7:b2:a9:25:2e:7c:7b:cf:ac:82:af:27:
         6a:6d:d2:0a:c4:8c:0b:0e:3d:4f:dc:4a:5b:8f:ee:3d:c3:19:
         51:96:d0:67:11:94:83:4e:3b:48:1d:1a:5f:f9:d0:33:5f:d7:
         d6:f8:05:58:a3:f9:53:c8:95:92:42:df:5f:6d:7b:50:9c:96:
         ac:23:63:54:2b:6e:e0:44:ea:20:16:e8:40:02:d9:a7:92:30:
         b4:8d:8d:3c:4b:08:39:54:71:b5:90:bf:2b:22:78:1b:04:b0:
         07:cb:e6:9e:9d:f4:c7:3e:8b:d0:9f:99:5f:f6:14:23:0f:6e:
         63:79:1e:de:f1:20:c5:6e:e2:d7:c1:05:f3:33:09:de:68:ea:
         97:b0:f7:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----