Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/f56e2652-e9f9-3264-8577-b6f75add8992.roa
File:                     f56e2652-e9f9-3264-8577-b6f75add8992.roa (raw, json)
Hash identifier:          DDVP0brrtDBGC8MxownEOrnCISd7Y7FtE/4BqdLEb9M=
Subject key identifier:   67:1B:7A:10:54:72:81:4E:55:75:73:68:07:ED:B8:75:D4:EB:38:70
Certificate issuer:       /CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
Certificate serial:       010D0C9F432858492CAE9C37CF17A8790F9595E0
Authority key identifier: CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/f56e2652-e9f9-3264-8577-b6f75add8992.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     29854
IP address blocks:        2606:2e00::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:ae:9c:37:cf:17:a8:79:0f:95:95:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=5c330480-38bc-48e1-9c78-fcda191f00a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:7f:37:fe:4b:1e:cb:bf:84:78:a9:80:70:b4:
                    f1:33:cf:5c:cd:71:8a:f5:f9:c9:88:57:70:4d:43:
                    e1:f6:17:14:40:62:86:9d:59:fc:e9:da:39:75:bc:
                    58:ef:d0:d3:48:64:fb:ba:25:9f:f4:4c:b2:ba:57:
                    7f:a1:b9:47:8e:b4:d1:a0:0f:5e:5b:34:fc:66:08:
                    b3:0d:df:a7:d6:1e:e5:c2:05:33:d7:77:10:3d:ff:
                    3f:dc:c6:d1:ea:0e:37:2f:af:80:4e:6b:e3:9a:5f:
                    93:d5:b9:d8:b2:a6:3e:7a:3d:d4:22:56:28:ca:bb:
                    30:d6:0a:e1:27:98:9a:1e:2f:c7:7c:6f:e3:6c:a8:
                    25:dc:a6:67:6c:a4:32:95:76:7a:48:ac:cd:24:9d:
                    c0:9a:78:3d:7f:9a:bc:fd:06:db:66:d1:83:1d:e1:
                    b8:ab:e8:03:e2:aa:8c:65:3a:14:be:b8:5d:9a:c8:
                    9f:c9:b2:e6:54:94:89:97:f3:3b:0e:44:5a:f1:a2:
                    c0:c3:76:2a:6b:b7:8a:52:6a:47:de:c8:b3:45:38:
                    0f:c1:dc:50:b0:63:f3:01:c8:d2:fe:5e:43:69:40:
                    01:a5:4e:f4:b4:e9:fa:ad:7b:75:bb:6a:13:15:f7:
                    ee:4f:22:4e:1e:5b:74:36:51:cb:83:0f:3a:48:dd:
                    dd:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:1B:7A:10:54:72:81:4E:55:75:73:68:07:ED:B8:75:D4:EB:38:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/f56e2652-e9f9-3264-8577-b6f75add8992.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl

            X509v3 Authority Key Identifier:
                keyid:CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:2e00::/33

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:c3:50:79:75:15:f2:9a:ad:d6:2c:b4:2c:77:82:f5:af:b5:
         d7:d9:25:f8:68:e3:81:4a:21:72:30:27:78:60:fb:f6:47:f2:
         31:fc:12:a5:0f:4f:b7:23:a0:27:8a:96:6d:f8:ff:79:b2:bb:
         db:a5:3f:fc:dd:d7:8c:1b:ef:0f:51:3e:0b:cd:91:40:bb:ac:
         b9:62:ad:92:c5:48:b4:05:60:fe:64:74:70:9a:cd:f0:eb:9e:
         f3:e8:8f:c2:ce:81:65:e8:f1:e1:96:c1:f5:ad:19:20:28:e5:
         97:71:99:61:b5:06:49:ae:2d:bf:41:57:df:83:09:31:b1:3a:
         ae:f5:d1:85:66:82:2a:60:ad:d0:cb:3d:3e:f7:dc:10:a7:64:
         78:ca:00:73:e5:ca:c1:1a:f3:f9:d8:18:5a:f1:f7:4c:97:0a:
         9e:0d:67:39:5a:6d:c2:ea:44:35:34:1a:2b:f9:b1:71:5d:f5:
         1e:ac:3f:1e:86:45:1f:e7:3d:7f:c6:22:03:72:a1:bf:63:e4:
         42:65:90:88:40:30:84:0b:61:7d:56:bf:f8:30:91:83:29:2f:
         fd:2a:5f:11:ac:4b:3a:80:db:c4:01:9d:c9:da:3d:f0:94:c6:
         ae:bb:95:0b:f2:17:7e:98:81:78:4e:9d:6c:79:92:79:66:62:
         35:de:48:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----