Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2/9111181e-12c6-3f08-a615-706c438284a2.roa
File:                     9111181e-12c6-3f08-a615-706c438284a2.roa (raw, json)
Hash identifier:          z2lkfOuOaETzjnAGcKgCQ8o679OsgkwEsyzpNjSgMlE=
Subject key identifier:   DF:39:D5:E4:69:2E:B5:1B:69:2F:FB:D1:18:5E:43:E9:10:30:AC:3E
Certificate issuer:       /CN=6ac516fb-e4df-49c1-82bc-fed2399d21c2
Certificate serial:       010D0C9F43285848E16BD10B71BFAF01314A1680
Authority key identifier: 17:89:41:4A:81:2C:AF:72:C7:E2:27:3F:C0:5C:CC:33:C2:91:67:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2/9111181e-12c6-3f08-a615-706c438284a2.roa
Signing time:             Fri 14 Feb 2025 14:00:52 +0000
ROA not before:           Fri 14 Feb 2025 14:00:52 +0000
ROA not after:            Thu 15 May 2025 13:00:52 +0000
asID:                     53978
IP address blocks:        2602:807:6000::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e1:6b:d1:0b:71:bf:af:01:31:4a:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ac516fb-e4df-49c1-82bc-fed2399d21c2
        Validity
            Not Before: Feb 14 14:00:52 2025 GMT
            Not After : May 15 13:00:52 2025 GMT
        Subject: CN=953eb29e-49ce-40e0-8fd0-f755d7e84fcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5d:bb:2c:3d:8d:9f:36:f3:1d:76:a3:8a:21:
                    16:e2:42:1d:98:f4:bc:5b:9f:ae:af:ab:fc:aa:c2:
                    db:24:17:c5:bb:2b:2b:a1:cb:13:d3:d4:66:6c:5b:
                    7c:5e:0e:20:f5:96:2d:d7:6d:3d:ea:7b:3f:4d:3d:
                    83:21:d1:f7:cd:56:b1:51:f2:69:f0:1c:94:3c:8a:
                    9f:44:d6:df:5d:7b:02:9a:dd:1c:30:73:8e:51:0c:
                    e1:76:f2:91:ae:b2:cb:99:6b:d8:15:0d:8c:b2:a2:
                    f9:32:d8:eb:0c:6e:6a:46:62:b5:89:d4:74:ad:27:
                    e5:65:fb:0e:45:62:97:d0:67:b9:27:56:f4:8d:5d:
                    60:43:4f:09:26:52:5c:a3:6a:6e:f6:a5:72:70:d4:
                    c4:2d:34:8f:a9:63:e1:70:46:c4:c2:79:5f:71:07:
                    9a:6d:0f:40:52:dc:ed:f9:06:25:8a:9c:33:7b:63:
                    50:9e:21:18:46:d3:84:91:fb:88:d8:9e:82:e6:a0:
                    cd:47:69:65:a5:df:4b:59:1e:24:ab:52:dd:ce:78:
                    8e:5c:e7:fa:c8:44:f5:fe:cf:fb:c5:4a:b6:91:41:
                    e9:56:8e:67:47:4c:46:42:9b:3a:2d:e4:8d:d8:43:
                    d1:81:ba:e4:98:15:aa:17:44:fb:5f:b6:24:62:8e:
                    09:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:39:D5:E4:69:2E:B5:1B:69:2F:FB:D1:18:5E:43:E9:10:30:AC:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2/9111181e-12c6-3f08-a615-706c438284a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2/6ac516fb-e4df-49c1-82bc-fed2399d21c2.crl

            X509v3 Authority Key Identifier:
                keyid:17:89:41:4A:81:2C:AF:72:C7:E2:27:3F:C0:5C:CC:33:C2:91:67:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:807:6000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:b6:d0:0e:a5:a5:ac:61:10:e6:95:45:34:e3:6b:39:7f:e9:
         62:a9:f7:05:f8:f1:3b:57:27:26:4a:06:68:b8:d4:b4:fb:59:
         ce:db:76:05:f7:5f:d8:36:4e:f7:aa:5a:b8:47:bf:23:59:91:
         db:0d:30:6c:a6:4e:34:d6:d8:c1:72:89:12:89:99:7d:cc:cd:
         d0:ff:79:f9:8c:ca:5c:cd:c4:24:28:21:37:e1:7c:51:85:1e:
         4b:92:d3:2b:74:e5:a5:e1:2e:b6:3f:47:c3:87:5e:db:ea:56:
         8c:76:a9:be:58:f5:62:c8:af:e9:66:5a:0c:b8:21:39:6e:c7:
         2e:c5:5e:b7:a0:a4:9e:84:f4:a2:56:60:a0:8d:07:f9:44:42:
         9d:29:53:be:db:19:76:a0:41:aa:f9:d2:fd:bd:b5:2d:db:06:
         54:59:85:07:60:69:ad:b5:8d:7c:9a:79:ea:8a:c7:5d:f3:89:
         6f:26:45:a4:a1:f1:1f:5f:d3:6e:cc:a0:3d:ae:83:f3:53:7b:
         51:0b:3a:99:3d:c2:a9:d6:7a:01:3a:a1:2e:e6:47:d6:91:17:
         9d:70:a1:bb:77:ac:d4:99:1e:07:5e:86:5d:81:19:fe:68:b9:
         36:a9:1c:e1:1b:ed:cd:cb:c1:f7:ab:0f:17:18:c4:5e:01:9f:
         3a:25:68:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----