Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/2bc0ee59-c9c5-30dd-8d7a-4d8341e9b6ba.roa
File:                     2bc0ee59-c9c5-30dd-8d7a-4d8341e9b6ba.roa (raw, json)
Hash identifier:          ySDJNzJRes9jDF0HxJ+Wf4shS/OhPTM349WOmgCOpwk=
Subject key identifier:   9B:02:8F:4A:C6:AD:02:EC:4E:D1:93:F3:C4:18:38:11:C3:8F:5E:55
Certificate issuer:       /CN=1284725e-3e3f-48a5-9b39-37b014dd6873
Certificate serial:       010D0C9F43285849393E7DA64955D41968129F80
Authority key identifier: 2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/2bc0ee59-c9c5-30dd-8d7a-4d8341e9b6ba.roa
Signing time:             Tue 18 Mar 2025 01:00:38 +0000
ROA not before:           Tue 18 Mar 2025 01:00:38 +0000
ROA not after:            Mon 16 Jun 2025 01:00:38 +0000
asID:                     6079
IP address blocks:        2610:80::/29 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:39:3e:7d:a6:49:55:d4:19:68:12:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1284725e-3e3f-48a5-9b39-37b014dd6873
        Validity
            Not Before: Mar 18 01:00:38 2025 GMT
            Not After : Jun 16 01:00:38 2025 GMT
        Subject: CN=db7aa137-de34-4d24-a918-9e5cce4e3196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:45:7a:cf:0b:46:30:66:bc:cf:0f:3c:d5:7b:
                    d9:9b:b8:27:51:56:ca:1e:eb:6c:3a:b5:47:e1:83:
                    bd:f2:7b:8e:66:3f:22:43:69:82:0c:b1:ce:4c:93:
                    83:ae:ef:8b:71:b3:68:f8:42:37:03:c7:1c:48:0a:
                    ea:1d:90:03:09:ee:8c:21:ba:99:e8:5c:c3:47:0c:
                    4c:e5:1e:2b:2b:e7:25:ad:72:f7:bf:78:a3:d5:3e:
                    38:6d:06:0c:80:8c:b8:63:fa:c2:c2:f5:35:76:f5:
                    24:3a:c7:70:6f:b2:a1:0f:6d:19:10:a4:81:ec:1c:
                    cf:99:04:11:83:5c:6c:d9:ad:f9:f2:d9:00:28:64:
                    74:2e:67:71:39:c1:06:dd:c8:3c:43:98:51:e0:df:
                    a6:e8:36:1e:09:58:e0:7d:e4:73:8c:70:57:ff:39:
                    8c:a7:34:88:60:df:25:d1:99:ad:df:87:b1:84:13:
                    58:9a:97:4d:f9:e3:02:32:89:da:35:67:7a:57:7f:
                    d5:07:74:1c:ef:6c:cb:d0:77:9a:05:48:08:73:1a:
                    61:27:80:05:83:f0:2d:7b:b6:82:4c:83:3d:f7:55:
                    50:87:41:50:db:bb:63:3e:8a:ff:d0:52:17:79:1d:
                    9c:17:b7:4b:9e:42:ad:ba:e4:65:c5:00:ad:78:43:
                    6b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:02:8F:4A:C6:AD:02:EC:4E:D1:93:F3:C4:18:38:11:C3:8F:5E:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/2bc0ee59-c9c5-30dd-8d7a-4d8341e9b6ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl

            X509v3 Authority Key Identifier:
                keyid:2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:80::/29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:6f:74:b5:3c:10:8d:28:3f:c4:77:3c:a4:ca:3e:65:b6:61:
         95:a8:cf:ff:f5:77:ad:99:0c:40:27:bb:f1:6e:19:37:06:14:
         35:7f:f0:16:81:b9:c8:b9:f0:d3:15:5c:61:e3:39:0c:2b:68:
         96:cc:d5:fa:1d:c8:b9:1c:26:93:59:6d:19:df:77:3d:7c:a0:
         26:03:14:b7:3b:ac:df:48:f4:e6:19:e9:b5:ba:2b:63:f7:4d:
         ba:f9:5d:d0:22:d1:f2:78:8f:41:29:dd:ff:69:63:e9:3f:82:
         4d:fc:52:fc:81:79:ae:d2:eb:a7:94:49:9e:10:e5:29:98:20:
         26:f1:d4:9e:04:f6:d7:1b:ef:f5:b4:61:c5:4e:da:0d:93:e0:
         fa:d9:02:c6:c0:69:bc:4a:b2:6f:58:4c:f5:ee:e8:ff:69:c8:
         9c:be:5b:8e:98:71:2c:9b:5e:db:d7:b8:22:ef:a7:85:66:4c:
         0e:6f:9c:a3:59:87:35:13:52:04:ac:d9:1f:bb:0e:0f:9a:05:
         28:81:99:f3:62:29:52:73:a8:6a:f4:8b:d8:aa:ce:ad:d6:6b:
         f2:f4:a0:36:5b:7d:65:31:11:c3:17:83:c0:3b:c2:a5:72:6b:
         1d:f9:2c:8d:7a:fd:8b:eb:f5:e6:f2:02:24:ad:6b:38:66:1a:
         6f:6f:b8:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----