Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ec478647-9f72-3bad-a79e-ef2a9581b9e0.roa
File:                     ec478647-9f72-3bad-a79e-ef2a9581b9e0.roa (raw, json)
Hash identifier:          epKMxM/MvHAQFT+0pAFDAvIJ5FnUlLT2ZBkezaw0lAQ=
Subject key identifier:   30:B9:2F:C9:32:59:F8:1D:C6:BD:60:50:28:B1:2D:01:BA:B1:96:FA
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584902EC263EF29379CFF4FC7E00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ec478647-9f72-3bad-a79e-ef2a9581b9e0.roa
Signing time:             Wed 26 Feb 2025 14:00:51 +0000
ROA not before:           Wed 26 Feb 2025 14:00:51 +0000
ROA not after:            Tue 27 May 2025 13:00:51 +0000
asID:                     35994
IP address blocks:        2600:1408:f800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:02:ec:26:3e:f2:93:79:cf:f4:fc:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb 26 14:00:51 2025 GMT
            Not After : May 27 13:00:51 2025 GMT
        Subject: CN=4d3b1589-9543-4d47-b312-2d79adcca03a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:78:cd:84:51:43:14:d1:3a:85:95:ce:e7:b0:
                    55:77:8c:91:26:75:6e:92:e3:81:97:7d:d2:5d:6e:
                    7d:df:ee:21:fb:11:00:54:7a:28:8f:e4:c2:fb:0f:
                    62:43:66:7f:98:1d:d9:02:39:94:cf:02:1e:c5:7d:
                    b0:c5:aa:b6:13:ef:26:ce:dd:25:b0:35:01:4d:77:
                    00:02:80:12:a8:3e:60:03:28:c5:03:de:3d:e5:30:
                    dc:c6:ea:39:e3:21:c4:20:75:ff:55:fc:d2:96:4e:
                    9e:19:dd:18:73:87:a9:b0:4a:07:ad:93:d6:30:85:
                    a1:c7:bc:8a:dc:16:ae:37:fd:0d:96:b6:0f:17:8b:
                    8c:71:0e:cd:a4:12:f0:6e:4c:90:d6:a0:cd:ba:66:
                    10:0c:4c:65:8e:ab:e4:9e:3f:33:a1:d1:29:d4:d6:
                    7e:73:a0:6d:f3:22:47:29:55:ed:87:ee:c5:db:bf:
                    f7:67:fa:2e:31:be:53:a1:06:e0:32:91:a1:2c:cd:
                    aa:3a:45:60:0c:41:10:3d:5d:5a:90:4f:25:75:ca:
                    ad:a7:6d:37:ea:46:1d:96:76:8f:39:7d:2e:72:23:
                    07:d8:87:13:ec:62:26:82:02:91:a7:bc:36:cb:cd:
                    63:1e:de:e1:1e:d4:0d:df:c9:db:ec:f2:cb:fc:94:
                    27:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:B9:2F:C9:32:59:F8:1D:C6:BD:60:50:28:B1:2D:01:BA:B1:96:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ec478647-9f72-3bad-a79e-ef2a9581b9e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1408:f800::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:19:2f:fc:9b:c9:01:b5:5c:71:cb:00:68:0e:6f:b9:f9:e3:
         80:b4:48:77:4f:0a:ce:31:af:ae:1d:c3:16:28:56:f7:d3:1e:
         d6:12:88:7e:f0:ae:5f:5b:4e:ca:cf:f9:69:4c:96:d8:2a:3c:
         1a:36:0c:0e:af:4d:e6:06:ac:38:f4:1f:33:8b:8b:64:3b:a2:
         53:42:0e:1a:c8:55:ce:1c:c4:c6:8f:d8:01:8a:84:45:7e:55:
         b4:80:15:e5:35:0f:56:7e:4d:6a:e0:4f:54:21:46:65:63:d2:
         61:4c:4d:d6:18:80:ca:42:8b:c5:5b:9d:a3:54:99:20:33:d6:
         6d:69:ae:c9:80:81:24:0d:39:19:2d:b7:1d:18:2e:6b:e5:ff:
         2b:08:bc:ad:fb:82:bd:3c:fa:3c:48:4f:b6:db:ff:1e:6a:68:
         f6:42:94:22:83:b5:00:98:2c:64:c9:d0:48:1d:90:54:61:97:
         c0:14:d7:f7:5f:1a:12:5d:70:fd:e5:a2:64:3f:31:7d:bd:8a:
         d6:d7:71:c3:4c:97:26:9a:5d:e2:8e:9f:e7:57:32:cc:9b:8e:
         cf:bc:34:fa:75:8a:87:7f:d6:7f:a6:51:16:6a:fa:b4:e6:16:
         63:54:5d:c9:96:a0:8e:31:8f:4f:04:49:0e:fb:96:a9:59:18:
         a4:98:5a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----