Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/6269a69e-bf5b-3e8d-803e-453361f16e27.roa
File:                     6269a69e-bf5b-3e8d-803e-453361f16e27.roa (raw, json)
Hash identifier:          tsaFScymFseWTP/c6laEzZCsM8kXuK7fN0WXohDPMnk=
Subject key identifier:   70:78:70:01:24:AB:DA:F9:2E:A7:2B:26:1F:40:46:24:9A:3D:16:29
Certificate issuer:       /CN=9c3739a8-4c8d-47b0-8413-77e27a96700c
Certificate serial:       010D0C9F432858490B4C229A23C5245EAE2D9C00
Authority key identifier: FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/6269a69e-bf5b-3e8d-803e-453361f16e27.roa
Signing time:             Sat 01 Mar 2025 14:00:52 +0000
ROA not before:           Sat 01 Mar 2025 14:00:52 +0000
ROA not after:            Fri 30 May 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        2605:84c0:54::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0b:4c:22:9a:23:c5:24:5e:ae:2d:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c3739a8-4c8d-47b0-8413-77e27a96700c
        Validity
            Not Before: Mar  1 14:00:52 2025 GMT
            Not After : May 30 13:00:52 2025 GMT
        Subject: CN=6ab6b7d8-6658-4060-99a0-3d96cd0fea1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:73:44:fb:0c:27:4c:7b:6f:54:4e:ef:52:a0:
                    fb:3e:b3:e7:e6:50:60:b3:8d:e7:ca:ef:e4:a7:a9:
                    0f:e3:05:8a:5c:e1:6e:60:12:4f:8b:3b:19:6b:ff:
                    f4:01:ba:30:b6:06:5a:c5:4b:52:37:b1:1d:d7:31:
                    ce:1f:4a:ca:04:6c:3a:fb:a2:9b:7f:4f:23:54:76:
                    06:fb:ad:fa:b3:4f:07:19:ed:63:61:ce:83:ed:8c:
                    65:95:5f:08:02:fe:b4:5f:7d:ca:31:0b:90:e5:50:
                    2b:18:02:ef:14:a8:9b:ef:3b:a9:14:74:29:51:53:
                    65:18:c4:b5:69:1b:51:f9:9d:42:01:9e:2a:a9:5b:
                    0c:30:de:5e:41:26:d9:99:d9:a4:b3:ba:45:dc:bc:
                    bf:c9:22:90:ae:eb:7e:d8:e1:4a:19:ce:3a:87:e6:
                    9b:09:2e:4b:12:bd:1c:59:c3:16:95:a1:07:6d:c7:
                    fa:96:ad:f8:3e:a7:e5:9f:95:09:9a:0b:ec:2c:df:
                    d6:46:1d:70:ed:38:bd:eb:5f:f6:ec:3d:fb:57:f2:
                    83:92:61:3d:4e:3d:80:e8:ed:9b:51:84:be:e6:ee:
                    b8:d9:e4:db:c1:fe:a6:9c:b7:dc:74:11:f4:77:cb:
                    c7:1d:c8:21:a5:e4:c3:07:d3:0a:22:d2:08:35:db:
                    da:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:78:70:01:24:AB:DA:F9:2E:A7:2B:26:1F:40:46:24:9A:3D:16:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/6269a69e-bf5b-3e8d-803e-453361f16e27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl

            X509v3 Authority Key Identifier:
                keyid:FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:84c0:54::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:1d:2b:4a:95:ae:c0:ca:a0:3f:26:4a:ed:82:81:a0:54:10:
         9b:c7:24:d3:7d:60:ef:ac:d0:fa:42:38:15:d4:4c:f6:65:02:
         67:61:4c:45:34:11:5b:48:0a:9d:ed:bf:a8:e3:3b:d8:8c:7a:
         18:76:bb:7e:a6:d0:49:e7:a9:14:c8:82:a7:0a:79:6b:76:0d:
         a6:c6:48:70:bd:35:44:f9:69:a2:ae:db:f6:5b:02:95:88:31:
         93:d4:5e:0c:fd:88:a7:81:b1:36:d7:ad:3a:a4:dc:55:d8:1c:
         10:2f:b7:eb:74:8b:3d:7d:80:32:58:c5:b4:f5:64:7f:bf:4c:
         ca:c4:64:7f:ba:6b:01:90:f1:0d:34:ab:21:e0:85:b6:78:a0:
         13:c1:07:06:2b:91:aa:e6:a0:23:23:03:93:eb:35:07:b6:1d:
         0c:89:52:fb:c5:dd:68:ae:be:73:86:67:e4:5d:e7:cf:36:b2:
         d0:37:b1:e6:52:c1:87:f2:93:9e:5c:34:a6:80:a1:bf:88:e1:
         61:dc:2e:ca:df:2f:11:8e:55:2e:69:2c:a6:52:c7:d8:e0:c8:
         10:b2:bd:6e:0c:ac:33:cd:28:84:43:78:1b:af:c0:a1:86:d9:
         c2:9e:cf:ed:87:1c:d1:f5:57:af:6c:c0:9f:03:01:24:17:ae:
         f4:78:7f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----