Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5/3af3cf4a-452f-3c16-a0c5-87928368d443.roa
File:                     3af3cf4a-452f-3c16-a0c5-87928368d443.roa (raw, json)
Hash identifier:          fXCAR45Fc7lygBiUCRnkYdgafUuouZTLjEFOXVcbP1c=
Subject key identifier:   95:F4:F3:71:6F:EC:F4:A3:EF:89:79:2C:CC:4B:11:44:55:F1:A4:B8
Certificate issuer:       /CN=c1c2fcb5-8224-40aa-bace-230fcdefbaa5
Certificate serial:       010D0C9F43285849350E8680BD44168A25961500
Authority key identifier: B3:21:1E:7E:A2:3B:DC:EF:12:73:B8:E6:47:4E:F9:67:46:58:60:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5/3af3cf4a-452f-3c16-a0c5-87928368d443.roa
Signing time:             Sun 16 Mar 2025 13:00:52 +0000
ROA not before:           Sun 16 Mar 2025 13:00:52 +0000
ROA not after:            Sat 14 Jun 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        2605:32c0:a000::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:35:0e:86:80:bd:44:16:8a:25:96:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c2fcb5-8224-40aa-bace-230fcdefbaa5
        Validity
            Not Before: Mar 16 13:00:52 2025 GMT
            Not After : Jun 14 13:00:52 2025 GMT
        Subject: CN=91fcdc40-f2df-4437-adf8-f4d8dd71c3e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:b6:b7:af:be:f8:be:fe:98:bb:0b:a5:3d:85:
                    3e:63:25:bf:ff:6b:f8:bc:f1:b7:32:08:e5:46:c7:
                    b7:c9:e6:31:c8:4e:ec:63:2d:a7:9e:cc:c4:9a:89:
                    24:db:2e:a3:fc:e0:d6:84:03:f7:16:5b:8a:6a:07:
                    d2:d2:45:6c:69:68:6a:f0:a5:56:8c:25:65:5d:2c:
                    d3:55:d1:71:21:74:a8:56:23:e2:87:2a:60:8b:ec:
                    d5:1e:2f:4f:b3:b6:cd:58:51:20:50:7d:c3:ab:1a:
                    17:44:e8:19:e2:10:d7:70:53:02:a4:a8:8e:e6:bd:
                    5a:24:77:f9:8d:16:3f:c0:90:41:ef:c8:9b:d9:c8:
                    90:e8:04:71:fc:89:84:6c:b8:ab:36:9d:19:57:68:
                    1b:20:46:35:0f:fd:99:5e:a0:f5:f4:54:1c:0f:40:
                    b7:29:1e:b3:87:9e:a3:38:0c:46:09:43:79:9c:90:
                    91:c2:d0:aa:40:26:47:6a:dd:2a:2b:66:aa:91:3c:
                    2d:4e:1c:5a:2b:eb:0f:3f:b5:f9:14:23:3d:ff:d4:
                    0e:9c:8d:4f:2e:63:80:f2:6a:21:5d:b3:b0:d2:27:
                    ee:6a:c4:2b:0c:c1:33:ca:fe:96:3e:d6:23:bc:d7:
                    63:0e:83:6c:13:5f:fc:c6:c1:75:72:39:93:09:25:
                    91:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:F4:F3:71:6F:EC:F4:A3:EF:89:79:2C:CC:4B:11:44:55:F1:A4:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5/3af3cf4a-452f-3c16-a0c5-87928368d443.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5/c1c2fcb5-8224-40aa-bace-230fcdefbaa5.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:1E:7E:A2:3B:DC:EF:12:73:B8:E6:47:4E:F9:67:46:58:60:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:32c0:a000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:21:47:45:20:39:ad:65:fe:cd:ae:d4:dd:f3:17:65:70:38:
         06:15:a3:d9:3c:d3:c9:b3:8b:6e:2d:e5:b0:25:db:5f:75:ae:
         1e:e1:92:0b:0d:ae:3f:6a:21:94:ee:ce:9d:d0:09:c8:56:50:
         ee:a0:6a:d5:fa:30:90:a3:af:af:50:d2:bd:20:64:7f:f6:96:
         9b:56:f0:9d:21:10:49:8d:17:2a:e6:86:42:4f:63:21:15:f9:
         50:3e:c4:63:49:e3:96:b0:1a:f1:ea:19:5e:92:07:a6:e4:09:
         5e:0f:6b:e0:98:4e:ad:18:23:40:bb:f2:b6:c3:e4:a5:d9:1a:
         e9:78:8a:45:b9:7b:a5:76:23:68:cd:52:4e:d8:60:a1:2a:27:
         81:75:f0:4a:14:65:eb:a0:e8:fa:96:97:01:ae:64:87:0d:d0:
         19:13:f0:b5:2b:ab:e4:84:6a:8f:1d:8a:e0:34:5c:01:6e:f2:
         f2:3f:6d:c5:47:11:74:6f:6d:72:d7:f1:08:c1:e3:e8:7a:d6:
         3d:33:35:82:6d:89:22:6c:86:46:29:c5:5d:3f:3a:02:76:5e:
         3b:83:56:dc:f0:1d:5b:61:c9:90:8b:e8:98:88:8e:62:b5:06:
         ae:49:90:94:be:25:e9:c2:99:2c:6a:cf:8c:18:2b:88:92:53:
         9c:50:7c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----