Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/dc8b4841-4648-3afc-93d8-17cafe748add.roa
File:                     dc8b4841-4648-3afc-93d8-17cafe748add.roa (raw, json)
Hash identifier:          Ex+LWSUoTIBPdVp3tXJzQdzxuxRv7bVSbCAEgJ2Ws88=
Subject key identifier:   45:A6:23:E5:CD:9E:E3:21:86:09:C5:F4:FC:08:B6:B3:20:CC:EF:91
Certificate issuer:       /CN=158d5f15-a892-4134-840b-026e68357d71
Certificate serial:       010D0C9F432858497114333B74ECC7017A5EBB00
Authority key identifier: 2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/dc8b4841-4648-3afc-93d8-17cafe748add.roa
Signing time:             Mon 07 Apr 2025 01:00:47 +0000
ROA not before:           Mon 07 Apr 2025 01:00:47 +0000
ROA not after:            Sun 06 Jul 2025 01:00:47 +0000
asID:                     55116
IP address blocks:        2602:2c9:4::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:71:14:33:3b:74:ec:c7:01:7a:5e:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=158d5f15-a892-4134-840b-026e68357d71
        Validity
            Not Before: Apr  7 01:00:47 2025 GMT
            Not After : Jul  6 01:00:47 2025 GMT
        Subject: CN=ef0b7c86-dfad-4798-a06d-86f6b6df5102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b1:e9:16:b7:55:57:ac:24:43:93:54:45:3c:
                    11:bc:f1:29:2f:c0:62:54:51:70:22:27:06:e2:36:
                    6e:34:73:2a:33:01:0e:3e:2e:85:e9:2a:69:af:d4:
                    11:fc:b2:1d:75:c1:33:c9:12:6b:22:22:15:bc:dc:
                    80:76:4e:48:19:c6:38:56:54:28:ca:2b:ff:dc:04:
                    19:ab:ca:4e:aa:b4:d7:d8:4c:10:86:84:75:bd:b9:
                    ee:64:fa:c0:62:95:f4:fd:4f:ae:1a:ca:2c:79:d4:
                    13:cb:dc:f4:3a:18:70:83:cb:0a:6a:a2:fe:08:8d:
                    3f:bb:f3:26:64:6c:50:86:90:d9:cb:e2:e7:03:ba:
                    0e:2a:69:2b:a4:02:27:5e:62:77:fe:c2:40:4d:dd:
                    2b:08:b7:0d:af:78:0e:8d:43:83:b7:a1:98:87:4a:
                    78:37:74:43:59:0e:41:16:c7:df:30:c4:ac:2b:32:
                    b6:72:6e:77:53:8f:17:fe:87:ba:e8:cf:6f:7c:1e:
                    55:45:96:93:c3:97:37:ce:ba:ab:8e:58:2f:b7:71:
                    be:c7:2a:95:bb:29:db:50:7a:4c:fa:4f:42:3c:60:
                    cf:f2:51:59:0f:c1:44:00:b0:dd:e1:61:c2:54:8f:
                    12:0e:b4:25:83:4c:0f:97:63:f5:74:04:22:a9:4e:
                    54:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:A6:23:E5:CD:9E:E3:21:86:09:C5:F4:FC:08:B6:B3:20:CC:EF:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/dc8b4841-4648-3afc-93d8-17cafe748add.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl

            X509v3 Authority Key Identifier:
                keyid:2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2c9:4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:22:ed:af:b5:2c:64:f7:55:19:ee:5f:ca:0a:4c:0e:17:94:
         1c:ed:25:cc:52:26:37:29:00:c9:34:92:b9:7a:10:1b:19:e1:
         d8:ac:a2:22:e4:65:5e:11:bb:70:42:de:43:95:e5:eb:30:8a:
         ea:76:40:a9:23:a1:6c:78:73:02:70:37:0c:e8:5a:b5:dc:c4:
         10:7e:07:c9:98:cd:84:d3:dd:72:52:03:31:ae:18:07:1e:4d:
         a8:93:f4:83:6e:bc:a1:9c:02:8c:c3:d9:ef:8c:e5:64:fb:88:
         13:02:8d:00:f0:bb:eb:08:02:c4:8b:b9:14:17:29:eb:dd:d6:
         a9:a2:2b:f7:8f:f7:0e:0a:01:73:63:26:c3:e5:14:26:ac:7a:
         8e:90:c3:76:ce:42:1e:1e:10:f9:f7:2e:27:bf:e0:00:c6:e8:
         62:09:55:f6:68:08:00:f1:7a:ba:ad:7c:44:92:c0:32:bc:74:
         f3:45:f4:b8:5a:f4:57:10:32:3a:15:67:53:2c:0c:0a:90:43:
         0e:80:36:f0:02:fd:6a:4b:a0:dc:64:be:62:81:76:80:90:2b:
         8c:97:ab:81:c7:14:72:43:0d:0b:18:68:90:c7:cc:7d:eb:04:
         be:3d:00:82:a2:b7:f4:f1:72:8f:81:21:9f:2f:26:c4:37:26:
         34:2b:43:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----