Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/256ab669-63c1-338e-bd68-c2dd87300882.roa
File:                     256ab669-63c1-338e-bd68-c2dd87300882.roa (raw, json)
Hash identifier:          MDWgYgnUaN4oA/52PObkbwO/DTkjsnPVwRsY6YdyC6o=
Subject key identifier:   22:78:2F:74:63:C5:DC:50:42:3B:44:CE:69:F7:23:ED:59:B8:47:3E
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285848E006699C602F69D1548B7180
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/256ab669-63c1-338e-bd68-c2dd87300882.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     33363
IP address blocks:        2605:a401:1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:69:9c:60:2f:69:d1:54:8b:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=1d3118a6-6613-4e77-a72e-ee3dc2c5cac0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:fe:91:01:a5:19:94:5b:b9:8d:04:fe:5b:8d:
                    49:e6:52:ff:65:62:cf:fd:83:90:61:6d:e9:7c:bb:
                    fa:3c:6d:a0:5e:e0:82:b4:7a:28:0d:cb:ba:28:b5:
                    ab:07:90:d6:71:e3:d6:dd:de:84:4f:6b:e4:81:df:
                    e6:88:99:0b:bc:07:7e:21:c8:5f:52:b0:51:8b:7f:
                    ae:f3:4e:a3:60:e5:1c:bd:8c:86:e6:2f:8a:49:3a:
                    d3:6e:69:3a:52:5d:56:b5:be:d4:2f:6a:42:24:7b:
                    9b:15:80:9a:ec:33:86:4f:ba:a1:a1:cd:86:91:ae:
                    1f:09:39:cb:b3:a8:5c:45:86:88:bb:43:60:ac:14:
                    3e:3c:ff:f9:13:b5:82:22:c8:54:31:c3:16:b4:9b:
                    e7:f6:81:6c:60:b3:b3:4e:8d:68:ef:e0:25:41:c8:
                    87:7b:ee:83:a2:9f:37:b6:6f:fe:8f:e0:d6:97:dd:
                    ea:10:8e:db:42:88:e1:55:bb:c1:6a:39:af:55:b9:
                    99:d9:bc:75:c2:69:93:26:06:5e:bc:1d:0c:83:cf:
                    bd:18:42:6c:fc:9f:bc:2e:8d:ae:04:3d:dd:8c:70:
                    e2:52:4e:b2:40:dc:8d:66:c7:78:08:44:eb:84:e4:
                    08:c0:d9:ba:44:a6:df:34:ce:c9:b3:48:20:0d:7d:
                    6b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:78:2F:74:63:C5:DC:50:42:3B:44:CE:69:F7:23:ED:59:B8:47:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/256ab669-63c1-338e-bd68-c2dd87300882.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:25:1d:71:e1:80:9b:64:d6:3a:8f:20:4b:d9:cd:18:d8:1f:
         8b:c3:07:01:6c:cf:77:8d:57:1c:39:17:85:4a:c6:40:c9:36:
         51:b8:ae:95:7c:97:d2:a2:c8:a5:6b:5c:5c:08:1d:10:9a:09:
         b2:bb:89:75:2a:99:b9:45:ff:b8:7e:d6:08:7f:d8:df:af:93:
         68:fd:6a:b1:c1:6b:b4:34:c2:b5:16:bb:9d:bf:79:78:5d:4a:
         66:7a:ba:9c:2b:78:cc:c1:74:7e:0d:74:2c:97:71:a2:d8:77:
         2d:3b:bb:f3:4a:52:ae:d2:54:16:ef:21:b9:b3:cb:e9:a8:70:
         81:9e:2c:48:d0:76:68:d6:0b:50:cd:70:6d:36:35:f2:92:80:
         6c:03:b7:77:da:35:11:32:db:ba:d3:cc:68:a2:40:a4:40:da:
         ce:af:b6:2b:e5:e8:86:a4:90:71:3e:43:ea:ea:4c:b7:ac:4f:
         fe:22:38:01:87:21:e2:73:df:52:cf:c3:3c:08:18:c4:4b:2f:
         e6:11:2b:22:64:bb:83:41:bb:43:54:eb:fa:c2:5e:62:ba:9d:
         f0:c9:a4:f3:e5:34:80:62:bb:07:49:ba:f9:e4:6d:6d:70:20:
         53:1f:57:25:4f:94:d5:57:df:7d:4b:7f:76:93:47:54:d8:de:
         ba:95:ce:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----