Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/4ad6dc61-117c-3576-b88f-7d6609adee38.roa
File:                     4ad6dc61-117c-3576-b88f-7d6609adee38.roa (raw, json)
Hash identifier:          d4ntTdY+v1onE9wGbT5V4DNUXbGcdWoKcI3WPxRaM6c=
Subject key identifier:   D6:F5:4E:7F:F1:89:A6:5D:36:42:3B:E8:43:F3:8A:27:45:25:7C:F7
Certificate issuer:       /CN=9c3739a8-4c8d-47b0-8413-77e27a96700c
Certificate serial:       010D0C9F43285848EF6133CED5377D130240A1C0
Authority key identifier: FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/4ad6dc61-117c-3576-b88f-7d6609adee38.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        2605:84c0:cc1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:33:ce:d5:37:7d:13:02:40:a1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c3739a8-4c8d-47b0-8413-77e27a96700c
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=9f8555b1-4948-418a-a85d-5134aac83881
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:68:20:ea:7a:b7:74:16:f6:05:79:84:a0:78:
                    38:90:12:0c:70:c5:fa:be:87:22:b3:46:9a:7b:cc:
                    39:98:bc:38:31:cb:81:84:14:ea:fc:4e:87:9b:e8:
                    55:96:0a:3c:7f:ae:23:d3:de:8d:8a:14:4a:b8:1b:
                    41:4b:25:22:8e:47:64:9f:af:0c:ba:fd:06:fe:a3:
                    a7:c4:37:3e:9f:2f:cf:a5:6c:6b:43:70:fd:60:2d:
                    d4:05:c2:66:80:55:46:9f:58:19:20:01:fb:11:f2:
                    b8:cc:c6:47:3f:16:f2:ec:bd:07:f4:d7:ee:e0:ea:
                    0e:f6:ce:a2:7a:b1:3d:40:08:77:de:12:14:dc:6e:
                    7e:dc:c0:ae:f1:81:00:8c:cb:da:cf:81:24:bb:1b:
                    53:9f:ef:08:31:ce:e8:1b:a9:f9:22:1d:bc:9c:5f:
                    2d:58:b4:cc:12:ce:8f:2d:9d:a3:b1:c5:0d:c1:8a:
                    64:47:c2:6a:6d:27:d7:6d:e3:05:ca:35:e8:3e:20:
                    2f:ed:77:cc:d1:d1:40:cb:31:6f:dd:f3:4c:86:2f:
                    9a:c3:81:75:ae:d5:1b:07:42:82:d1:0b:df:33:14:
                    44:1a:54:da:aa:39:03:7a:9c:77:33:7f:5e:c1:0c:
                    b5:2a:c3:12:4a:02:44:a9:70:f8:0d:73:5f:92:a0:
                    c5:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:F5:4E:7F:F1:89:A6:5D:36:42:3B:E8:43:F3:8A:27:45:25:7C:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/4ad6dc61-117c-3576-b88f-7d6609adee38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl

            X509v3 Authority Key Identifier:
                keyid:FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:84c0:cc1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:6d:03:f8:b7:77:33:9d:b2:c0:89:5e:4b:0e:ee:25:43:cf:
         ff:a9:87:0e:20:6d:49:e1:fc:69:60:de:39:c5:51:db:18:32:
         18:d8:01:38:c7:fc:f0:59:7d:d1:77:39:04:66:17:81:35:18:
         da:32:3f:b4:19:d8:9f:61:9b:02:1d:1e:5e:6a:e3:d6:78:80:
         7e:b7:dd:50:52:ab:d8:11:58:10:4d:2d:d1:ff:37:73:ba:c4:
         fd:92:ec:1f:a9:89:9a:27:8f:c1:1a:e7:60:44:5f:df:79:f9:
         5a:80:30:02:2c:e3:02:d4:2a:2d:0f:6f:b1:04:92:15:7d:d6:
         50:fe:e4:8f:ca:85:4d:11:12:3c:f2:50:3b:27:a2:e5:29:5b:
         37:94:f7:b3:13:02:40:05:65:ad:23:bf:ba:eb:bf:59:21:a3:
         98:cb:02:7a:ad:12:d6:7e:f8:6d:b5:6a:a3:03:96:0c:ee:06:
         ee:e7:39:b9:87:14:7d:89:9c:dd:94:2d:ed:d8:aa:78:8c:dd:
         a3:99:ac:e5:8a:ff:9b:83:e7:6b:41:0d:58:d6:e4:c8:15:1e:
         e9:ba:ea:42:f0:11:74:27:7a:6e:61:a9:6a:29:1b:78:85:f8:
         94:86:e6:3f:76:b7:2d:e9:e6:95:e4:2a:3d:01:d2:ae:0f:df:
         37:18:a4:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----