Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1f6698-8c5a-433a-85f7-479fcb609e9a/b78129a5-4860-319a-9dbd-7c748f79076a.roa
File:                     b78129a5-4860-319a-9dbd-7c748f79076a.roa (raw, json)
Hash identifier:          d60Uohxb46wzZ0DW/du0/qPQL5Ro1aEtf4WdBIfmRmU=
Subject key identifier:   A5:27:91:46:64:01:57:40:3B:E6:E7:5E:1B:5F:4C:F8:BF:2B:1E:C2
Certificate issuer:       /CN=fc1f6698-8c5a-433a-85f7-479fcb609e9a
Certificate serial:       010D0C9F432858496FAF0F5491A57933987F3100
Authority key identifier: 57:12:47:53:58:1F:4A:20:E2:DD:8B:A4:AB:9E:7C:AE:85:EF:3D:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1f6698-8c5a-433a-85f7-479fcb609e9a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1f6698-8c5a-433a-85f7-479fcb609e9a/b78129a5-4860-319a-9dbd-7c748f79076a.roa
Signing time:             Sun 06 Apr 2025 13:01:01 +0000
ROA not before:           Sun 06 Apr 2025 13:01:01 +0000
ROA not after:            Sat 05 Jul 2025 13:01:01 +0000
asID:                     397601
IP address blocks:        2620:6d:a000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6f:af:0f:54:91:a5:79:33:98:7f:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc1f6698-8c5a-433a-85f7-479fcb609e9a
        Validity
            Not Before: Apr  6 13:01:01 2025 GMT
            Not After : Jul  5 13:01:01 2025 GMT
        Subject: CN=a102a084-4b0b-4580-96a1-9df0b7bfffc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:13:48:b3:6d:62:a0:56:43:44:e5:b6:83:c6:
                    67:22:32:64:2f:46:5a:ac:c3:d1:7b:c3:07:88:fe:
                    84:56:91:b9:e9:f5:f8:2c:9f:0d:5a:8f:44:d7:36:
                    a4:d8:23:5a:8c:d5:42:e5:50:c3:c2:72:96:87:90:
                    5d:0d:8a:54:d6:16:c9:ba:30:1b:37:44:f0:c0:33:
                    98:a7:e6:8a:c2:22:52:58:e3:e5:7a:35:57:0c:16:
                    73:90:35:17:62:f6:09:70:6f:d4:54:8e:cb:aa:d7:
                    42:94:1c:28:5e:5d:f2:f4:a3:59:75:90:a6:23:be:
                    b7:56:a8:ad:ef:fe:83:14:b9:ee:26:60:d9:61:72:
                    5e:3c:ca:5b:51:4b:09:6a:07:8f:90:89:15:c1:ae:
                    e6:8c:08:32:31:0e:17:21:89:c2:f7:0d:bf:7b:eb:
                    ac:04:76:af:5d:ec:53:e4:b8:30:4b:12:a4:9c:37:
                    5f:10:ea:76:ae:11:9c:33:40:a7:a3:3e:a6:9d:99:
                    59:ea:23:85:0f:b7:db:40:5e:33:16:f0:22:52:f4:
                    f9:8f:e1:58:f2:e0:80:25:ff:ca:15:61:5c:76:37:
                    bd:5b:86:df:b9:0c:4e:35:e2:0c:74:a8:23:be:2c:
                    78:6b:62:47:49:6d:e4:76:6e:d9:85:26:32:1d:d2:
                    e1:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:27:91:46:64:01:57:40:3B:E6:E7:5E:1B:5F:4C:F8:BF:2B:1E:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1f6698-8c5a-433a-85f7-479fcb609e9a/b78129a5-4860-319a-9dbd-7c748f79076a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1f6698-8c5a-433a-85f7-479fcb609e9a/fc1f6698-8c5a-433a-85f7-479fcb609e9a.crl

            X509v3 Authority Key Identifier:
                keyid:57:12:47:53:58:1F:4A:20:E2:DD:8B:A4:AB:9E:7C:AE:85:EF:3D:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1f6698-8c5a-433a-85f7-479fcb609e9a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:6d:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:47:af:86:c6:b6:60:49:93:c6:3b:c8:4b:5c:3b:e2:bc:b6:
         40:50:d0:99:a8:26:aa:20:dd:22:5c:0e:52:0e:0a:da:85:b7:
         ec:f5:09:2b:35:79:5c:b6:48:5a:d7:a6:3d:03:97:a0:ff:cc:
         13:3c:ae:33:e9:6a:12:98:c8:17:3e:77:72:f2:66:76:10:5b:
         dc:ee:c4:c0:19:53:89:f4:13:e7:ba:79:64:19:57:cb:fa:10:
         8e:0c:09:34:f3:a6:e1:5c:39:72:20:eb:00:c0:ee:47:80:46:
         ae:d4:d0:7e:ac:3c:42:a6:68:1f:7a:03:b2:ea:16:19:3b:a7:
         5d:22:36:c9:87:8c:94:56:19:be:54:ee:c8:77:c5:a8:f0:ce:
         39:8c:a6:a7:9f:8c:e4:f5:9d:90:15:e7:9e:10:af:4c:bb:f3:
         e7:45:1b:4c:e5:4a:e0:a5:f0:41:35:1e:56:cd:19:e7:4c:0b:
         f7:a4:21:0a:1f:8f:f6:f0:d5:41:4d:17:ce:88:80:dc:26:d7:
         33:4b:a2:93:14:5a:b4:7c:2d:2a:29:c3:d5:74:81:14:21:27:
         ee:27:f2:bb:09:55:3d:d2:15:a0:03:18:53:ab:e3:ba:03:49:
         50:c7:2f:6e:9e:1f:74:d9:80:2f:20:57:82:07:b1:ee:30:6f:
         49:ec:02:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----