Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f6e37c0-35b2-4a26-aef0-29be5d9a3810/f02bb46a-a3af-3863-9d0f-92593b573276.roa
File:                     f02bb46a-a3af-3863-9d0f-92593b573276.roa (raw, json)
Hash identifier:          7ksKdya0Cyh0wSJQTKBMeekYk3BIyDZgEfJR2lB3XUQ=
Subject key identifier:   71:99:D6:EB:10:58:67:B7:68:E1:2F:FD:83:7C:B7:57:9C:37:DD:44
Certificate issuer:       /CN=6f6e37c0-35b2-4a26-aef0-29be5d9a3810
Certificate serial:       010D0C9F4328584930DE72079D8A866054609080
Authority key identifier: A7:1C:4D:65:B0:0F:4D:A7:C2:AD:52:A3:1E:0B:A1:7C:72:07:63:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f6e37c0-35b2-4a26-aef0-29be5d9a3810.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f6e37c0-35b2-4a26-aef0-29be5d9a3810/f02bb46a-a3af-3863-9d0f-92593b573276.roa
Signing time:             Sat 15 Mar 2025 01:00:39 +0000
ROA not before:           Sat 15 Mar 2025 01:00:39 +0000
ROA not after:            Fri 13 Jun 2025 01:00:39 +0000
asID:                     46494
IP address blocks:        2607:12c0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:30:de:72:07:9d:8a:86:60:54:60:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f6e37c0-35b2-4a26-aef0-29be5d9a3810
        Validity
            Not Before: Mar 15 01:00:39 2025 GMT
            Not After : Jun 13 01:00:39 2025 GMT
        Subject: CN=39b77256-fb26-44aa-993f-c3f64ab0f220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:37:58:0f:f8:6a:f0:8e:13:54:58:3c:db:a2:
                    8f:37:28:0c:c5:97:e0:e4:93:dc:4b:09:83:76:da:
                    1c:09:c7:cc:10:b9:82:75:bd:d0:e0:b8:b1:d2:2f:
                    a3:6a:c8:2b:60:fa:fc:63:23:23:d2:6c:7b:9e:52:
                    45:5c:08:fc:da:8b:70:18:9f:1d:38:95:d3:e3:c4:
                    fd:b0:00:29:d2:e8:55:42:c9:06:62:f3:2d:02:2e:
                    0a:f7:92:f1:55:c1:88:0f:72:ca:b7:8d:26:ad:e9:
                    67:35:d4:e8:7c:90:e5:8f:9a:72:99:bc:55:54:90:
                    e6:27:49:3e:13:a3:7d:d4:00:40:b2:08:eb:ee:6d:
                    ba:eb:6d:4f:9a:48:47:ba:0f:f4:13:1c:bf:a8:c7:
                    9b:4c:8f:bc:9b:ff:0c:5a:c8:01:0b:86:25:25:9a:
                    62:55:d4:8d:99:81:29:bf:b3:31:e5:b7:23:c4:68:
                    72:1c:22:b0:20:64:26:15:e0:51:0c:fe:f7:42:d5:
                    a6:e6:19:f9:4a:90:1b:d5:c2:f8:56:96:6f:39:32:
                    85:c3:d4:7f:c8:20:2f:85:3d:1b:46:3d:d8:30:2a:
                    87:be:aa:2a:c8:c4:f6:b6:29:9b:8a:5c:fd:19:08:
                    63:7e:90:6d:92:f9:cf:0c:74:f1:bd:d8:ac:31:85:
                    ac:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:99:D6:EB:10:58:67:B7:68:E1:2F:FD:83:7C:B7:57:9C:37:DD:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f6e37c0-35b2-4a26-aef0-29be5d9a3810/f02bb46a-a3af-3863-9d0f-92593b573276.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f6e37c0-35b2-4a26-aef0-29be5d9a3810/6f6e37c0-35b2-4a26-aef0-29be5d9a3810.crl

            X509v3 Authority Key Identifier:
                keyid:A7:1C:4D:65:B0:0F:4D:A7:C2:AD:52:A3:1E:0B:A1:7C:72:07:63:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f6e37c0-35b2-4a26-aef0-29be5d9a3810.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:12c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:0b:e5:76:9d:9f:bc:7f:59:0f:02:1f:97:b8:ab:e3:6d:5f:
         5c:ed:84:55:d6:fe:3e:ff:e3:79:6d:c4:6e:aa:88:3c:4f:bc:
         28:36:cf:6f:ba:0e:f2:b5:bc:b4:83:bb:6c:09:f9:6d:16:7c:
         35:07:de:57:a7:4f:e6:26:2b:6d:eb:76:38:a2:93:ed:0c:3c:
         03:5d:63:91:e2:3e:0d:44:34:f6:f3:9e:f1:f6:05:93:a7:85:
         e2:66:67:af:f4:63:22:c6:e0:06:bc:11:de:90:37:5c:d0:74:
         5e:4b:d1:ac:d4:21:97:f6:0c:50:83:04:1e:1f:76:b8:c5:66:
         8b:36:43:af:a1:91:10:68:d2:9f:2a:42:b4:b7:44:23:06:65:
         26:c6:32:70:6a:d2:36:12:81:9c:65:cb:b5:da:a1:c4:1a:c1:
         78:df:d0:cf:17:b8:be:bb:c1:b0:04:af:16:07:64:dd:15:59:
         16:f9:58:11:90:e0:57:ce:90:ab:e1:46:9c:b6:03:88:a2:70:
         76:ea:7a:d3:c5:46:8f:b8:6a:4c:93:f0:91:96:44:2a:dd:1e:
         d6:db:4a:2c:e2:16:28:5f:d6:75:38:f9:c4:e2:a2:b2:b8:bc:
         3d:4c:7e:17:9c:02:0a:b9:fc:eb:75:3f:a4:de:13:41:e9:9c:
         bb:85:29:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----