Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d/c61f1716-f306-3b92-b864-da2e99326e06.roa
File:                     c61f1716-f306-3b92-b864-da2e99326e06.roa (raw, json)
Hash identifier:          iZSKWdv1A9WibFO8ppFxnzYzZBX9Jq+4dREMiXRnTzw=
Subject key identifier:   79:28:EF:CE:22:34:AC:BD:3F:53:23:0A:48:DA:D7:27:83:A5:7A:BE
Certificate issuer:       /CN=5541e022-414f-45f5-9426-a7643db1ec8d
Certificate serial:       010D0C9F4328584981D457512AFC155B5E807200
Authority key identifier: F5:72:66:9B:FA:2B:D5:E4:58:2E:1F:EA:1A:CA:67:24:96:6B:3F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d/c61f1716-f306-3b92-b864-da2e99326e06.roa
Signing time:             Sun 13 Apr 2025 01:00:44 +0000
ROA not before:           Sun 13 Apr 2025 01:00:44 +0000
ROA not after:            Sat 12 Jul 2025 01:00:44 +0000
asID:                     149020
IP address blocks:        2602:fa08:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:d4:57:51:2a:fc:15:5b:5e:80:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5541e022-414f-45f5-9426-a7643db1ec8d
        Validity
            Not Before: Apr 13 01:00:44 2025 GMT
            Not After : Jul 12 01:00:44 2025 GMT
        Subject: CN=0ddbbd62-731e-451d-a166-edf37df79faf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ce:8a:33:cd:05:98:48:1c:51:15:87:2d:52:
                    0e:c4:df:bb:9b:7b:d6:2d:52:4c:61:e4:e1:8a:89:
                    49:29:f9:70:95:76:87:b1:78:ab:f1:4a:5d:be:c0:
                    86:0a:92:b3:ab:d6:f3:c3:e6:11:41:57:58:e6:92:
                    d5:1d:3e:26:ed:2c:b5:2c:88:92:9c:3d:63:23:75:
                    18:15:55:64:b6:2f:63:19:f8:16:cf:69:4e:b8:ac:
                    af:7b:a8:07:36:82:c1:bb:83:ef:ce:a9:75:90:7b:
                    5e:c9:3d:82:bd:2b:c3:62:0e:d3:b5:83:c3:8c:08:
                    16:fa:0b:24:dd:52:30:33:b9:40:b3:65:6b:d5:51:
                    b2:4c:51:82:62:eb:ed:ad:30:2e:c0:ce:74:52:65:
                    2f:f2:66:b0:2f:1c:b7:63:21:e3:e1:d5:e5:72:64:
                    c8:25:0c:24:3f:df:d6:4a:e7:8c:65:47:e7:f6:e7:
                    1e:54:ec:bd:6b:5a:8d:93:90:f1:d8:91:f0:24:5e:
                    12:1b:8b:df:4b:dd:fd:21:3d:84:de:f6:ad:76:80:
                    19:1f:e5:11:6e:65:40:e7:1a:81:fd:a9:f2:59:f3:
                    31:d9:08:d3:56:82:95:9f:f1:2a:b6:cd:64:8c:90:
                    a8:f7:09:4e:2a:94:3c:e5:9b:21:f4:3a:d8:2f:61:
                    a8:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:28:EF:CE:22:34:AC:BD:3F:53:23:0A:48:DA:D7:27:83:A5:7A:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d/c61f1716-f306-3b92-b864-da2e99326e06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d/5541e022-414f-45f5-9426-a7643db1ec8d.crl

            X509v3 Authority Key Identifier:
                keyid:F5:72:66:9B:FA:2B:D5:E4:58:2E:1F:EA:1A:CA:67:24:96:6B:3F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa08:3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:99:47:8f:4e:d2:35:c6:39:f2:55:86:73:6e:9d:ca:e7:7e:
         b2:45:e4:a9:5b:9c:e5:bd:16:29:ed:54:c7:c5:6f:29:86:3f:
         57:2b:80:56:ff:5f:f3:f4:ad:2d:92:62:57:55:78:de:1e:c8:
         61:7b:01:c8:ea:23:d3:00:61:82:4a:55:ad:8b:49:34:01:e4:
         9b:6a:a4:f5:24:3e:50:d2:bb:72:ec:a5:0e:68:e1:b9:2c:5f:
         bb:a5:62:71:ad:a9:92:b5:5b:61:90:af:f1:6a:10:70:47:12:
         9e:8c:fc:56:df:19:ca:68:b8:9a:b9:8d:cf:26:c8:17:9e:72:
         8a:1f:a9:11:ea:34:24:e4:53:99:fc:87:6c:b9:ba:b3:dd:e1:
         c3:52:27:a0:9d:c6:3c:e1:fb:db:eb:8f:8a:1d:1c:5b:63:5c:
         a0:d3:2a:e0:3a:a0:64:97:c8:79:8f:9e:b1:6b:13:d2:77:88:
         bb:eb:8e:75:b8:4d:d3:eb:63:cf:86:bb:9d:57:b0:db:fb:56:
         97:d0:35:2f:5f:23:e4:bb:e1:a6:d4:38:b3:5b:c3:e4:1e:a8:
         64:08:03:e1:f1:78:c7:8d:b1:3e:15:4c:6b:c8:28:98:1e:73:
         53:33:e1:25:48:96:11:0d:79:b1:5f:32:a8:ea:63:0f:04:0b:
         1a:38:5c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----