Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/558a2f07-4a7a-3357-b9c6-d84c8b87218f.roa
File:                     558a2f07-4a7a-3357-b9c6-d84c8b87218f.roa (raw, json)
Hash identifier:          7a4ls/d1LN4yvJWUyoNKWGSccXsyLumi/a1s4lY9mAY=
Subject key identifier:   C8:61:1B:67:28:CB:ED:C6:BC:F2:EC:60:94:05:54:D0:0A:8B:52:18
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848E2D1706DDD27DF4DABDADCE8
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/558a2f07-4a7a-3357-b9c6-d84c8b87218f.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     20115
IP address blocks:        2600:6c46::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:70:6d:dd:27:df:4d:ab:da:dc:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=80df351b-39c1-4162-9043-f960730ccbd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:55:6e:e2:f0:d8:0d:4e:1c:90:16:97:84:ef:
                    5e:1c:e1:e5:be:44:6e:97:14:fd:b4:1a:59:a8:98:
                    5f:a6:7c:b9:a2:63:6c:4e:b3:85:9b:c5:ae:32:41:
                    bb:2e:78:8d:b3:5f:25:8e:bc:ea:c9:3e:53:11:25:
                    cc:48:ea:f4:27:65:e3:b5:a8:c0:2d:f4:c2:b6:20:
                    65:73:46:87:75:d5:1a:43:92:48:a8:51:69:fb:9f:
                    4b:3d:71:41:b6:a2:9a:e0:49:88:e6:a2:12:b0:22:
                    a4:93:37:f6:98:99:86:86:eb:cb:77:fb:18:76:0b:
                    2a:29:de:70:3d:c6:4a:fb:15:d2:3b:07:08:93:58:
                    06:46:3f:98:9f:5b:62:ad:77:df:f9:01:45:4b:73:
                    0b:1d:bc:10:ed:40:4a:cd:fa:b4:50:e2:c3:4b:5a:
                    17:83:e3:de:92:dc:cf:d1:0d:7a:37:81:94:28:c7:
                    27:bd:a0:3c:a5:46:7f:33:64:57:21:7f:7c:b7:60:
                    3e:5b:ba:d3:33:ee:cf:5b:07:40:c1:bb:76:e5:dc:
                    cb:48:d7:ad:f9:34:2d:21:ef:fd:2c:40:e3:16:b7:
                    17:e3:44:c7:68:c4:3c:e5:aa:ed:68:88:f6:18:7b:
                    76:2e:12:c8:7f:d2:48:c7:2c:fc:66:27:4a:87:cf:
                    af:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:61:1B:67:28:CB:ED:C6:BC:F2:EC:60:94:05:54:D0:0A:8B:52:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/558a2f07-4a7a-3357-b9c6-d84c8b87218f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6c46::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:ce:82:50:a1:38:62:22:1c:e5:38:ee:78:24:fb:cc:ab:59:
         5d:35:5b:73:80:1d:3a:4d:95:68:a2:d5:41:a1:1e:d2:db:d4:
         4e:01:30:5e:76:e1:44:d5:da:ec:8f:23:66:70:4c:fb:57:30:
         37:48:3e:c8:7c:17:3b:b2:b6:b6:83:3d:c5:0a:04:92:83:f5:
         f6:5b:df:94:54:3a:bb:b8:21:6f:7a:64:c1:03:c4:33:d0:ba:
         f2:3e:57:33:03:3c:05:34:37:d9:fb:5e:ec:60:99:2f:8a:0f:
         9b:fb:03:63:e2:87:d7:12:64:d4:68:04:77:15:4c:53:d9:b6:
         9b:6e:b7:c4:28:df:d0:2c:6b:73:bb:ab:02:83:10:93:7f:81:
         15:34:5f:b6:bd:3f:e1:9c:08:c7:75:50:33:23:2c:82:85:28:
         a4:47:89:e3:08:23:0c:84:37:52:78:ec:18:71:c4:6a:82:58:
         17:6e:77:25:65:f8:62:00:31:45:7c:de:b4:ad:c2:15:cd:ed:
         4b:e4:73:64:42:97:e7:49:97:15:2d:f0:8e:51:bf:ff:9c:bd:
         31:9f:20:9d:73:51:6b:b8:50:2b:35:f3:d1:1b:62:af:95:01:
         b5:5d:cf:9d:66:40:84:9b:a4:80:1e:07:05:08:d1:9b:ae:88:
         66:51:c1:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----