Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/56c386da-86c1-3818-b3b3-0d3250bfb54f.roa
File:                     56c386da-86c1-3818-b3b3-0d3250bfb54f.roa (raw, json)
Hash identifier:          ph+FmyAz98U37mESbREuTM3pafW/dKFo15Rc4KSCMFU=
Subject key identifier:   9E:B2:BB:A0:57:D7:D0:A3:ED:FE:C8:3C:8B:B7:82:EA:7E:F5:48:26
Certificate issuer:       /CN=158d5f15-a892-4134-840b-026e68357d71
Certificate serial:       010D0C9F432858495C24425784767FB91CF9BA80
Authority key identifier: 2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/56c386da-86c1-3818-b3b3-0d3250bfb54f.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     215909
IP address blocks:        2602:2c9:ff0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:42:57:84:76:7f:b9:1c:f9:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=158d5f15-a892-4134-840b-026e68357d71
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=a676abb1-dc9d-41fb-aa53-fc8141d98011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:72:35:4a:b5:20:44:17:1c:de:62:d5:39:53:
                    cf:fd:e7:81:dc:35:57:b4:1a:89:e0:87:f8:b9:04:
                    b2:21:39:7f:c1:9b:33:5e:c1:d8:06:9d:cb:f6:a5:
                    c0:71:26:63:6a:63:4c:9f:f1:25:43:79:9b:59:54:
                    ab:40:c7:52:d0:1d:7a:f0:a9:86:f0:53:91:18:8b:
                    ef:96:9b:6c:04:97:bf:05:b5:e4:4b:b5:39:43:2e:
                    f0:af:c9:8a:5b:8c:47:90:db:3e:f9:35:42:7c:a7:
                    63:a0:45:7d:33:31:fb:99:a8:40:e1:90:28:b9:5e:
                    c8:d3:db:80:1b:c5:13:42:3f:95:36:18:7e:49:ec:
                    99:4f:ea:38:73:b3:d8:0e:a7:4f:a9:1a:74:0d:f4:
                    de:cc:74:43:54:13:bd:e8:1d:00:49:9b:a5:87:b8:
                    9e:e9:63:c4:64:59:52:6b:03:9b:a9:2b:5f:3f:e9:
                    e6:51:3b:c8:68:a9:45:8a:35:88:f1:fa:52:78:bf:
                    4d:6f:9c:d1:35:9f:28:31:ab:ce:22:cc:a7:3a:10:
                    1f:e7:2b:36:72:3d:93:ab:2c:18:e2:34:bc:fb:a4:
                    cf:0e:9f:d9:2c:f3:9e:76:82:7c:c0:17:38:16:68:
                    30:cf:67:ad:9a:76:a1:9d:35:72:78:66:a2:37:24:
                    a7:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:B2:BB:A0:57:D7:D0:A3:ED:FE:C8:3C:8B:B7:82:EA:7E:F5:48:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/56c386da-86c1-3818-b3b3-0d3250bfb54f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl

            X509v3 Authority Key Identifier:
                keyid:2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2c9:ff0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:29:6b:9f:5e:86:68:83:8e:4d:cf:7a:71:13:0e:0c:81:e8:
         d4:59:c7:1e:26:d2:53:29:2e:7f:d9:14:d8:18:dc:32:1e:b3:
         13:10:32:24:8b:83:2a:c4:ae:78:f7:5c:b2:4f:dc:21:92:2e:
         b9:b5:5b:6f:53:68:54:c9:60:0c:39:54:42:08:7d:2d:bc:06:
         ad:d4:f9:b7:96:58:52:cb:f1:42:0f:20:99:d6:62:29:b3:a7:
         af:89:73:81:c1:43:6e:a0:11:d4:6c:3d:02:96:a5:f4:f7:aa:
         28:a0:88:a7:e8:71:dc:0a:b6:02:9d:64:4f:ae:fc:8d:34:23:
         ab:1f:d7:a3:e4:83:58:c2:a2:8f:56:eb:06:91:2d:02:1e:db:
         a1:71:d6:c0:bc:c3:fd:e7:1d:02:6b:70:ec:45:dc:67:e1:1b:
         ab:13:65:f8:64:ca:3b:fb:ce:ba:95:de:f8:53:bb:fa:8e:87:
         8a:4f:75:85:4c:6f:25:41:d0:28:54:28:77:41:38:10:cd:a0:
         a1:d7:55:51:b8:d2:38:39:e0:61:c5:86:3e:11:58:e4:95:2d:
         fe:ed:ae:fc:69:5b:2d:f8:4d:10:6a:ee:4b:c8:76:02:fc:84:
         a5:e0:fe:e6:f1:a9:2e:66:16:ac:0d:4e:cb:ef:68:1a:86:f4:
         c8:dd:23:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----