Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/961f9069-ede8-3b32-9cd9-dda85a2fbedd.roa
File:                     961f9069-ede8-3b32-9cd9-dda85a2fbedd.roa (raw, json)
Hash identifier:          7vy4ZyUAf5BynNrjWebul8/UrXypuE3AQ9QwvhlTDaw=
Subject key identifier:   B4:F6:B2:A5:A5:7E:A2:84:F8:0C:00:67:88:73:58:C8:17:51:89:31
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285848E006959D3CF5E4DA77DC3580
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/961f9069-ede8-3b32-9cd9-dda85a2fbedd.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     33363
IP address blocks:        2605:a401:80e6::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:95:9d:3c:f5:e4:da:77:dc:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=f810f154-47d1-44cd-bc94-45e00f36f1b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:51:d9:4e:58:4c:2b:a8:11:4f:95:77:d6:db:
                    e3:4c:d1:42:34:75:38:16:15:d1:ed:30:8c:6a:2c:
                    c0:67:75:63:d6:ea:5b:62:7d:c3:09:9c:a9:2d:34:
                    02:4f:13:1f:85:4b:28:21:ea:74:8c:33:61:e6:17:
                    02:e4:af:70:6b:da:b4:81:f5:20:46:9b:3b:02:d7:
                    79:a5:9c:ca:98:d4:e5:d6:3f:a6:ae:dd:d7:4c:08:
                    57:da:6f:a5:b9:82:8f:2b:9d:f8:32:44:56:59:c1:
                    67:bb:16:7d:1b:ac:37:b3:f2:7c:ee:15:64:e9:ec:
                    04:40:91:ca:dc:44:7f:21:63:b5:ba:ee:1a:e3:e1:
                    df:83:3b:5c:66:45:69:9d:d5:84:9f:02:31:7b:5b:
                    b9:a1:bc:8e:21:18:75:0a:58:bf:9a:8e:c7:0e:f4:
                    13:99:24:4e:b5:de:5a:db:54:91:ed:d7:09:37:91:
                    df:0d:d6:6a:a4:f0:c1:e3:25:b0:41:32:91:5c:4c:
                    41:0a:ad:93:8f:6b:6c:7c:52:a6:5c:67:12:af:cf:
                    37:1d:55:83:9f:96:cd:fc:fe:ab:10:dd:bb:6e:55:
                    0c:60:e4:6f:b6:2b:08:b1:2c:0a:31:fe:42:14:6f:
                    db:30:8c:b0:be:b7:e3:06:19:ac:eb:c6:fe:48:fe:
                    2c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:F6:B2:A5:A5:7E:A2:84:F8:0C:00:67:88:73:58:C8:17:51:89:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/961f9069-ede8-3b32-9cd9-dda85a2fbedd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:80e6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:b9:ed:e2:16:0f:d5:5b:0f:97:6b:87:c0:a9:c4:01:15:86:
         4c:7c:b6:03:aa:52:0a:0f:54:59:44:f0:5e:b2:42:e1:d5:05:
         25:fc:79:ba:ab:c5:dc:bc:f3:95:85:3c:29:22:dd:2c:87:77:
         a7:9c:77:95:34:33:a3:bb:6b:14:1a:2d:8b:e2:f0:78:02:ff:
         3a:3d:4c:7c:9d:0f:60:8e:38:5c:a9:bc:48:68:c1:17:fe:35:
         ab:50:e4:9d:d6:99:2d:a9:93:35:ab:36:64:c4:c6:12:fe:ac:
         5e:2a:dd:31:20:7c:51:03:fd:55:90:10:33:2e:7c:6b:21:72:
         96:41:b0:38:43:6a:f6:78:f4:86:46:c4:a5:d4:92:ec:67:32:
         2a:a0:0a:e3:09:b4:17:af:50:6a:be:f4:f4:73:a4:7a:9e:ac:
         f6:fa:48:8c:28:25:87:d0:d2:a7:15:2e:d5:b5:ee:5d:fd:2b:
         92:03:4f:86:c5:c0:7f:c4:a0:0f:af:2d:10:fa:0f:94:8f:d8:
         86:ab:14:de:a6:9a:66:2a:0f:88:b7:2a:a1:9e:e0:3d:6e:cb:
         1a:a4:b6:41:66:59:9d:3c:a3:41:cc:00:55:2d:1e:a5:b0:99:
         88:b0:3c:fa:97:95:b4:8d:6f:8f:1a:58:ea:f7:ef:a5:60:55:
         3d:7d:b4:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----