Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/71b5acdd-9ebe-3657-8828-1ee90cd2adf9.roa
File:                     71b5acdd-9ebe-3657-8828-1ee90cd2adf9.roa (raw, json)
Hash identifier:          Len5OipxVA0mnM90sABqyyfk02kLXz406Xly4AlC4Ec=
Subject key identifier:   DD:58:16:8C:24:21:38:87:85:E0:F4:3F:70:82:72:5E:29:BF:E7:E5
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849806F38B12EC8859F3BFBDD80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/71b5acdd-9ebe-3657-8828-1ee90cd2adf9.roa
Signing time:             Sat 12 Apr 2025 13:01:01 +0000
ROA not before:           Sat 12 Apr 2025 13:01:01 +0000
ROA not after:            Fri 11 Jul 2025 13:01:01 +0000
asID:                     20940
IP address blocks:        2600:1405:5000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:80:6f:38:b1:2e:c8:85:9f:3b:fb:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 12 13:01:01 2025 GMT
            Not After : Jul 11 13:01:01 2025 GMT
        Subject: CN=f1697d2a-a1e8-4d33-9987-1b3fc495e59e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:cc:13:46:b3:35:5f:83:d8:0c:58:81:d9:e8:
                    19:87:f6:de:38:25:00:dd:a8:c6:e4:81:08:cd:5a:
                    d4:50:a7:ba:07:7b:d6:6c:ca:b8:ff:a5:1a:96:c2:
                    d2:2b:cd:dc:07:85:f9:8d:d6:ff:79:7b:f8:96:08:
                    1a:66:14:5e:25:a7:b5:6f:38:f4:46:2d:b2:7e:0f:
                    61:09:36:37:a5:96:fa:dc:68:2c:75:71:f0:ea:66:
                    7d:22:87:d1:db:67:5f:d3:9d:f5:01:6b:16:29:2a:
                    e8:20:a9:66:3d:14:5b:5c:c6:68:15:5d:3c:fa:ea:
                    0e:23:99:1d:d1:b7:6a:cc:18:c8:45:eb:da:ed:05:
                    53:ec:36:64:6b:8e:2f:8d:20:f7:6b:7f:44:6f:47:
                    98:08:77:3f:4b:24:32:ff:b4:0a:b0:a4:4c:2f:8f:
                    98:34:5c:d5:1f:81:9c:5d:ae:1b:7d:22:9d:9b:1a:
                    18:4f:4d:32:ec:fb:a7:9b:8a:1d:a3:16:bd:5b:0b:
                    56:13:98:78:79:1a:6e:7e:58:a0:fe:44:15:a6:e8:
                    da:1a:31:f9:46:65:17:60:94:0b:23:0b:cd:46:8e:
                    c8:ec:4b:bb:af:5f:97:90:2b:08:11:58:a4:a9:d8:
                    07:18:f9:9d:c3:da:07:a0:c8:f6:fd:da:6c:be:2b:
                    15:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:58:16:8C:24:21:38:87:85:E0:F4:3F:70:82:72:5E:29:BF:E7:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/71b5acdd-9ebe-3657-8828-1ee90cd2adf9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1405:5000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:ed:57:1e:14:a2:97:b4:b9:75:95:21:68:1c:1b:54:2e:d7:
         8a:82:60:69:6c:ce:f5:86:b7:4e:46:34:1b:84:20:96:54:a4:
         78:f4:10:76:92:44:1c:1c:a8:8a:bc:c4:06:4e:cf:8f:ed:4b:
         2b:dd:f9:f5:cc:67:80:a5:32:8e:a2:6f:b3:65:87:05:b8:55:
         b2:8d:24:98:8f:c6:ca:6b:76:ad:09:4c:19:45:eb:83:03:db:
         70:db:cb:8e:09:a6:d1:9a:1a:29:e6:12:78:d3:4e:99:cf:ba:
         a9:5d:d6:51:77:2c:b6:16:17:ec:92:fa:66:5b:d8:a5:91:b9:
         e9:ef:4e:4a:7e:b6:1e:08:cc:53:d6:ee:e0:7b:50:64:41:44:
         41:a1:9c:92:9b:0d:65:1b:24:60:fb:12:d9:a3:16:2a:36:bb:
         8b:7a:1d:be:77:80:b6:79:92:cf:28:b3:f9:08:d2:04:d8:76:
         27:70:ac:6e:01:ca:5a:2b:d9:15:24:b8:86:27:5f:a1:ec:ad:
         09:86:49:b0:b4:d7:a9:1a:d2:82:06:01:e3:c7:6e:5e:76:6e:
         d7:b5:ae:80:8e:e6:f4:51:4f:3e:8b:0a:b3:34:f0:aa:38:2a:
         83:8c:c2:e5:8b:8c:04:53:57:77:cf:85:20:93:a9:82:af:0d:
         a0:96:d2:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----