Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/01df35f1-a2c4-36c9-873b-261876eceba6.roa
File:                     01df35f1-a2c4-36c9-873b-261876eceba6.roa (raw, json)
Hash identifier:          VMqtKgsU0iEZUpq/NTZJmsX6CZVBYjKOBKq6qMXrKJQ=
Subject key identifier:   36:F2:0E:00:0A:73:AC:A8:E3:A2:29:49:47:BE:F9:B8:37:6A:86:CB
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848E2D1984699F94B5B70A83640
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/01df35f1-a2c4-36c9-873b-261876eceba6.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     20115
IP address blocks:        2600:6c08:1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:98:46:99:f9:4b:5b:70:a8:36:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=8dd98486-5a1a-41ce-b388-5e72eb937bb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:71:54:6b:bf:91:58:be:f1:7f:fb:25:e7:2f:
                    aa:50:e0:68:d5:ef:ed:31:b6:55:af:3c:10:29:90:
                    46:d0:d0:3c:7d:3b:24:de:b4:e2:b2:3c:9e:f2:b0:
                    5e:2e:54:4b:d6:18:42:bf:ee:74:34:2e:29:c7:16:
                    6c:5a:a2:a3:bb:00:ed:37:36:38:28:fb:e4:ac:55:
                    7e:a6:06:33:b5:61:fa:8d:1e:f4:2e:73:75:7f:c5:
                    9a:bf:fb:5d:32:1e:92:81:43:a7:9b:40:22:cc:a7:
                    d6:a6:49:cd:92:7f:75:bc:4c:20:8d:bd:c0:07:1b:
                    e5:3c:de:5e:1e:00:31:93:df:06:ba:52:0e:5f:ba:
                    a8:83:18:5b:1f:7a:b2:6b:9b:53:0b:db:54:a9:7c:
                    93:de:bd:1b:46:4c:6e:67:70:d9:f1:a3:cc:68:22:
                    41:48:fe:7e:27:b4:92:9e:3f:7d:8f:ff:0f:ab:e7:
                    54:df:36:28:4a:ad:c0:65:9e:30:63:50:aa:d8:0e:
                    51:b7:7f:d0:44:28:bd:5b:58:f6:7b:e6:66:08:be:
                    4d:98:f7:e3:38:c9:92:53:31:03:ed:ad:e8:da:80:
                    7e:70:a9:f9:b5:98:2b:70:9a:4b:07:f2:9f:05:a9:
                    03:f4:f0:c9:84:59:0a:1f:e8:e9:a8:4d:77:24:d8:
                    16:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:F2:0E:00:0A:73:AC:A8:E3:A2:29:49:47:BE:F9:B8:37:6A:86:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/01df35f1-a2c4-36c9-873b-261876eceba6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6c08:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:b4:59:51:b6:f5:71:09:02:d5:f1:83:2f:a9:2d:8b:c0:63:
         53:62:70:fe:d3:51:b3:4e:30:ee:54:7d:de:9d:eb:12:61:69:
         59:fd:e7:8c:d2:c5:b0:99:b7:be:51:13:1e:ee:65:9f:2c:bb:
         5b:27:76:7c:f4:fb:30:a8:69:32:68:c2:63:44:88:30:d7:90:
         63:1b:4c:01:6c:ec:bf:d9:2a:42:70:75:8d:e7:11:6c:9c:3b:
         2d:33:ec:98:08:30:f6:2f:61:74:e3:f2:eb:f4:7d:e2:78:39:
         e8:e3:ca:55:65:dc:de:96:44:3f:3a:e1:0c:ca:3d:3a:71:25:
         40:4e:8a:4f:1d:c8:aa:61:fb:5f:73:0c:b1:ea:10:14:6f:46:
         f5:1e:6e:7d:91:cc:b1:b4:17:2c:10:77:ed:70:0f:03:49:ec:
         57:6a:46:8e:fe:02:0a:bc:c0:52:91:89:ee:55:99:9a:79:a0:
         c0:a7:22:00:10:59:a0:19:2d:95:a5:5e:a5:37:5b:30:36:10:
         3e:80:ea:b4:a6:af:f2:bd:cb:8a:d7:89:a7:b9:9b:51:fd:e2:
         e4:df:c9:e3:1a:d0:41:cb:9c:4d:09:8d:85:41:12:a9:09:d5:
         97:2c:34:85:da:d9:a0:03:79:31:a5:c9:25:66:4f:fa:48:70:
         c4:eb:18:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----