Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/242ff1c1-bf47-32c6-ae71-4d2f4670b047.roa
File:                     242ff1c1-bf47-32c6-ae71-4d2f4670b047.roa (raw, json)
Hash identifier:          QWai5wC5Wu9IZdSFxMpF04eNFDt3zPHjTcHkOSH9qWE=
Subject key identifier:   71:23:69:A4:BD:4D:72:F3:D5:E7:39:D4:3D:46:37:03:88:E6:6F:A1
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848F4F6A7403D3E0C0AF5E86300
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/242ff1c1-bf47-32c6-ae71-4d2f4670b047.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     20001
IP address blocks:        2602:107:e300::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f6:a7:40:3d:3e:0c:0a:f5:e8:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=614b5aaa-dda1-4583-953b-0d5cf57b45fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:50:f7:70:f7:e4:7e:b5:31:ca:2b:1d:7c:a7:
                    90:a1:08:18:de:1f:74:a9:3f:e0:f6:11:af:a5:eb:
                    57:6e:c4:f4:5e:d4:19:d2:4f:ae:55:cd:72:65:fd:
                    b0:4a:9d:26:4c:5e:7b:ae:5e:c5:dc:84:cd:f9:42:
                    9f:59:e5:48:b2:65:fa:56:4a:75:67:a1:83:9e:10:
                    42:dc:21:20:91:e8:66:3a:b5:4a:bc:01:b9:e3:04:
                    d6:fe:1d:36:17:e3:14:7b:59:5a:fa:9a:7f:b6:c9:
                    46:46:1c:72:f9:81:1c:94:71:c3:2d:a6:31:ff:16:
                    e3:06:8c:12:c3:94:91:d6:0f:7f:95:8a:e0:df:24:
                    78:19:fc:18:88:81:0f:36:e8:77:37:e3:4e:fa:2d:
                    99:68:8a:21:ed:80:a3:41:a1:bd:cf:47:dc:dd:6a:
                    a0:9c:bc:6e:d0:af:ec:f2:53:b8:56:68:62:4a:28:
                    47:92:d7:ec:e3:06:13:29:1f:80:26:e6:79:12:a1:
                    85:19:d3:2a:40:c6:40:f2:90:2c:2a:74:45:48:61:
                    a6:0a:78:43:bc:57:fd:be:e1:9a:5a:15:80:b9:cf:
                    29:05:ed:a2:b5:e5:82:36:fd:eb:aa:ea:bf:c0:77:
                    f9:70:74:1f:74:8d:21:a8:7b:68:6f:2f:33:5a:f3:
                    52:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:23:69:A4:BD:4D:72:F3:D5:E7:39:D4:3D:46:37:03:88:E6:6F:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/242ff1c1-bf47-32c6-ae71-4d2f4670b047.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:107:e300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:70:bb:08:e4:97:41:4c:21:78:a4:9f:bc:b9:d4:9d:98:4f:
         19:7c:ae:6d:4f:23:74:bb:91:b7:a3:2a:a8:18:09:95:50:3d:
         da:a0:0f:03:c3:dd:ba:73:89:f1:1c:6e:15:42:60:ab:2e:38:
         3f:a1:9a:a9:fd:da:a1:95:f1:de:5b:70:65:4f:cb:79:b5:bd:
         fe:b4:84:65:b5:81:4d:36:b6:05:12:42:19:75:cb:a3:fc:b8:
         fb:b3:7c:56:ed:df:04:eb:f0:e3:69:28:6a:7a:14:fe:5a:78:
         93:41:b2:9d:63:31:54:8d:78:c9:62:9c:9d:5a:38:bc:14:51:
         4a:bd:f4:d6:b6:96:b7:a8:8e:c5:43:29:73:2f:56:f2:d2:27:
         93:f2:7c:e7:74:68:d0:e4:76:84:47:f0:c7:b1:a6:0b:57:84:
         d2:5b:93:8c:84:2c:11:3b:ea:28:f3:59:fa:a4:1d:8d:f3:3f:
         f7:c9:50:4b:46:ce:79:fd:44:72:be:64:10:0a:1c:9e:17:57:
         4d:4f:8a:10:34:e4:91:f4:90:48:fa:15:a9:42:0e:27:e1:97:
         99:42:9d:b9:ad:1e:5b:8f:d7:27:e9:2e:08:b6:20:37:27:11:
         64:c1:dd:39:2d:3a:ab:ec:0d:fb:5f:51:41:7e:df:42:18:10:
         24:0f:ef:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----