Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/6c01ff9b-1c59-3288-8956-b402ec0bd417.roa
File:                     6c01ff9b-1c59-3288-8956-b402ec0bd417.roa (raw, json)
Hash identifier:          LwZyGzuNsK7Xg6Xdkfz/0SNE1xn1+7b0KkwOmcfPEWo=
Subject key identifier:   09:5E:E3:CE:E6:4D:35:96:88:26:1C:3A:DE:B2:B5:67:69:F4:31:7F
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F43285848EF61453A3019A01F96AD8900
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/6c01ff9b-1c59-3288-8956-b402ec0bd417.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     20253
IP address blocks:        2606:bc40:f02::/48 maxlen: 48
                          2606:bc40:f03::/48 maxlen: 48
                          2606:bc40:f04::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:45:3a:30:19:a0:1f:96:ad:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=b9df17c5-b275-4bb9-9865-a396f7e41d1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b1:7a:05:99:2c:0c:4e:b9:ec:05:4d:ef:b8:
                    51:92:a5:83:ed:e1:b0:44:0e:76:35:0d:c0:1d:25:
                    f0:98:b1:31:54:ac:76:c1:18:ba:86:55:f8:1b:7d:
                    e7:a3:b5:7e:a9:b8:fb:93:09:bd:bb:1c:9a:79:c8:
                    89:ed:5d:a8:01:02:df:2c:0f:dc:62:0d:20:db:00:
                    dd:81:e7:d9:c5:76:1c:97:8f:be:57:d4:a9:42:09:
                    fa:cf:37:46:0d:cb:7f:83:f1:31:f4:e5:eb:09:64:
                    18:b7:62:90:cf:a1:f7:40:c0:52:1f:3d:f0:0a:0c:
                    4c:0c:32:f3:a5:99:db:af:6c:a7:73:74:05:f3:83:
                    7c:74:3f:b3:71:e6:2d:6d:95:fa:78:52:61:6a:9d:
                    ee:a2:8b:47:7d:83:a5:3b:a1:57:13:02:ca:84:35:
                    f9:ee:50:ab:10:74:2e:08:e1:33:d9:47:0c:05:02:
                    df:99:d0:e0:02:e1:5b:6e:0c:dd:73:f4:25:ff:4e:
                    86:ca:62:df:ff:26:86:3b:7a:bc:bf:5a:5f:3f:ca:
                    8b:e1:4c:b6:3e:c0:ce:70:59:5c:6e:5a:d4:88:a0:
                    d5:f6:f4:da:eb:27:05:c7:d9:d4:25:3d:bb:d2:33:
                    26:94:66:e0:ca:d5:70:6d:84:3c:aa:11:06:b3:19:
                    00:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:5E:E3:CE:E6:4D:35:96:88:26:1C:3A:DE:B2:B5:67:69:F4:31:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/6c01ff9b-1c59-3288-8956-b402ec0bd417.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:f02::-2606:bc40:f04:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:50:95:31:4c:da:92:70:4b:72:bb:16:cc:3f:dc:97:b9:1a:
         96:49:a8:7e:00:96:5c:df:a6:f4:3a:09:f3:5f:14:38:e2:2c:
         04:1e:35:7c:23:c1:6d:df:1b:42:df:16:02:19:da:b1:90:0e:
         80:01:be:27:03:0f:f9:4f:5f:29:51:04:e9:4b:f2:ab:9a:d5:
         90:97:89:34:c3:4d:ef:80:83:dd:d4:d1:4c:3b:7c:f4:81:53:
         f3:7f:f1:81:30:08:13:96:b4:d9:8c:c4:77:17:c5:43:47:d0:
         73:3c:b1:96:6a:d9:de:62:cd:89:1f:0a:24:65:91:0d:2f:5f:
         1b:98:6f:83:69:a9:ee:4a:ea:1f:c5:61:3f:0f:d1:73:da:87:
         da:f2:45:84:f3:9d:91:5d:c0:0e:da:54:bf:f1:44:3c:d2:4b:
         9f:38:a5:9d:3d:cc:48:fa:1c:c0:60:bb:49:68:4b:37:10:9b:
         53:d6:cd:67:26:d1:d9:34:b8:d8:25:3c:e3:bf:93:c0:29:ff:
         84:51:7d:42:cd:a8:43:6a:6c:6b:f2:2c:cb:0e:cb:ee:12:cf:
         39:8a:f9:b5:e7:4d:04:52:e0:29:fc:68:15:ce:ab:ac:24:57:
         be:e5:de:2b:7c:3c:8b:6a:98:49:75:5d:02:a8:50:36:83:6e:
         05:3e:4e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----