Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/a7013767-de4a-3bb7-8745-c92717794f3e.roa
File:                     a7013767-de4a-3bb7-8745-c92717794f3e.roa (raw, json)
Hash identifier:          tC6v8LfzUdy7d7Hlqs1oV5jd8vFPn9haUl129A8gASw=
Subject key identifier:   00:D8:58:72:18:1B:56:58:A5:10:1E:58:9D:B7:99:2C:03:00:41:23
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F43285848F4F69B02E20599D8A3DE3800
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/a7013767-de4a-3bb7-8745-c92717794f3e.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     20253
IP address blocks:        2606:bc40:f1d::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f6:9b:02:e2:05:99:d8:a3:de:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=c22fe469-7d51-4a6f-b703-006ddc6148a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:3a:2d:af:0c:0f:03:66:79:14:1e:3d:07:14:
                    7e:99:83:52:fb:dc:c0:9b:0c:01:c8:ec:95:31:a2:
                    cd:dd:51:5a:0b:a8:7f:43:63:9b:23:fd:d1:8c:7a:
                    cf:5f:d9:63:4d:3d:7e:69:fd:7b:23:b9:a9:a9:e3:
                    a3:7c:9b:44:0e:8f:f2:5d:84:d5:db:55:ab:d1:63:
                    07:19:18:92:f9:33:74:1b:8d:d1:9e:c7:88:f7:45:
                    5e:85:3e:7c:31:8b:f0:c3:aa:e7:8c:87:29:52:42:
                    3e:8e:04:7d:bf:8a:63:88:ba:92:51:81:1b:2a:2e:
                    c2:f3:69:f8:91:c9:13:c6:e4:5c:89:86:28:ca:ee:
                    b5:0c:b2:ea:4e:49:b3:88:04:67:ec:4d:3d:11:e7:
                    e6:05:a6:d3:88:84:85:a1:f3:b5:3a:08:96:6b:e1:
                    2f:6c:3f:29:97:ad:92:dc:9f:1f:11:10:46:c1:66:
                    28:5e:04:6c:52:19:86:8d:ca:68:fa:92:bf:3e:c9:
                    a4:a3:9f:be:25:a2:02:99:5a:4a:f6:a8:6b:fa:a5:
                    37:6b:57:64:75:53:48:b2:0c:6f:01:09:c2:ef:e5:
                    19:cf:c1:aa:30:0e:f8:4b:2b:c4:9c:3c:97:77:86:
                    02:36:62:5a:df:75:c4:e4:06:75:e3:57:57:28:e1:
                    00:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:D8:58:72:18:1B:56:58:A5:10:1E:58:9D:B7:99:2C:03:00:41:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/a7013767-de4a-3bb7-8745-c92717794f3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:f1d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:54:64:1b:ee:5a:91:cf:19:af:ad:ae:68:a1:06:dd:0c:66:
         eb:f2:f4:85:19:c4:98:d4:5b:6a:72:3a:47:ed:f5:a5:3e:13:
         00:d7:b5:64:b3:21:46:c7:f3:cf:25:31:1b:91:7f:db:40:fb:
         0a:41:34:0b:84:e1:c4:f4:b7:4c:74:e2:35:04:53:d1:ee:62:
         30:ab:f5:17:a3:90:3c:69:6a:79:a0:a2:2c:1f:b4:27:49:1a:
         3c:a1:48:2a:4a:e0:a4:83:e9:ca:da:d2:c7:ca:1d:94:9d:20:
         6a:b1:8c:55:cb:05:20:69:8c:5c:09:fd:de:fb:fd:da:32:0f:
         3c:12:7d:b5:87:bd:33:c2:07:71:cd:3e:44:b2:4b:ae:48:6f:
         c2:d2:dd:43:5d:f3:e5:d9:ed:7e:a3:1b:62:c7:c2:89:c6:f7:
         c0:b2:65:54:cd:3b:74:c4:3c:14:fd:92:a0:94:b9:3f:9f:ce:
         96:fd:48:71:ea:07:2d:b4:3a:50:3b:2c:9f:05:03:35:47:fa:
         08:bf:33:00:8e:1c:8d:a9:76:8f:ab:9b:01:40:f6:ec:2f:64:
         c1:89:f7:0e:52:81:b7:ad:97:f6:a5:42:99:7f:41:cc:69:9e:
         8f:58:ef:bb:36:b7:7e:e6:19:1d:57:76:1a:fa:59:c6:bc:72:
         3a:05:49:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----