Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b/305954c1-d134-3ae5-862d-8b23cb270e2f.roa
File:                     305954c1-d134-3ae5-862d-8b23cb270e2f.roa (raw, json)
Hash identifier:          p5EjDBwAXhzO5EOqSR/whX/LcBhX/tzhwtHCx08g0HY=
Subject key identifier:   2E:04:5D:89:ED:5A:FF:7C:EE:63:A2:15:DC:64:A3:0A:01:1A:2B:F9
Certificate issuer:       /CN=94f623e7-c6be-4c3b-b554-6ad6acb0850b
Certificate serial:       010D0C9F43285848F926935AB51955BC51A7F200
Authority key identifier: 91:C5:DB:1E:DC:A5:61:2B:84:0B:A0:AE:A4:8D:64:C5:05:C8:10:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b/305954c1-d134-3ae5-862d-8b23cb270e2f.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     13696
IP address blocks:        2602:f77c:100::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:93:5a:b5:19:55:bc:51:a7:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94f623e7-c6be-4c3b-b554-6ad6acb0850b
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=dce5369d-3f51-4ca0-bb9d-09823d2bf6bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fd:d5:1f:3d:25:63:2e:a1:fa:96:e9:a0:0c:
                    e8:05:f3:bc:36:31:cd:db:8b:58:6c:ef:ca:51:7e:
                    d3:ef:3c:47:c2:f6:3d:d0:00:13:46:36:5c:00:d2:
                    2c:ad:45:03:91:c7:c9:ad:04:2c:2b:f6:45:68:13:
                    68:86:cc:34:57:3e:6b:62:e8:62:8e:a7:14:c3:08:
                    a1:25:b4:9d:45:c2:fd:44:db:4b:bd:95:bc:49:13:
                    64:4d:a0:0b:ec:e6:6f:1a:ac:fa:cb:f1:d0:5c:d5:
                    6b:b0:6b:ec:ff:25:2f:36:1d:90:a5:af:0a:28:e5:
                    be:f2:d1:27:02:69:0f:91:bf:f5:b1:c9:fd:4f:fe:
                    2d:36:a1:3b:8e:37:cd:56:08:19:74:1a:c3:af:bd:
                    1a:f7:69:bf:08:b9:ac:76:4c:57:d9:c1:30:c7:e5:
                    35:c3:07:3e:3e:18:c5:bb:80:8f:4e:33:cd:2e:71:
                    b0:9c:52:c3:aa:cf:05:d8:64:6f:6d:5f:02:7c:e1:
                    4b:3b:66:c4:7e:83:b0:71:9a:73:0b:bf:ad:71:6c:
                    37:df:10:bd:96:ff:a7:7b:ae:6e:e3:e8:bb:c2:99:
                    d6:ed:75:2d:9b:4a:f9:be:7c:9d:57:3b:71:0f:d7:
                    71:2b:ee:59:dc:f2:8f:de:c0:db:d9:cd:b7:99:5a:
                    e8:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:04:5D:89:ED:5A:FF:7C:EE:63:A2:15:DC:64:A3:0A:01:1A:2B:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b/305954c1-d134-3ae5-862d-8b23cb270e2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b/94f623e7-c6be-4c3b-b554-6ad6acb0850b.crl

            X509v3 Authority Key Identifier:
                keyid:91:C5:DB:1E:DC:A5:61:2B:84:0B:A0:AE:A4:8D:64:C5:05:C8:10:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f77c:100::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:34:90:94:93:37:c3:c3:cd:4e:2f:e7:42:86:1f:b3:16:df:
         7d:14:64:06:60:f0:0e:9c:07:cb:11:df:4c:9a:0b:dd:74:74:
         35:98:62:db:9a:a6:ef:5b:d2:db:a2:54:40:72:7f:2f:59:35:
         e4:fe:e7:52:2c:41:56:b6:9a:a5:b6:4c:73:ad:30:85:d9:17:
         be:7f:d8:86:65:db:bc:20:ba:cf:24:b4:4b:e2:39:6e:f2:21:
         86:55:1c:7e:e6:d4:59:02:da:e4:15:40:af:fc:12:61:24:a5:
         75:35:b4:75:27:5b:72:c2:c0:6d:ae:b9:3a:bc:93:bd:7d:88:
         aa:67:ec:95:73:02:d2:2c:b2:9f:16:58:f2:0b:31:2a:d5:58:
         67:ee:c6:85:1a:71:10:5b:ad:e1:3f:cc:25:bf:c0:41:1c:dc:
         8f:6e:fa:37:21:50:5d:42:14:eb:f6:b7:6b:90:02:e2:4a:6f:
         ec:97:52:3a:3d:f1:22:c7:94:fe:68:06:e9:ad:18:ed:fc:41:
         b3:5a:3d:42:c4:e0:ee:08:a9:db:ce:9b:c1:e8:5a:84:ac:b9:
         dd:bd:c8:92:47:f0:0f:08:1b:2e:c0:f0:1e:40:37:38:e5:cd:
         2f:1a:14:e6:db:56:28:4d:7b:df:6f:24:9b:e8:48:59:6d:8a:
         14:e8:a9:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----