Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494/ade09a67-a4d4-3357-bace-f900f84f7e62.roa
File:                     ade09a67-a4d4-3357-bace-f900f84f7e62.roa (raw, json)
Hash identifier:          0tCIBbXGGmUTowxxAEYyX0Nn0025QHw7kxGqIsteWVk=
Subject key identifier:   EC:6F:EB:70:80:DE:9C:D2:9B:A2:A8:CE:F5:44:69:DD:F5:1A:30:C2
Certificate issuer:       /CN=e9e262d0-3a64-402e-81e7-5b0829596494
Certificate serial:       010D0C9F4328584957F3F2DB23B7FB483C6A7D00
Authority key identifier: D2:1C:79:BE:61:34:D6:A4:48:63:EB:DD:04:A5:92:67:EB:E8:17:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494/ade09a67-a4d4-3357-bace-f900f84f7e62.roa
Signing time:             Sat 29 Mar 2025 01:00:39 +0000
ROA not before:           Sat 29 Mar 2025 01:00:39 +0000
ROA not after:            Fri 27 Jun 2025 01:00:39 +0000
asID:                     959
IP address blocks:        2606:6240:959::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:57:f3:f2:db:23:b7:fb:48:3c:6a:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9e262d0-3a64-402e-81e7-5b0829596494
        Validity
            Not Before: Mar 29 01:00:39 2025 GMT
            Not After : Jun 27 01:00:39 2025 GMT
        Subject: CN=01771539-5e40-43bd-bbda-5749a8d8df2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:9d:2c:a7:17:70:18:63:82:8c:0b:2a:06:d3:
                    1f:4b:73:9f:04:0d:f9:56:05:d7:a1:9b:2c:16:26:
                    b7:e7:9d:3b:65:b3:eb:25:e9:f5:58:c1:91:e9:61:
                    fc:ff:ff:df:c5:66:f4:b2:dd:d6:d1:2a:6e:15:ea:
                    7a:e3:8b:e7:a4:d8:7d:ea:7c:d4:d5:f5:3b:ae:84:
                    70:54:ee:d4:df:d6:9d:ba:f7:38:26:e8:57:70:e0:
                    d7:84:a4:45:4b:8e:e1:75:a5:95:3e:a5:f7:b1:11:
                    04:0b:27:c3:fe:c2:36:60:fb:2b:4f:c1:6f:6c:90:
                    a1:01:85:6c:c1:64:e3:27:f1:3a:31:74:d3:26:4c:
                    65:8f:26:7f:85:28:48:04:ae:34:78:87:d3:b0:70:
                    ed:56:91:8c:60:26:2c:5f:20:93:c1:e4:4e:1e:30:
                    ff:ad:26:58:77:c3:93:7c:df:e2:46:a4:c6:53:5d:
                    ef:ad:35:a5:db:13:d4:97:7a:18:39:60:e9:9e:ff:
                    8c:a9:03:28:fb:4e:3b:55:cd:93:63:f1:7a:e0:88:
                    21:47:54:b7:f9:dd:35:3f:ca:27:fe:6d:5c:70:c8:
                    0c:cb:63:26:33:f3:16:22:a3:ee:ac:4a:5a:7f:a3:
                    ce:f1:2b:bc:73:0f:80:55:9e:1e:28:26:86:4b:35:
                    f5:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:6F:EB:70:80:DE:9C:D2:9B:A2:A8:CE:F5:44:69:DD:F5:1A:30:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494/ade09a67-a4d4-3357-bace-f900f84f7e62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494/e9e262d0-3a64-402e-81e7-5b0829596494.crl

            X509v3 Authority Key Identifier:
                keyid:D2:1C:79:BE:61:34:D6:A4:48:63:EB:DD:04:A5:92:67:EB:E8:17:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:6240:959::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:a2:65:ec:a1:de:2d:54:fa:25:e5:a3:5b:57:4d:52:f1:aa:
         54:49:ca:29:47:ee:0d:96:ee:f3:82:6e:ac:13:82:17:54:cc:
         f9:e7:89:dd:98:55:57:8a:42:ff:36:10:86:bf:a9:00:1c:4f:
         70:ee:df:ee:42:00:9d:f1:b5:72:33:cf:d4:c4:bf:b5:a8:2e:
         72:05:af:93:83:e7:17:44:77:3a:81:3c:0e:42:11:f9:18:0d:
         23:86:9b:81:12:c2:0c:86:55:64:7e:94:a5:ae:0f:0d:da:6b:
         f3:10:66:6e:ae:d6:16:3f:da:a7:04:0e:d7:15:b7:6e:04:a9:
         43:82:06:de:42:7c:28:ad:4c:0e:f9:23:eb:1b:32:b1:eb:f0:
         ea:86:e4:98:a9:6f:2f:83:2d:1f:58:de:ed:f7:ee:c1:d6:20:
         41:c2:fa:4b:cb:4e:83:3e:67:93:c6:77:dd:d7:82:d7:de:0d:
         ff:37:b8:4d:29:bc:8a:84:06:cf:3e:8b:57:ef:84:22:37:73:
         66:49:bf:ad:85:7c:a7:91:43:c8:cf:40:8c:91:e0:e1:a5:eb:
         d6:72:15:c2:df:d3:4a:8c:82:1f:d9:0b:cd:1f:87:57:8a:0d:
         17:53:aa:4e:f2:21:51:77:0f:74:a9:67:f1:82:f7:5f:1c:16:
         bb:e7:ee:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----