Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/9785b2c1-44bc-393c-9287-c1b9c65de83f.roa
File:                     9785b2c1-44bc-393c-9287-c1b9c65de83f.roa (raw, json)
Hash identifier:          TYWktOI91Vr+9QGSk2Kv0yKEjqzP5EDR54ElVpPgHyo=
Subject key identifier:   87:47:2F:9B:CA:B2:DC:48:E4:F4:A5:26:ED:EA:8D:B1:D1:5B:39:95
Certificate issuer:       /CN=b1898100-f40c-4002-b68a-8a97b548e69d
Certificate serial:       010D0C9F43285848EF613AABCC1E4646D0701700
Authority key identifier: 89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/9785b2c1-44bc-393c-9287-c1b9c65de83f.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     150369
IP address blocks:        2602:fd6f:1a::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:3a:ab:cc:1e:46:46:d0:70:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1898100-f40c-4002-b68a-8a97b548e69d
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=e7d39fad-1734-443f-8dba-c30e794e490f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:62:22:17:62:48:0a:de:ce:91:b3:cc:dd:c3:
                    09:8c:5e:f3:b0:7a:58:96:70:a8:fe:0f:4b:27:77:
                    49:58:54:74:da:da:e3:f6:57:a9:0f:1f:12:d9:e7:
                    a9:e7:93:ff:8f:8a:44:64:9d:72:21:d2:b3:65:3c:
                    89:6d:ee:69:71:59:40:2c:fb:c5:e6:ca:36:33:55:
                    19:fc:e9:0b:29:0d:2b:92:7b:7f:d1:36:a4:5a:17:
                    df:d4:6b:4c:db:92:15:f8:5d:ad:e8:0f:d3:2b:b4:
                    a5:33:cc:3c:7f:6f:56:63:21:e7:7b:1f:fa:36:f7:
                    72:c2:57:35:e4:13:aa:1a:06:1c:a6:c3:33:2b:17:
                    f2:16:7e:c0:07:16:78:d2:63:df:35:aa:7f:36:30:
                    19:5b:0c:90:64:1a:f8:3c:63:51:b5:56:4c:24:db:
                    2a:ec:82:96:ed:08:0a:e3:ef:ab:c4:eb:1b:5a:9a:
                    22:76:93:37:04:28:1f:34:71:81:f1:f4:6e:86:19:
                    3f:7f:c1:04:78:ae:66:da:ca:ee:42:82:42:09:8c:
                    db:47:3d:09:d6:4d:53:ec:98:c9:14:8d:11:e1:6e:
                    71:14:83:24:3c:8e:59:bc:73:90:ce:08:29:c9:1a:
                    b2:41:2d:f5:3b:d7:ee:74:32:4a:9a:62:a4:8e:57:
                    e3:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:47:2F:9B:CA:B2:DC:48:E4:F4:A5:26:ED:EA:8D:B1:D1:5B:39:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/9785b2c1-44bc-393c-9287-c1b9c65de83f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl

            X509v3 Authority Key Identifier:
                keyid:89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd6f:1a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:5b:8e:b7:33:82:dd:e4:0a:05:50:d5:80:93:44:4c:87:5f:
         fc:03:73:f9:f5:48:fa:4a:32:0a:7c:0b:77:72:79:56:33:bd:
         4f:ad:a2:88:44:d9:b5:1f:e2:02:65:9e:96:11:ef:2d:76:86:
         f2:18:79:91:a6:7a:b8:61:00:dd:b6:41:a8:de:d3:59:5b:05:
         42:34:d9:84:63:ed:bb:d3:94:8a:6a:2e:14:7d:74:31:8f:a1:
         1f:1c:92:7a:60:ad:51:92:81:7a:ae:4c:78:a2:24:9a:7e:76:
         01:66:93:7a:42:26:91:a7:ac:b1:ae:9f:64:65:7f:6e:b2:c2:
         17:2f:21:66:18:03:d4:91:6a:3c:0b:42:9a:30:5b:d2:54:40:
         38:18:7f:80:c8:07:35:26:32:63:75:82:90:41:c2:fb:4a:8c:
         34:e0:e6:81:e3:0e:27:4e:fe:8c:cd:54:02:33:79:81:26:71:
         c7:11:68:2c:6b:ca:a2:b7:f9:e6:3d:a4:d0:c1:0c:12:d3:60:
         40:25:c2:41:a8:29:bc:97:13:ef:cc:ee:eb:75:5b:1c:e7:8b:
         f3:c7:0c:1e:88:9f:d2:2e:03:f2:57:61:bc:a7:54:8b:9f:69:
         0b:bf:81:2c:06:8a:50:ae:16:4e:a0:0a:23:11:78:fe:df:24:
         0f:e7:cd:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----