Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f25fc4b1-75d2-329f-b152-ecea53f5b166.roa
File:                     f25fc4b1-75d2-329f-b152-ecea53f5b166.roa (raw, json)
Hash identifier:          7kZd7jh+bYunJpqioEhT55+Tz833kYKYS9HJ/bCpcwU=
Subject key identifier:   E0:6D:E1:BF:99:3A:09:00:69:4A:1E:46:BA:69:E3:07:51:C3:19:31
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848C84B9BD37089650F18F68100
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f25fc4b1-75d2-329f-b152-ecea53f5b166.roa
Signing time:             Wed 05 Feb 2025 14:00:51 +0000
ROA not before:           Wed 05 Feb 2025 14:00:51 +0000
ROA not after:            Tue 06 May 2025 13:00:51 +0000
asID:                     20115
IP address blocks:        2600:6c7f:9450::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c8:4b:9b:d3:70:89:65:0f:18:f6:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Feb  5 14:00:51 2025 GMT
            Not After : May  6 13:00:51 2025 GMT
        Subject: CN=aaf8cc4b-d99b-4623-bf01-5559a9b5fdb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:f7:bd:9f:86:0d:89:bf:7b:2d:b5:be:ff:3c:
                    5e:9a:e4:e9:a9:7f:78:9b:b8:2f:12:67:11:2d:5c:
                    3c:e9:b5:5d:6a:af:a6:19:9e:fe:b4:14:1e:c6:36:
                    cd:3a:29:e8:4c:08:90:af:98:07:dd:07:36:99:aa:
                    96:b0:ce:8d:32:45:84:a5:b4:cc:6e:f0:34:e7:a8:
                    ca:88:97:1d:a8:af:66:ec:0d:eb:6b:d2:19:5d:b6:
                    b0:14:5d:c8:80:c8:c2:97:87:9e:ff:fc:1b:23:5e:
                    43:ee:85:bf:4e:e3:f5:6a:bf:0c:d8:99:40:ea:11:
                    69:10:62:0f:26:25:3f:c8:84:aa:b1:f3:ba:0d:25:
                    10:53:24:e3:7f:37:2c:cc:4b:9d:e5:41:03:72:91:
                    67:c9:64:de:5d:31:b5:a4:c3:a7:bc:a7:e1:d7:16:
                    a0:cf:e1:f3:6c:23:28:8a:10:6b:eb:28:b4:e5:cd:
                    a3:ee:1b:00:00:a0:d3:3c:09:0e:96:65:d7:2d:a2:
                    41:32:54:ca:2f:8f:9a:37:17:00:4e:1e:cf:14:ee:
                    84:d2:fe:da:2e:4a:e3:22:eb:03:64:12:a5:73:61:
                    ab:56:66:27:55:23:1a:1e:b6:5f:84:a7:56:a0:2d:
                    76:43:bf:38:81:11:c9:fc:c1:69:be:e8:1c:d8:d5:
                    84:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:6D:E1:BF:99:3A:09:00:69:4A:1E:46:BA:69:E3:07:51:C3:19:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f25fc4b1-75d2-329f-b152-ecea53f5b166.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6c7f:9450::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:bb:41:cf:29:db:8b:3e:66:d5:5a:ab:28:89:06:d4:3b:4c:
         6a:5b:28:7c:60:1d:f0:1a:d3:90:61:63:4d:a8:ed:f8:3a:7a:
         f7:49:f0:bd:4f:dd:10:6e:39:83:5f:4c:89:6b:fd:89:e9:4a:
         ec:b4:07:3e:91:22:f0:ec:d3:b9:85:5e:f2:de:71:d2:45:0f:
         8d:de:1b:0a:7a:ca:d4:d4:0b:9f:08:0b:a0:fe:9e:40:0e:ef:
         82:f1:de:f6:89:63:18:f7:42:21:04:95:c7:04:e1:f9:8b:03:
         2f:e4:a1:79:89:69:57:56:ad:51:44:8e:90:44:1a:93:bd:e5:
         7e:a1:62:d8:3b:8d:88:3c:55:bf:ed:47:b3:df:dd:cf:e4:bb:
         9f:a8:da:af:2b:84:74:cc:83:68:f8:a3:9f:9c:ca:4d:86:38:
         dd:fb:14:87:5f:90:15:8e:e6:ff:0a:a5:a2:44:95:e2:a3:cf:
         16:46:0d:96:64:8a:a4:a9:14:f0:3b:de:68:68:fb:80:8f:e2:
         a6:9b:97:1a:3e:9e:f2:83:e4:38:0c:d4:15:61:f1:dc:96:3a:
         0f:4f:73:0b:42:16:87:d1:ef:6e:c8:e4:14:bc:de:db:98:45:
         8d:1a:b1:8c:3d:2f:4b:01:13:2a:c6:9c:44:f4:d8:62:56:41:
         b0:67:30:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----