Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/7cd69072-498b-39e0-bc3c-bf2d85113252.roa
File:                     7cd69072-498b-39e0-bc3c-bf2d85113252.roa (raw, json)
Hash identifier:          KOSrx+6BrZDo28gqp+W3fSuuNcO3ILh4Eukz1lXHhv8=
Subject key identifier:   ED:7D:AB:71:22:D4:59:FA:4F:04:6B:6D:75:16:79:25:7A:6F:79:55
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F432858495ABEC95959CBD77F47EC7600
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/7cd69072-498b-39e0-bc3c-bf2d85113252.roa
Signing time:             Sun 30 Mar 2025 01:00:47 +0000
ROA not before:           Sun 30 Mar 2025 01:00:47 +0000
ROA not after:            Sat 28 Jun 2025 01:00:47 +0000
asID:                     30103
IP address blocks:        2620:123:20c0::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5a:be:c9:59:59:cb:d7:7f:47:ec:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Mar 30 01:00:47 2025 GMT
            Not After : Jun 28 01:00:47 2025 GMT
        Subject: CN=46ddecc7-fef6-4335-a716-0de5212ab122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:90:f3:71:84:93:57:ee:98:11:fb:30:47:f8:
                    f7:cd:7a:60:64:33:48:76:15:05:91:9a:50:0f:ff:
                    79:36:dd:8e:46:f9:1b:66:6a:f9:0b:12:d7:4c:18:
                    72:aa:66:c1:53:d4:a9:6d:ef:52:af:c7:0a:47:bc:
                    b9:d7:52:cb:34:1c:67:ba:04:52:18:8a:0f:44:c9:
                    66:c1:96:cf:89:03:ff:cf:a6:22:07:81:ed:f1:87:
                    17:c3:62:8d:23:1b:5b:8e:ba:89:c8:f9:40:b0:da:
                    cb:7c:cf:8a:bc:13:86:eb:1c:1f:7e:df:e5:95:30:
                    a3:62:7a:e5:d9:c0:cf:5d:ee:ea:c6:06:ee:68:cf:
                    b2:e0:ca:5a:fd:db:31:2a:37:57:0d:70:99:39:27:
                    fd:a8:8e:df:6d:f5:62:cc:5e:74:3c:49:27:88:87:
                    dd:f1:30:56:a3:ad:83:9d:ed:e6:f6:4d:8d:e2:b5:
                    67:1d:23:93:ae:6e:ce:4e:47:aa:8e:9d:23:ad:7d:
                    f6:b8:bb:25:51:7c:02:ed:a3:1d:37:75:d6:bb:84:
                    5e:58:d5:4b:3c:89:b6:2f:31:b4:53:96:55:a0:00:
                    e0:ea:83:ba:2d:0b:f4:94:6a:d5:3f:02:53:38:b3:
                    c3:dd:5b:89:90:1a:00:57:82:bb:af:35:c6:5f:b8:
                    39:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:7D:AB:71:22:D4:59:FA:4F:04:6B:6D:75:16:79:25:7A:6F:79:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/7cd69072-498b-39e0-bc3c-bf2d85113252.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:123:20c0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:e4:73:fa:3e:58:06:f9:76:80:a2:7b:ab:5f:df:36:5f:ea:
         76:1a:35:19:53:28:40:97:60:0c:01:e2:e2:88:0f:95:be:39:
         d7:7b:ca:3a:22:43:f5:ee:a5:87:1a:de:ee:bc:39:5f:9d:37:
         2b:ec:8a:01:41:8b:ed:4f:17:7b:50:2f:2e:07:61:3f:65:78:
         ec:fe:75:3f:39:4a:74:7c:77:bf:95:9e:f3:17:ef:fb:cc:db:
         5d:6f:8d:f0:65:4b:26:46:10:4d:bb:74:97:fc:29:83:1f:8c:
         93:f5:22:9c:74:d7:5b:a3:b3:4d:9e:61:b2:ef:9f:2d:5a:10:
         18:49:b4:b8:98:c5:45:5f:b6:81:fd:6c:1d:a5:08:05:10:cd:
         a3:dc:1e:a2:89:9c:99:e8:60:23:33:d3:7b:21:3e:67:27:7c:
         e0:28:61:73:91:37:22:b9:04:bf:f0:d5:97:a6:ea:43:36:e8:
         f5:9d:85:7c:db:cf:eb:2d:ea:57:3d:5f:a5:f8:21:2b:6b:81:
         19:e8:1a:8c:17:ae:f5:4c:47:b3:8c:d1:40:11:d0:e8:5f:5d:
         c4:30:88:7e:83:34:8f:0e:17:91:2f:b5:1a:32:94:05:ca:1a:
         9b:a4:17:df:f4:e6:0d:7e:47:af:cf:1d:ee:41:dd:81:9e:1e:
         9b:fe:24:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----