Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9e00a484-04e3-3ff9-860d-efe1312f5bb8.roa
File:                     9e00a484-04e3-3ff9-860d-efe1312f5bb8.roa (raw, json)
Hash identifier:          rFN8csS0JXvqo7fUXKqaTRhPawf1u5ow49sbd9aMCU4=
Subject key identifier:   1D:6C:80:20:A1:45:D4:B9:C6:17:1F:32:8D:06:DE:32:A0:3C:70:71
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858495EEEE5BAB44F9EDE053A5580
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9e00a484-04e3-3ff9-860d-efe1312f5bb8.roa
Signing time:             Mon 31 Mar 2025 13:00:59 +0000
ROA not before:           Mon 31 Mar 2025 13:00:59 +0000
ROA not after:            Sun 29 Jun 2025 13:00:59 +0000
asID:                     32787
IP address blocks:        2606:6c00:205::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5e:ee:e5:ba:b4:4f:9e:de:05:3a:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 31 13:00:59 2025 GMT
            Not After : Jun 29 13:00:59 2025 GMT
        Subject: CN=522edd73-98c8-4639-9576-8c74879c91c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:29:b6:65:2d:18:1a:0a:f3:5b:6e:49:9f:82:
                    b3:66:9c:9b:4d:0f:74:e9:75:90:d0:dd:00:b3:17:
                    fb:f1:50:82:70:43:6f:9e:7e:78:14:00:ff:58:34:
                    9c:42:14:f1:fe:d5:2e:ae:09:d0:66:a8:b1:64:2f:
                    e7:f9:ea:22:c6:8d:12:31:6c:ea:09:7d:d9:e0:20:
                    53:fe:99:f9:7f:6f:4c:1b:f6:0a:57:b6:e4:59:57:
                    52:d4:27:11:ef:f3:3f:fe:c3:d1:2a:4f:72:ec:73:
                    5d:ab:6c:63:cb:34:9b:fa:55:1d:2b:95:b0:2b:58:
                    8c:b2:61:be:a8:c5:a9:5a:18:37:22:60:d6:62:55:
                    ee:9f:ba:50:2e:6e:2a:f1:aa:44:3c:57:e0:0b:71:
                    d1:80:e5:c3:4e:46:2f:3b:13:e0:bc:e5:20:81:48:
                    e0:27:e2:9d:33:76:8b:ef:d5:ab:5d:f5:ed:2f:14:
                    68:ec:26:09:b6:69:61:34:7a:56:9e:51:fd:4d:92:
                    04:8e:f0:62:65:82:a8:0f:3e:f1:10:1b:91:4e:1b:
                    8b:a8:b2:df:77:02:c6:02:08:ca:c4:73:db:71:e0:
                    ea:08:fb:a0:06:58:00:f1:3b:d5:12:2a:00:c4:9f:
                    22:e0:92:32:d2:80:8c:83:4a:ac:fd:5f:e1:98:d2:
                    88:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:6C:80:20:A1:45:D4:B9:C6:17:1F:32:8D:06:DE:32:A0:3C:70:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9e00a484-04e3-3ff9-860d-efe1312f5bb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:6c00:205::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:2f:0c:68:07:ef:28:3a:42:ad:17:4e:6a:95:3f:bc:c7:02:
         01:25:fe:9f:6e:ce:01:6e:e5:1a:8f:ab:d6:a4:fc:49:4d:96:
         dd:b5:57:2b:0a:6f:ba:27:98:73:a0:6f:c2:9c:58:da:ae:a2:
         8b:e6:36:f0:b7:a3:03:ef:30:dd:2b:05:e5:ed:d2:b6:ed:6f:
         d8:38:f0:7d:e0:7c:5c:95:b9:d1:9e:ea:af:78:13:74:a1:e5:
         2c:f2:8c:ee:94:c5:1d:5f:e2:85:b4:bb:a9:af:11:fa:91:84:
         dd:68:17:95:01:67:88:cb:0e:39:c5:57:26:a2:98:07:a3:0b:
         9d:79:b2:c2:e0:1f:fc:a6:cb:91:f0:e9:e0:42:6a:24:49:0c:
         dd:80:77:11:08:be:e9:2b:df:f7:4b:06:ff:58:77:c6:b7:93:
         da:a0:5b:bd:0b:0b:80:7e:b2:e1:a9:58:f6:32:4e:61:89:65:
         e7:4d:17:a5:f5:2b:e2:f7:84:11:aa:27:aa:f0:69:1b:fe:69:
         dc:e8:a5:48:7e:76:69:1f:12:2f:87:d5:4a:0d:7f:f7:b9:8d:
         d8:df:a2:6e:ab:48:88:4c:a1:23:4f:75:da:72:3e:81:fd:c6:
         ac:61:d6:48:4b:95:1f:33:b3:4e:f5:0f:02:38:5e:82:b6:52:
         c5:1b:31:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----