Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7b32f305-4389-4cc7-b146-c144a26b3f4c/333e46c8-8ff4-38b8-acdc-10662d117e63.roa
File:                     333e46c8-8ff4-38b8-acdc-10662d117e63.roa (raw, json)
Hash identifier:          9xNBzRs3GG1pq+RKczYoOlP5iBg3DOQJcv7dEF8Zuoc=
Subject key identifier:   55:32:24:70:B7:5A:5D:24:14:D0:7D:CB:D0:32:CA:24:40:03:7A:B1
Certificate issuer:       /CN=7b32f305-4389-4cc7-b146-c144a26b3f4c
Certificate serial:       010D0C9F43285848F22BE490CE48885691590BC0
Authority key identifier: 7C:1C:9F:00:4A:3C:F6:73:0C:CD:C1:FC:5C:23:A9:26:D1:59:EB:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7b32f305-4389-4cc7-b146-c144a26b3f4c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7b32f305-4389-4cc7-b146-c144a26b3f4c/333e46c8-8ff4-38b8-acdc-10662d117e63.roa
Signing time:             Thu 20 Feb 2025 14:00:52 +0000
ROA not before:           Thu 20 Feb 2025 14:00:52 +0000
ROA not after:            Wed 21 May 2025 13:00:52 +0000
asID:                     17253
IP address blocks:        2606:8000::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f2:2b:e4:90:ce:48:88:56:91:59:0b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b32f305-4389-4cc7-b146-c144a26b3f4c
        Validity
            Not Before: Feb 20 14:00:52 2025 GMT
            Not After : May 21 13:00:52 2025 GMT
        Subject: CN=ff80b5ee-d9c0-4f58-af88-efaf01af9734
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:cc:01:28:a2:4d:d1:4b:f4:71:2b:ba:fc:e1:
                    55:ff:08:a1:e2:37:0f:0a:76:76:93:ef:85:e7:74:
                    cb:38:d5:16:14:43:80:86:34:0c:87:68:38:a6:c2:
                    8e:c0:d3:9d:bb:8e:35:df:27:4c:cd:0e:fd:ec:b0:
                    5d:06:60:29:9d:22:46:31:67:34:b9:a3:66:48:95:
                    94:c4:5a:7a:69:6c:0e:e0:d8:56:2f:3e:d5:69:31:
                    b3:6d:39:31:1a:b9:14:4f:dd:bd:ea:2d:a9:ee:32:
                    67:67:a9:28:6d:bf:69:15:05:8c:2e:0b:e0:b3:69:
                    7c:82:02:f9:ae:64:fd:cc:d2:8a:8b:70:dc:77:5d:
                    b7:f5:55:e2:54:d2:87:b3:f0:4b:ad:d4:80:16:00:
                    90:9c:20:30:68:70:d4:ad:ff:90:b6:4a:0b:32:f6:
                    6e:44:cd:f9:92:7d:02:33:e4:b0:30:51:ca:53:0d:
                    b7:44:ac:c3:70:bc:50:2f:85:b1:f8:20:26:50:2e:
                    a3:73:a8:ef:6f:9d:1a:c0:db:02:30:6c:be:df:d4:
                    04:e0:eb:fb:fb:29:ae:40:9c:97:e1:42:fa:e2:7e:
                    ec:86:58:d4:a2:10:46:0d:69:d5:32:86:d3:95:ec:
                    7c:68:7e:90:59:6d:b2:97:b3:25:d7:39:72:0c:74:
                    87:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:32:24:70:B7:5A:5D:24:14:D0:7D:CB:D0:32:CA:24:40:03:7A:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7b32f305-4389-4cc7-b146-c144a26b3f4c/333e46c8-8ff4-38b8-acdc-10662d117e63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7b32f305-4389-4cc7-b146-c144a26b3f4c/7b32f305-4389-4cc7-b146-c144a26b3f4c.crl

            X509v3 Authority Key Identifier:
                keyid:7C:1C:9F:00:4A:3C:F6:73:0C:CD:C1:FC:5C:23:A9:26:D1:59:EB:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7b32f305-4389-4cc7-b146-c144a26b3f4c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:8000::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:92:0a:2a:c5:78:f3:6a:90:ca:8a:fc:e4:bc:9e:47:77:7a:
         c9:4d:66:5d:6e:f2:1f:ef:50:e2:90:02:7c:e0:be:06:85:f8:
         3b:6f:d5:32:cd:60:81:04:ab:8c:fe:64:70:19:9f:d2:05:2a:
         00:3a:9c:6e:94:01:87:23:21:2b:09:be:3b:32:e3:0c:99:93:
         1d:e7:8d:d9:d8:a4:6b:bc:6f:5f:cc:a1:de:76:4d:0b:30:49:
         6c:aa:9e:c6:e8:a5:fd:c0:33:e8:f2:74:8d:1e:96:fe:ed:60:
         78:c0:3f:3c:e7:a2:4d:22:67:0d:a5:06:14:c8:d5:b8:60:5e:
         4f:9b:45:86:90:d9:36:d0:75:31:22:5a:97:25:a6:f3:ca:d8:
         f8:6b:e8:50:58:39:bb:b4:76:e0:d5:45:fc:7f:3a:3f:c6:e6:
         c8:04:e2:39:75:92:87:64:72:1a:77:92:2b:1c:81:83:e5:5a:
         2c:2a:50:ab:f4:b0:3c:36:53:b5:6a:35:39:1b:17:b4:bb:45:
         4f:22:9b:0a:63:8e:a5:d1:e5:55:c9:20:55:86:e8:5c:76:ec:
         ce:23:4e:ec:72:30:5d:7b:b7:91:fa:6d:40:3d:83:96:42:50:
         3b:13:38:25:59:f3:0e:07:fc:47:93:ce:f6:96:c7:6d:d6:b5:
         ab:54:e9:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----