Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/da6ea97d-77d2-343a-b71e-6bcb14b808dd.roa
File:                     da6ea97d-77d2-343a-b71e-6bcb14b808dd.roa (raw, json)
Hash identifier:          HupV70EH/R0Q5lDQ/MuHWav35A8/iCyMRoV2hjJSchA=
Subject key identifier:   56:94:DD:39:F6:0F:21:47:F9:F3:89:6F:C1:37:D2:DE:93:15:97:63
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849287E6BB4C02D13DA85E2D7C0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/da6ea97d-77d2-343a-b71e-6bcb14b808dd.roa
Signing time:             Wed 12 Mar 2025 01:00:39 +0000
ROA not before:           Wed 12 Mar 2025 01:00:39 +0000
ROA not after:            Tue 10 Jun 2025 01:00:39 +0000
asID:                     33363
IP address blocks:        2603:900c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:28:7e:6b:b4:c0:2d:13:da:85:e2:d7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 12 01:00:39 2025 GMT
            Not After : Jun 10 01:00:39 2025 GMT
        Subject: CN=19ede827-6bde-4fc4-a160-5cde74c941a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:2a:dc:29:65:4a:d8:69:bf:04:20:46:3f:38:
                    f7:3a:cd:d7:81:54:f1:5b:e7:8d:22:5a:e4:20:ff:
                    e8:dd:1a:32:ce:50:7a:b2:d9:46:84:a4:67:85:3c:
                    d4:66:69:41:82:cf:0d:14:66:17:e3:ce:a7:ce:a6:
                    08:ed:5d:7f:d1:28:c3:a1:c9:cf:dd:12:f0:f5:ca:
                    a3:c5:b7:ba:6b:43:c7:47:55:bc:f5:41:da:94:b1:
                    e8:12:42:31:e3:a3:91:87:05:f5:d7:f4:19:4b:df:
                    c7:15:94:5e:57:12:09:22:e0:dc:38:cf:77:c6:ed:
                    e3:63:b3:be:d3:fd:1d:a4:05:eb:ad:f3:18:97:75:
                    ed:fc:de:07:ba:03:db:e7:6b:56:16:ac:af:e4:fa:
                    f1:29:1b:0c:94:84:f9:85:6d:f8:76:1d:8b:d4:9f:
                    27:d1:31:ff:d3:e1:b8:db:18:1a:6b:c0:5b:3e:5e:
                    62:53:33:4b:52:1b:3f:eb:35:87:4a:2f:20:dd:13:
                    b4:b8:94:b9:64:b9:08:2e:88:0f:6a:03:f9:5c:66:
                    4e:37:d3:9d:7e:d3:2c:65:b4:81:98:1b:9d:65:c8:
                    2e:aa:d2:20:da:a2:81:39:1c:b6:ad:e4:d5:54:87:
                    c7:0c:e3:c9:4e:e8:8f:ce:5b:d2:6c:29:b4:b7:00:
                    9c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:94:DD:39:F6:0F:21:47:F9:F3:89:6F:C1:37:D2:DE:93:15:97:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/da6ea97d-77d2-343a-b71e-6bcb14b808dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:900c::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:9b:02:9e:71:8a:2b:a8:53:50:2e:ab:5a:ce:24:af:68:2d:
         e5:f7:dd:e0:a8:2b:ad:eb:1e:d8:b4:42:33:d1:f7:25:4b:a7:
         ce:b3:60:4a:96:e7:c6:43:19:e6:ce:43:2b:b5:66:67:e1:f4:
         6e:a4:5f:80:11:7e:63:68:e6:18:2f:07:76:8c:50:77:da:ea:
         92:e1:e0:ed:69:d2:d5:01:4c:e5:be:13:1d:da:2f:34:c5:2d:
         40:e2:ad:1b:88:2c:59:96:99:1f:51:cf:ea:47:da:9f:23:42:
         81:24:6e:9f:f3:e9:91:71:10:a9:66:d0:3a:96:4d:6f:46:e7:
         ca:b1:7d:11:a1:27:bb:69:21:6a:39:b5:66:32:a9:41:f3:f8:
         4b:d6:c9:1c:b2:58:a5:09:10:ac:16:a6:0b:d5:b0:c5:df:80:
         ab:de:0b:56:f2:57:15:1b:1c:77:08:ed:5e:92:1b:f0:c1:25:
         56:b8:a9:b5:cc:8f:3f:b7:03:83:0c:74:9b:26:19:0a:ee:49:
         8e:a6:2f:ab:23:ff:ed:70:14:02:2f:03:1f:d1:b1:c5:f5:4c:
         93:d3:88:bf:07:54:40:81:af:87:f8:87:1b:fa:49:d6:5c:b2:
         6f:af:c2:18:33:df:75:98:32:08:6f:48:41:14:c9:20:00:51:
         5f:dc:ab:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----