Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/7b2cb691-046e-38a0-b308-99b6d52ae4c3.roa
File:                     7b2cb691-046e-38a0-b308-99b6d52ae4c3.roa (raw, json)
Hash identifier:          5dLx1Fzh3QAGTchrO3yAm5jN8vTcn2rAneXUSddyDBg=
Subject key identifier:   1D:B2:A8:D1:3A:E6:52:17:38:31:2B:BC:0B:59:C3:F7:1E:30:CF:E5
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F43285849350EA782FCF3712F7404D980
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/7b2cb691-046e-38a0-b308-99b6d52ae4c3.roa
Signing time:             Sun 16 Mar 2025 13:00:52 +0000
ROA not before:           Sun 16 Mar 2025 13:00:52 +0000
ROA not after:            Sat 14 Jun 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        2606:7bc0:1061::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:35:0e:a7:82:fc:f3:71:2f:74:04:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Mar 16 13:00:52 2025 GMT
            Not After : Jun 14 13:00:52 2025 GMT
        Subject: CN=439a9c88-837f-4dbf-bc4d-7b1ec2afa7c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:27:60:45:d7:77:76:15:97:d5:0c:f3:9e:8a:
                    46:22:f9:29:a4:5a:32:c3:2a:84:47:1f:dd:66:d9:
                    8b:78:fb:58:dd:4d:7a:29:d0:33:0d:fa:ea:93:22:
                    ff:c7:ff:1e:e3:b0:6e:3e:b7:bb:77:a1:a9:78:96:
                    92:68:41:31:a5:e4:17:13:57:e0:b2:9d:39:37:38:
                    78:20:b3:8c:ab:85:cc:35:57:dc:8d:52:20:27:52:
                    b6:6f:26:b2:41:c2:45:fd:31:11:bb:eb:cc:c4:70:
                    cb:aa:6a:28:d4:7f:04:12:b5:0b:90:2a:ef:89:91:
                    15:8b:50:85:8e:a2:3a:87:df:0d:fc:70:ab:11:8b:
                    df:69:b7:23:db:48:4b:de:19:f3:68:e9:97:0d:66:
                    4b:6b:ef:fc:2c:f1:16:ad:a1:b0:68:f5:fb:2e:b1:
                    51:11:25:ba:db:a9:1b:b0:46:05:f0:cb:c2:0d:3c:
                    f3:7e:f8:29:94:ef:38:d1:e7:5b:91:a4:5d:e1:93:
                    11:50:06:6a:f5:40:b1:6d:17:36:56:59:69:61:5e:
                    7c:92:97:ab:e2:37:e0:00:6c:77:40:39:f9:f7:bd:
                    96:4a:c0:9a:7c:70:b5:30:d2:ec:5e:18:7d:25:e9:
                    87:0d:91:1f:5f:be:4c:07:fc:de:a9:c2:33:27:68:
                    7c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:B2:A8:D1:3A:E6:52:17:38:31:2B:BC:0B:59:C3:F7:1E:30:CF:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/7b2cb691-046e-38a0-b308-99b6d52ae4c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7bc0:1061::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:a8:a9:73:02:98:01:f1:9a:08:ea:df:4f:af:42:4b:5a:f8:
         03:02:db:3d:a9:55:6f:79:5a:c2:08:35:58:49:ea:15:e3:5e:
         6e:8f:cc:9a:aa:fc:ec:6a:32:62:67:4c:ac:18:bd:a0:ff:50:
         29:20:89:10:1f:86:4e:6c:0d:ad:d8:60:11:cc:63:3a:3e:7a:
         c8:ce:da:fb:90:56:6f:c1:f1:3a:f5:d4:c8:a7:ba:d3:ca:90:
         e1:e9:71:6d:91:3f:94:5f:5c:35:d7:1d:91:fa:9f:d1:78:3f:
         e6:ac:bb:35:d9:ed:8d:4d:c8:53:82:12:80:ed:ae:0c:8a:29:
         8b:be:28:77:85:28:6c:2e:1e:dd:8a:2e:61:83:40:60:b3:0e:
         be:1b:1f:6f:40:09:85:c2:8a:60:73:7a:44:f5:7f:82:0e:83:
         c7:4b:f9:2d:6c:a2:c6:7a:05:f8:33:62:f5:6d:16:92:57:38:
         13:15:4e:18:5a:82:4e:09:ce:ab:95:3b:4a:43:68:dd:b6:4f:
         11:6a:46:4f:5a:28:23:e7:6f:d4:6c:ab:4e:72:18:1a:14:a6:
         cd:38:3a:1d:86:c9:b8:28:b5:f5:9a:eb:80:d3:14:ba:8f:ca:
         c4:6a:79:b7:6d:b3:03:02:7b:6f:5a:74:fd:d9:4b:fe:58:7f:
         13:bc:46:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----