Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c/cd994807-3869-30d9-8edd-6f0f438f5329.roa
File:                     cd994807-3869-30d9-8edd-6f0f438f5329.roa (raw, json)
Hash identifier:          Z682nrOn2jhLKmtxs3Tl2J1leM32ByZkMfZ6JXaooSw=
Subject key identifier:   DE:44:40:C7:71:21:6D:1F:1B:82:C0:0B:7F:82:6F:13:41:FE:AC:8B
Certificate issuer:       /CN=a4530197-8968-425f-b6ab-d075941dc95c
Certificate serial:       010D0C9F432858492FED76C72AD2CAFFA08DA780
Authority key identifier: AC:75:9D:E1:98:8D:FE:FD:4A:14:1E:D2:AC:30:33:C3:B1:75:E2:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c/cd994807-3869-30d9-8edd-6f0f438f5329.roa
Signing time:             Fri 14 Mar 2025 16:55:17 +0000
ROA not before:           Fri 14 Mar 2025 16:55:17 +0000
ROA not after:            Thu 12 Jun 2025 16:55:17 +0000
asID:                     401085
IP address blocks:        2602:f802:80::/41 maxlen: 41
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2f:ed:76:c7:2a:d2:ca:ff:a0:8d:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4530197-8968-425f-b6ab-d075941dc95c
        Validity
            Not Before: Mar 14 16:55:17 2025 GMT
            Not After : Jun 12 16:55:17 2025 GMT
        Subject: CN=ac9afa5a-1b40-427c-b973-99cd3419e533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:52:2a:db:83:6c:19:0b:18:23:2a:9c:f7:c3:
                    2b:c0:81:13:c0:f9:44:65:95:40:01:64:cf:21:1a:
                    94:40:10:1a:85:09:57:e6:27:39:6b:79:8e:6b:ea:
                    a2:1e:59:6c:67:ae:be:6d:d9:87:62:22:78:70:44:
                    41:3a:38:91:24:21:f8:73:eb:36:2f:b4:b3:a4:7a:
                    8a:9b:0e:21:c6:c5:f7:96:c9:36:fd:fc:49:63:78:
                    d8:f0:90:f2:18:6e:23:12:02:35:b2:6a:2f:25:d3:
                    da:13:0f:27:5b:56:e3:cb:d3:c9:53:ae:83:e0:aa:
                    9b:44:8d:41:12:ea:64:26:b5:9b:72:28:c6:94:ab:
                    05:ed:09:e2:4c:f4:f6:cc:eb:29:d5:d5:45:6e:47:
                    ca:bf:a9:b8:5b:a0:60:7b:d5:a5:72:f7:c8:9a:0d:
                    36:10:e6:5b:f0:b3:a7:f6:e1:64:66:24:2e:82:bc:
                    22:cb:7a:50:3e:6f:8e:e4:57:6f:b1:6b:bd:5b:e8:
                    7a:dc:c3:37:44:69:a2:87:63:d6:0d:e3:0f:7b:a1:
                    48:8a:3e:26:06:25:d0:d1:af:16:8d:1b:7d:7e:81:
                    b7:ea:74:8f:48:66:ea:11:58:f2:4c:84:6e:97:54:
                    1f:79:0c:23:ea:a3:41:98:22:bd:d5:e9:3f:59:70:
                    16:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:44:40:C7:71:21:6D:1F:1B:82:C0:0B:7F:82:6F:13:41:FE:AC:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c/cd994807-3869-30d9-8edd-6f0f438f5329.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c/a4530197-8968-425f-b6ab-d075941dc95c.crl

            X509v3 Authority Key Identifier:
                keyid:AC:75:9D:E1:98:8D:FE:FD:4A:14:1E:D2:AC:30:33:C3:B1:75:E2:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f802:80::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:12:8d:77:a8:a8:94:3a:ff:ea:b3:69:0c:ff:5a:53:62:8e:
         d2:88:7d:1d:fe:7a:e2:ac:18:2f:98:96:84:47:1f:61:6c:8f:
         01:93:12:0a:03:3a:63:67:15:e1:ba:8d:35:42:66:9a:10:3a:
         39:90:6a:d6:c5:9c:30:c8:31:5a:06:21:4e:95:5d:8f:1b:b4:
         43:49:cf:8a:75:62:97:e3:e4:21:80:25:1c:02:40:c5:2a:78:
         94:fd:c3:19:49:c6:b2:cc:9b:c5:86:d4:e7:dc:93:9e:38:08:
         d6:02:f3:cb:4e:fc:8b:ad:17:b8:eb:50:29:0d:d8:52:4d:dc:
         94:23:1f:d1:46:44:23:22:bc:eb:d9:fa:65:24:cb:e9:b6:85:
         6f:5f:df:89:ea:a7:be:db:5d:c2:22:0d:71:b6:34:bd:e4:94:
         08:0a:84:c1:df:60:86:33:41:bd:eb:6c:a8:fe:79:69:94:78:
         52:36:8a:6d:52:f9:1c:00:7d:59:e2:e9:7f:29:f1:82:69:45:
         19:2e:0f:05:e9:85:96:60:06:6f:6b:34:d0:90:f5:d4:b4:41:
         db:6d:c3:f4:97:ae:78:9e:cd:a5:8e:86:2e:f6:d4:89:15:21:
         2c:59:6c:d7:95:9f:ea:44:fe:94:3a:71:d8:2b:29:6d:ba:32:
         57:2d:18:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----