Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e42a3de7-584f-4010-acae-b7935ed3f602/2978caed-d425-356b-b3c3-514e96c998c3.roa
File:                     2978caed-d425-356b-b3c3-514e96c998c3.roa (raw, json)
Hash identifier:          rXaiVxRZRYM/sMz2kZD+UWP+sNzKxhbaRbtaS7otAYs=
Subject key identifier:   C9:C6:EC:FE:98:ED:9D:2E:2E:BA:55:7D:4F:E7:11:5B:6F:A8:CF:DF
Certificate issuer:       /CN=e42a3de7-584f-4010-acae-b7935ed3f602
Certificate serial:       010D0C9F4328584863CB0090FD451CA7EB07F780
Authority key identifier: D0:4B:20:55:92:9C:EB:76:E4:1F:6A:75:74:2A:D9:ED:93:2E:F6:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e42a3de7-584f-4010-acae-b7935ed3f602.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e42a3de7-584f-4010-acae-b7935ed3f602/2978caed-d425-356b-b3c3-514e96c998c3.roa
Signing time:             Tue 31 Dec 2024 14:00:53 +0000
ROA not before:           Tue 31 Dec 2024 14:00:53 +0000
ROA not after:            Mon 31 Mar 2025 13:00:53 +0000
asID:                     14086
IP address blocks:        2620:1f:4000::/48 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:63:cb:00:90:fd:45:1c:a7:eb:07:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e42a3de7-584f-4010-acae-b7935ed3f602
        Validity
            Not Before: Dec 31 14:00:53 2024 GMT
            Not After : Mar 31 13:00:53 2025 GMT
        Subject: CN=8aa28e85-f72a-4270-92e5-af7a10abbdc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:78:0f:0c:51:e5:5d:4a:f2:61:74:e7:e6:e5:
                    fe:13:b5:ea:8c:17:7e:8f:81:09:f5:61:40:9a:e4:
                    e2:4f:78:61:7d:47:bc:77:37:e5:69:56:42:cb:89:
                    68:a5:36:3d:62:af:cc:2a:68:28:e0:89:97:ce:05:
                    33:4d:f1:66:d0:4e:a3:fe:2d:c7:5a:33:e8:c6:a1:
                    51:9c:df:d0:ca:af:32:45:d7:73:ea:88:70:aa:b3:
                    99:ef:bd:ce:7e:62:13:b4:fd:bf:d2:41:da:6f:ad:
                    6d:3e:df:5b:4f:a7:67:50:8d:b2:bd:33:5e:a6:05:
                    bf:22:f0:16:90:90:9f:1a:fb:88:b9:a7:c4:9c:34:
                    2c:ce:41:00:57:f3:51:06:8e:2d:55:32:74:97:f0:
                    bd:ab:e6:6e:ce:75:9d:ee:90:c0:e5:c3:97:8d:01:
                    5c:78:21:ba:b2:7d:2b:06:23:ae:80:a1:eb:ee:f1:
                    a5:01:68:61:52:f5:21:02:d0:d7:49:04:ec:46:fa:
                    22:ae:d4:86:5d:3c:02:90:da:0d:23:49:78:16:e5:
                    cf:4f:12:81:90:af:75:c5:07:3d:99:60:b6:ff:f1:
                    0e:70:ef:62:0a:1d:6b:b9:d5:02:3c:b7:01:c6:fc:
                    ba:f6:c9:79:df:f6:f6:4a:88:68:f4:3d:a1:ea:51:
                    fe:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:C6:EC:FE:98:ED:9D:2E:2E:BA:55:7D:4F:E7:11:5B:6F:A8:CF:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e42a3de7-584f-4010-acae-b7935ed3f602/2978caed-d425-356b-b3c3-514e96c998c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e42a3de7-584f-4010-acae-b7935ed3f602/e42a3de7-584f-4010-acae-b7935ed3f602.crl

            X509v3 Authority Key Identifier:
                keyid:D0:4B:20:55:92:9C:EB:76:E4:1F:6A:75:74:2A:D9:ED:93:2E:F6:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e42a3de7-584f-4010-acae-b7935ed3f602.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1f:4000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:65:fb:c6:77:0e:df:ca:24:62:3b:dc:26:65:82:1d:31:e6:
         2b:96:d1:ce:e8:44:72:e1:15:23:82:0f:db:39:55:2e:b5:20:
         42:32:4e:71:3a:01:82:75:fd:21:c1:5b:8d:b8:ff:e2:bc:8a:
         6a:ec:62:71:73:7d:bf:c3:ff:18:2a:ce:a0:26:a8:66:f0:b1:
         7e:ff:9b:5e:c6:78:a1:1c:d9:9f:87:8f:22:e1:f9:76:a1:5f:
         25:aa:fb:e2:18:2f:35:94:79:53:c9:2f:2f:9b:7c:c0:4c:57:
         45:56:a9:d4:ed:e8:eb:b8:2a:dc:e4:8b:eb:22:2a:ba:4e:e6:
         03:92:e7:1c:8a:ac:56:8a:ea:84:c6:85:0f:cc:fc:5b:d4:cb:
         41:f2:af:e4:c6:15:d6:88:42:5a:68:fa:ce:b7:0b:72:61:80:
         5d:14:37:19:da:2d:9d:05:4d:c8:b0:6f:bb:2d:0e:92:ce:84:
         6d:b2:f9:e6:29:d0:af:4b:1d:1b:21:4c:c6:73:98:65:9e:b6:
         be:0c:4b:68:36:0a:41:a8:8b:fa:87:e9:77:e2:24:c3:d6:1b:
         cd:a1:2d:18:df:b8:6c:62:58:d7:09:46:d2:07:b6:3b:a8:38:
         ec:96:54:4b:41:ab:1f:e2:1e:47:02:cf:2f:05:b3:c0:f1:d6:
         d6:07:95:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----