Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9be8f23f-3a8c-4822-8996-e4131d203c13/9800fcd3-2dc0-3e84-afb8-6f4f44fd1f58.roa
File:                     9800fcd3-2dc0-3e84-afb8-6f4f44fd1f58.roa (raw, json)
Hash identifier:          /XlY23CL/qdw0yBqNHnL6CRG56NuMbhYI1e6Pt2vBZI=
Subject key identifier:   37:74:A7:FF:3C:12:D7:40:9C:72:31:47:82:20:D0:F6:B6:E8:FB:A9
Certificate issuer:       /CN=9be8f23f-3a8c-4822-8996-e4131d203c13
Certificate serial:       010D0C9F43285849754455C871765D6E8371E7A0
Authority key identifier: 80:AD:19:B2:F1:CB:42:EA:DC:B3:3D:6C:5D:DE:3C:68:47:48:15:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9be8f23f-3a8c-4822-8996-e4131d203c13.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9be8f23f-3a8c-4822-8996-e4131d203c13/9800fcd3-2dc0-3e84-afb8-6f4f44fd1f58.roa
Signing time:             Tue 08 Apr 2025 13:00:59 +0000
ROA not before:           Tue 08 Apr 2025 13:00:59 +0000
ROA not after:            Mon 07 Jul 2025 13:00:59 +0000
asID:                     14618
IP address blocks:        2606:cd40::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:75:44:55:c8:71:76:5d:6e:83:71:e7:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9be8f23f-3a8c-4822-8996-e4131d203c13
        Validity
            Not Before: Apr  8 13:00:59 2025 GMT
            Not After : Jul  7 13:00:59 2025 GMT
        Subject: CN=2e4b2db8-ca99-4e47-9e9e-4c7130461bc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:88:21:d5:6e:27:ed:20:b7:ba:ad:c8:cd:02:
                    ba:97:1e:12:6c:3d:29:73:1b:28:fd:cc:ca:1a:5f:
                    e1:c2:87:0d:e3:6f:39:be:2c:18:31:75:14:64:3b:
                    d8:bf:11:af:79:63:78:4d:11:c9:f7:6c:73:17:fc:
                    e3:5b:1c:dc:02:a9:d4:75:f4:76:3d:a1:3e:aa:64:
                    db:65:c1:50:6b:4b:aa:38:97:89:b1:62:fb:3f:9f:
                    89:97:fe:c1:67:45:98:cf:5c:d0:11:e3:77:e9:a6:
                    3c:e5:5f:bd:2e:45:eb:be:37:72:a6:7f:35:0c:d7:
                    a3:76:0f:95:c7:fe:cc:4f:47:7b:0b:f0:f4:8c:b7:
                    f1:ed:3c:72:10:16:21:51:c9:02:f3:b2:12:3a:89:
                    92:b5:29:5b:8e:6c:67:71:18:b9:41:32:eb:59:02:
                    b3:cc:40:9c:bd:86:b7:2b:2a:bd:ca:6e:f7:f0:c3:
                    22:3a:13:d4:22:ae:e7:44:16:f9:27:f5:b6:3a:14:
                    df:e5:52:a4:5c:89:be:03:dd:dc:59:48:38:13:37:
                    4a:c4:82:38:01:af:cb:d4:0c:ff:cf:ae:5f:42:05:
                    cd:23:ce:d3:0c:3b:07:60:ea:af:ff:40:f4:1f:66:
                    e1:28:26:07:db:6c:ed:73:c5:6a:94:02:20:55:d1:
                    78:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:74:A7:FF:3C:12:D7:40:9C:72:31:47:82:20:D0:F6:B6:E8:FB:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9be8f23f-3a8c-4822-8996-e4131d203c13/9800fcd3-2dc0-3e84-afb8-6f4f44fd1f58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9be8f23f-3a8c-4822-8996-e4131d203c13/9be8f23f-3a8c-4822-8996-e4131d203c13.crl

            X509v3 Authority Key Identifier:
                keyid:80:AD:19:B2:F1:CB:42:EA:DC:B3:3D:6C:5D:DE:3C:68:47:48:15:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9be8f23f-3a8c-4822-8996-e4131d203c13.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:cd40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:47:d5:c5:cb:50:9f:26:73:21:76:08:6a:ac:b8:96:a3:d1:
         34:cb:b9:bf:fd:86:50:19:8f:ca:94:13:fe:73:63:9a:37:2b:
         47:a5:1f:cd:5b:28:25:fd:c2:70:a0:eb:4a:eb:25:37:32:78:
         f5:b7:a6:d5:5b:71:18:8a:d2:98:58:c7:a4:39:59:fe:89:4c:
         ba:6b:b2:90:87:1f:a9:b2:77:ef:f3:c1:6c:6f:b9:d0:d5:78:
         f8:c6:d0:94:82:79:9a:e9:12:81:d5:f0:06:ba:16:50:33:81:
         a5:e9:7d:f5:96:f7:07:36:81:b4:a0:7a:28:9b:12:58:33:ab:
         01:fe:b0:ad:e9:d1:c4:05:b0:74:5f:b2:b3:f5:02:12:6a:26:
         99:fd:e6:de:2e:3c:ab:44:ba:45:36:ba:13:42:1b:8a:7a:16:
         d9:a4:c6:b3:73:53:b7:08:29:f2:1d:41:63:74:3a:2e:d1:31:
         2d:5a:95:f9:f1:ee:49:48:91:00:fd:7d:9f:5f:fd:17:97:58:
         08:8e:a3:d9:9a:3e:8b:b2:99:20:c8:74:c5:a6:1e:a5:e1:dc:
         ac:7e:50:69:de:90:b9:be:de:20:56:35:9a:c5:fa:cb:91:c4:
         51:a0:e5:1a:31:a9:2e:b9:02:d1:6a:af:5b:59:fc:24:8d:fd:
         e6:ee:be:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----