Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/be375e79-4970-356d-aebb-2b604e197e8f.roa
File:                     be375e79-4970-356d-aebb-2b604e197e8f.roa (raw, json)
Hash identifier:          oJYodUMniBfIuOyFgmmeE4CPGfHQ/4+ouyuoCHboheQ=
Subject key identifier:   1A:98:96:31:59:B2:84:ED:BA:76:E9:87:44:1B:97:D1:90:75:B6:69
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849806F32DB1D10F8B16C8C04A0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/be375e79-4970-356d-aebb-2b604e197e8f.roa
Signing time:             Sat 12 Apr 2025 13:01:01 +0000
ROA not before:           Sat 12 Apr 2025 13:01:01 +0000
ROA not after:            Fri 11 Jul 2025 13:01:01 +0000
asID:                     20940
IP address blocks:        2600:1419:5200::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:80:6f:32:db:1d:10:f8:b1:6c:8c:04:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 12 13:01:01 2025 GMT
            Not After : Jul 11 13:01:01 2025 GMT
        Subject: CN=f872a3bb-9147-4238-a234-ebd9b25aab6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:03:ed:fe:fd:c3:97:12:eb:01:a2:31:1c:c8:
                    06:3c:4d:3d:bc:48:bc:16:94:de:fb:fa:4a:78:1d:
                    fa:cd:9c:5e:0a:3e:88:87:dc:39:cf:6e:6f:da:da:
                    9b:19:db:a7:80:c2:f6:d6:1d:a7:76:5f:24:f1:ff:
                    10:23:ea:76:ab:f2:a3:a0:f7:d6:1c:a1:84:f4:46:
                    9f:55:aa:f9:05:a7:02:a8:fc:42:31:47:58:f2:84:
                    3a:4c:b1:f0:cd:30:bf:28:95:85:ba:08:ca:dc:bf:
                    78:49:e4:b4:73:a5:05:17:e5:07:50:81:25:2d:59:
                    27:2a:10:c2:a4:6a:a5:11:a6:dc:e7:72:8a:d5:1e:
                    9a:97:b3:ed:5b:d3:e1:d4:0a:c6:7c:93:33:2f:b2:
                    26:02:54:b7:24:73:27:53:b1:4d:a2:74:51:c6:b4:
                    f5:4f:92:d2:d1:8e:9d:1f:c0:f0:04:95:c3:83:41:
                    73:aa:68:67:f3:53:b6:c9:1e:59:4b:48:a9:ce:12:
                    d6:80:0a:20:c0:eb:70:2a:80:d9:45:d6:06:44:0a:
                    51:63:c8:9c:33:b1:fd:47:c4:b1:0c:02:a4:ed:66:
                    fb:40:31:61:4f:87:5b:9e:86:9f:cc:24:1f:d4:30:
                    b8:73:a9:10:a3:06:e2:76:0e:a4:cf:94:ee:f9:49:
                    5a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:98:96:31:59:B2:84:ED:BA:76:E9:87:44:1B:97:D1:90:75:B6:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/be375e79-4970-356d-aebb-2b604e197e8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1419:5200::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:34:c2:67:4a:a3:d9:19:ca:26:ef:04:7b:81:4e:2f:73:a6:
         3f:05:d2:c3:f8:64:b5:9b:70:01:72:d4:c9:87:2a:e3:ae:ec:
         10:41:e1:34:6e:6a:89:cf:fb:fb:b5:49:2d:d3:f3:b9:5a:3c:
         24:bc:17:ef:0f:eb:be:e1:b2:f6:78:c2:17:73:50:e1:a5:d5:
         4d:c3:4f:92:10:85:77:c2:4e:a5:90:eb:a7:30:1c:b5:7d:b5:
         bb:0a:0c:14:9f:2c:2a:ff:bc:a7:0e:a3:86:92:42:28:6d:c5:
         57:cf:d1:14:46:9f:de:9f:cf:e3:3a:61:ee:21:4e:f1:4e:50:
         44:f3:7a:6e:f7:69:d5:60:d9:be:a3:32:ff:00:a9:8f:65:80:
         d0:7f:0f:93:06:9f:e2:29:c9:2f:7c:12:a6:40:f8:7b:9e:2b:
         e0:56:43:bd:ba:f8:bb:f3:0a:98:9b:44:ed:1e:eb:6d:8a:87:
         9f:a4:7f:b7:78:5b:e9:fe:84:68:87:ee:ae:fe:48:e1:ae:0f:
         87:2c:57:cb:61:39:2b:31:53:60:cc:5f:2c:97:9d:24:69:49:
         c4:60:1d:39:11:f4:a6:0d:8f:6a:61:b4:34:8e:ca:79:fd:25:
         4b:6a:58:d7:c6:66:c0:80:37:b4:2c:a2:85:ec:ec:48:09:51:
         cf:97:9b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----