Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9cb42e6d-cfb9-41ff-b133-a97dc26d9c43/b95bb760-4c22-32d6-bc52-d983008adf93.roa
File:                     b95bb760-4c22-32d6-bc52-d983008adf93.roa (raw, json)
Hash identifier:          qEePbF4vpq8cG546pjs/7x4umsiYOXgjS/BcKOyq8oA=
Subject key identifier:   F5:16:B0:7E:45:24:B4:BD:E0:69:70:0E:21:88:4E:C5:83:8F:9F:63
Certificate issuer:       /CN=9cb42e6d-cfb9-41ff-b133-a97dc26d9c43
Certificate serial:       010D0C9F4328584633BD26FA3987941B35617880
Authority key identifier: 27:BC:F7:0A:58:93:FC:30:14:DB:4B:E5:C4:CC:CD:25:3D:C1:B2:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9cb42e6d-cfb9-41ff-b133-a97dc26d9c43.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9cb42e6d-cfb9-41ff-b133-a97dc26d9c43/b95bb760-4c22-32d6-bc52-d983008adf93.roa
Signing time:             Thu 13 Jun 2024 23:20:21 +0000
ROA not before:           Thu 13 Jun 2024 23:20:21 +0000
ROA not after:            Wed 11 Sep 2024 23:20:21 +0000
asID:                     399970
IP address blocks:        2620:10:6000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:33:bd:26:fa:39:87:94:1b:35:61:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cb42e6d-cfb9-41ff-b133-a97dc26d9c43
        Validity
            Not Before: Jun 13 23:20:21 2024 GMT
            Not After : Sep 11 23:20:21 2024 GMT
        Subject: CN=5c0157f6-6f04-4d10-8712-288c14106193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:6f:16:b9:f3:f5:e0:b3:a2:6e:2a:bb:2e:fd:
                    2c:c4:00:ab:16:29:42:d1:84:f0:e7:f0:4b:6d:46:
                    5a:60:86:6a:e4:01:c1:98:51:79:e8:2e:cb:48:b3:
                    c6:16:31:51:46:69:e9:fd:a4:82:31:72:37:1c:84:
                    79:6e:b6:90:63:76:70:bb:83:58:cd:76:d8:37:b7:
                    e3:bc:80:22:f4:3e:f5:aa:35:63:2d:d9:b5:bf:dd:
                    e1:9d:e7:b7:43:46:91:36:95:25:18:af:d0:6f:d1:
                    ed:ea:5e:21:56:85:33:26:77:fb:78:34:f4:29:58:
                    f1:a8:2e:67:61:76:06:80:61:dc:94:20:b7:e9:99:
                    e5:24:0b:f6:4c:a7:40:5b:e6:f0:14:83:32:95:34:
                    58:50:71:ac:36:47:a4:9b:b6:2a:35:91:d7:ed:5b:
                    c6:b3:2f:34:60:94:d8:ac:b9:8b:39:c4:9c:06:48:
                    0a:ca:d5:30:a2:33:b7:65:6c:ee:dc:3b:85:e1:36:
                    88:7f:70:0b:bf:79:66:d3:f6:02:30:df:a9:b2:2f:
                    fb:d0:5a:01:f3:0a:37:c5:e7:f5:5d:35:de:ce:03:
                    38:1a:39:f0:06:b4:37:49:7d:cd:9e:d8:d7:bd:be:
                    31:85:c7:18:cb:84:a8:47:2b:5f:e3:00:93:98:e6:
                    dd:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:16:B0:7E:45:24:B4:BD:E0:69:70:0E:21:88:4E:C5:83:8F:9F:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9cb42e6d-cfb9-41ff-b133-a97dc26d9c43/b95bb760-4c22-32d6-bc52-d983008adf93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9cb42e6d-cfb9-41ff-b133-a97dc26d9c43/9cb42e6d-cfb9-41ff-b133-a97dc26d9c43.crl

            X509v3 Authority Key Identifier:
                keyid:27:BC:F7:0A:58:93:FC:30:14:DB:4B:E5:C4:CC:CD:25:3D:C1:B2:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9cb42e6d-cfb9-41ff-b133-a97dc26d9c43.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:10:6000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:40:72:a9:13:07:6b:76:2b:77:30:0a:21:19:73:2c:0c:cd:
         78:2e:ce:8e:d8:0f:ca:55:85:ce:03:60:c5:3e:70:06:58:62:
         5a:d7:c5:d4:0e:cd:13:96:9a:69:dc:a5:06:38:61:25:45:ba:
         30:8f:59:2f:55:2c:70:fe:ef:72:73:dc:a8:db:fc:ac:eb:56:
         b5:ee:60:d5:65:ff:a1:5e:c6:d7:45:dc:ed:e8:e2:de:2e:15:
         01:43:11:dd:c3:50:19:66:26:bb:92:9b:9b:b0:ad:b1:8f:99:
         be:e3:5f:58:24:c6:de:00:8f:d2:a4:15:e9:07:17:17:e8:94:
         bc:f7:2c:be:ad:30:65:43:1b:a9:f6:7e:d1:63:08:13:53:79:
         31:01:df:3d:67:8c:bd:a7:a6:dd:b5:78:fd:61:60:23:1a:cd:
         7e:d2:75:40:50:97:1a:27:b8:35:fc:85:c5:3e:c5:4c:2f:20:
         18:3b:e0:da:a0:26:70:25:3e:09:42:e3:07:f3:e8:3f:90:0d:
         8c:27:b8:09:b4:fe:a0:48:60:40:15:60:6f:b4:ea:dc:7b:eb:
         ee:26:2b:ca:85:12:c0:47:96:8e:4a:14:d9:af:e4:1d:3c:c5:
         4e:cc:27:f4:d9:af:2e:42:a3:e3:e5:1e:a5:ec:4e:30:23:8f:
         88:1d:b7:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----