Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/b8fd8cac-f337-3458-a1f3-7f6a78f636f7.roa
File:                     b8fd8cac-f337-3458-a1f3-7f6a78f636f7.roa (raw, json)
Hash identifier:          K5DUuxn0gV9lylKLh3qHevcsuUJicJA377rZVeolteA=
Subject key identifier:   89:67:87:C5:F9:AB:AE:52:38:EF:B3:2B:F4:4C:A0:C6:B2:85:85:74
Certificate issuer:       /CN=dd62a733-0e13-4012-8294-fce655e4a41a
Certificate serial:       010D0C9F4328584902EC04A70FA0E97D851DAF80
Authority key identifier: 91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/b8fd8cac-f337-3458-a1f3-7f6a78f636f7.roa
Signing time:             Wed 26 Feb 2025 14:00:51 +0000
ROA not before:           Wed 26 Feb 2025 14:00:51 +0000
ROA not after:            Tue 27 May 2025 13:00:51 +0000
asID:                     39618
IP address blocks:        2602:fd92:a00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:02:ec:04:a7:0f:a0:e9:7d:85:1d:af:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd62a733-0e13-4012-8294-fce655e4a41a
        Validity
            Not Before: Feb 26 14:00:51 2025 GMT
            Not After : May 27 13:00:51 2025 GMT
        Subject: CN=67f4cc4d-f8e2-46c6-b11d-9a9a2ef6f179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:9a:ff:76:a4:93:aa:c6:cb:84:bb:d4:62:24:
                    67:2a:e7:0d:77:13:95:cd:f4:84:3a:0e:65:df:78:
                    17:1e:cb:65:b2:bd:6d:4a:4f:ba:71:30:cc:82:3a:
                    67:48:36:0f:77:36:15:32:ad:41:c0:ee:b7:78:c7:
                    a6:f4:83:6f:3d:16:8b:31:f2:99:bc:5c:1d:8d:97:
                    73:23:24:1b:3a:ba:08:43:38:9f:bd:78:ba:dd:b2:
                    34:c6:85:11:f3:b3:93:52:f9:9f:62:c6:f9:55:d5:
                    4a:8f:ac:75:1e:94:bf:ea:8b:08:a5:5e:da:a7:6e:
                    d3:30:3e:0a:fd:18:02:ef:9f:ea:b8:49:30:a0:21:
                    2a:2b:37:fc:f3:f7:09:1c:b3:b0:a6:a6:c0:66:9d:
                    46:76:1b:8c:b4:76:5b:5a:64:af:ab:a5:e6:67:21:
                    27:28:be:9d:00:af:f9:5f:ae:5b:0b:d2:95:46:23:
                    c3:2f:5e:cf:40:f6:e0:96:d3:23:a5:d6:b5:75:0d:
                    4e:bc:45:1f:ed:bc:1a:16:e2:5b:d3:49:da:dd:45:
                    f9:3a:f7:8b:8e:cd:ed:25:e7:26:c8:01:3f:de:1c:
                    3a:02:00:89:76:30:d7:eb:b0:f3:01:64:30:7e:e0:
                    74:e7:14:51:0c:6a:1e:c6:01:6d:7b:b7:37:dd:d0:
                    e7:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:67:87:C5:F9:AB:AE:52:38:EF:B3:2B:F4:4C:A0:C6:B2:85:85:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/b8fd8cac-f337-3458-a1f3-7f6a78f636f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl

            X509v3 Authority Key Identifier:
                keyid:91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd92:a00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:50:cc:62:a9:cb:bc:a0:50:91:55:eb:50:19:87:e6:99:5d:
         37:c4:0b:c6:dd:4a:88:3b:c1:74:72:b0:99:fb:79:9a:de:1d:
         2c:3e:2f:59:fe:3e:24:bf:f7:38:f5:6e:41:b5:fb:50:7b:ad:
         e7:9b:ac:19:27:54:98:dc:47:c1:48:9d:72:a9:af:37:d1:3d:
         12:a0:36:34:35:b6:c8:6c:ef:cd:e4:88:25:0c:6f:29:d4:ed:
         aa:cf:af:63:37:9e:f3:b7:3c:e9:9d:91:a3:74:06:66:ab:0f:
         67:96:60:cc:94:1a:75:d0:89:a3:a8:0c:18:4c:ba:ad:72:13:
         d7:60:fb:28:ca:83:7b:ed:4f:d6:68:5d:96:db:63:cd:84:6f:
         08:fc:7f:41:50:a4:f3:3d:26:6b:27:3e:a3:6c:df:50:2e:69:
         2d:fe:48:32:8b:53:37:25:07:f6:e7:32:de:ec:59:b8:36:6d:
         f9:65:e7:4a:43:af:47:3c:c8:c4:fe:ee:10:db:01:f8:c1:da:
         ab:4f:28:42:4a:90:31:b3:f7:d7:21:5c:d8:0c:c9:bd:2d:eb:
         88:0e:be:32:66:e3:51:bc:ea:54:1e:31:36:f4:32:7b:85:80:
         c4:45:bf:6f:5a:28:72:a5:05:4f:89:3e:1b:79:73:31:a6:be:
         88:b3:2a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----