Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/675637fe-4458-3611-bbd4-de528d9fc417.roa
File:                     675637fe-4458-3611-bbd4-de528d9fc417.roa (raw, json)
Hash identifier:          eCNbjIuh9ATdo31jL4xduHHB2LZ0PgznWQ9H+yAWcW4=
Subject key identifier:   21:4D:C7:E3:E2:D1:E5:1F:AF:DB:45:40:CB:61:D6:09:4C:E8:F0:AE
Certificate issuer:       /CN=6d54b36a-c725-4c18-93e1-825afc645e2c
Certificate serial:       010D0C9F432858496A19966C8C05B8C1FBBD0D80
Authority key identifier: 38:58:D5:25:95:18:10:7B:1A:52:96:71:BD:B8:82:7B:C1:86:7D:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/675637fe-4458-3611-bbd4-de528d9fc417.roa
Signing time:             Fri 04 Apr 2025 13:00:59 +0000
ROA not before:           Fri 04 Apr 2025 13:00:59 +0000
ROA not after:            Thu 03 Jul 2025 13:00:59 +0000
asID:                     13335
IP address blocks:        2620:127:f00f::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6a:19:96:6c:8c:05:b8:c1:fb:bd:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d54b36a-c725-4c18-93e1-825afc645e2c
        Validity
            Not Before: Apr  4 13:00:59 2025 GMT
            Not After : Jul  3 13:00:59 2025 GMT
        Subject: CN=69e1063b-558d-4eb4-a070-f14deae88664
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f8:be:9a:a3:95:f3:62:14:4f:f3:d0:f5:f8:
                    99:07:b0:37:d6:cd:ae:bb:fd:c9:be:db:01:c3:72:
                    7e:04:d5:1f:35:78:e0:eb:e7:4d:82:0b:c7:c2:60:
                    91:80:a2:19:ec:25:c4:12:51:f3:8a:a8:cd:eb:5c:
                    da:84:06:58:29:8a:d1:41:ae:f7:75:f1:0d:ef:4f:
                    bc:55:6f:32:06:20:12:ea:57:0d:e5:0d:15:68:49:
                    af:17:77:49:af:90:3b:7a:69:65:db:e5:6d:c9:7d:
                    a3:db:d2:c1:22:ce:9b:c2:7f:5f:db:9a:64:21:2c:
                    f9:06:e8:18:10:63:d0:9c:c4:fc:2b:4a:c7:ce:e5:
                    1f:8e:c7:0a:df:64:37:b8:4d:de:72:4f:0e:97:2a:
                    fd:c1:2f:cd:e4:4d:65:c1:79:46:ab:6e:f1:99:cc:
                    ed:80:ee:0a:ae:93:34:01:78:fa:ee:44:a1:5e:c1:
                    ba:83:a8:27:c4:1e:b1:2a:cb:45:6c:07:99:c9:64:
                    63:d1:61:20:5b:a5:9f:b0:00:b9:87:6c:b0:c1:94:
                    09:04:95:c4:44:53:7a:87:81:67:c3:5a:d0:bc:ec:
                    dd:10:93:ab:78:11:05:9f:c8:31:5e:d2:3b:88:f2:
                    b0:f2:63:a7:73:ac:ee:28:5a:59:67:57:dd:ba:d2:
                    1b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:4D:C7:E3:E2:D1:E5:1F:AF:DB:45:40:CB:61:D6:09:4C:E8:F0:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/675637fe-4458-3611-bbd4-de528d9fc417.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/6d54b36a-c725-4c18-93e1-825afc645e2c.crl

            X509v3 Authority Key Identifier:
                keyid:38:58:D5:25:95:18:10:7B:1A:52:96:71:BD:B8:82:7B:C1:86:7D:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:127:f00f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:a3:9c:a5:7e:93:22:4f:7b:93:1d:a4:84:33:f6:59:af:10:
         1f:da:64:a0:18:fb:7f:b0:b7:b3:2c:24:51:e7:a5:40:52:da:
         5f:06:0e:9d:18:a1:fd:6c:21:d4:1d:aa:a7:9d:68:d8:7c:ce:
         24:27:2c:cc:82:e5:8e:30:74:5a:dc:e8:6b:1b:22:42:b4:e5:
         49:bb:9d:28:86:c2:ed:a7:d7:67:0c:f9:b7:e2:92:e1:44:91:
         e3:e5:e9:91:8f:b9:0d:1f:cd:21:e8:25:22:63:1e:98:e5:75:
         ba:b5:5a:99:a0:e2:33:a4:2f:09:54:38:e5:40:fd:b2:d6:1b:
         e1:01:42:b8:44:04:b7:c6:1b:ab:d1:8f:17:1f:5c:c9:8a:e7:
         ea:df:28:04:99:3c:95:6b:92:3f:f9:af:cf:5d:e7:2a:c8:cd:
         58:91:d3:2c:d1:fb:95:a6:8b:ba:d1:45:74:59:d5:c5:be:25:
         d2:88:46:f8:7f:09:4f:8d:d5:34:47:62:02:89:07:42:97:8f:
         d5:52:73:d3:4a:e4:8e:58:25:d3:b4:58:dc:fa:82:d1:9d:b1:
         08:27:86:cd:3b:72:45:0f:87:f2:02:c1:5a:d7:83:dd:d8:b6:
         47:f5:8e:35:03:92:60:ec:c8:af:86:d6:7b:04:b1:0b:22:fb:
         f0:71:5c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----