Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/dc80833b-7eb1-3833-9e1a-732a60c6f66d.roa
File:                     dc80833b-7eb1-3833-9e1a-732a60c6f66d.roa (raw, json)
Hash identifier:          WeA6iOJgqKr/Bqy7qamnjALd4PhTpeBbK12kXvmzpCo=
Subject key identifier:   3D:85:4F:AD:B0:61:9A:89:31:72:66:B9:76:46:7D:22:56:0C:EA:9C
Certificate issuer:       /CN=552db743-b442-4066-8e02-0dcd47471dce
Certificate serial:       010D0C9F43285848530AE91F15242E7F58C61580
Authority key identifier: EA:6D:22:E3:E4:B1:9D:DB:DA:CB:F0:E2:93:B0:18:81:E9:3F:99:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/dc80833b-7eb1-3833-9e1a-732a60c6f66d.roa
Signing time:             Wed 25 Dec 2024 14:00:52 +0000
ROA not before:           Wed 25 Dec 2024 14:00:52 +0000
ROA not after:            Tue 25 Mar 2025 13:00:52 +0000
asID:                     59417
IP address blocks:        2602:fcf6:ffd::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:53:0a:e9:1f:15:24:2e:7f:58:c6:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552db743-b442-4066-8e02-0dcd47471dce
        Validity
            Not Before: Dec 25 14:00:52 2024 GMT
            Not After : Mar 25 13:00:52 2025 GMT
        Subject: CN=0734fa09-6818-4eea-a2ec-0dcf00b7c239
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:a9:8c:f4:e4:dc:e7:9a:87:87:81:ac:75:0b:
                    a8:bd:64:7b:4b:32:93:8a:05:e3:4a:9a:01:44:cf:
                    a2:10:f2:41:a4:a5:32:96:fa:96:3a:0d:08:a1:69:
                    54:43:d3:81:98:39:66:da:ed:c6:2e:89:35:58:1e:
                    f4:c0:04:82:d2:78:27:09:9d:1c:2b:6b:4d:d8:90:
                    8e:28:66:c7:01:dd:3f:6a:a3:bf:0b:88:e5:02:2d:
                    27:3b:44:3e:9b:9e:17:ca:f7:cf:05:1d:a8:31:4a:
                    8c:5c:9b:2a:52:16:35:9d:95:d1:48:1c:60:27:97:
                    9b:e0:7b:14:25:c9:ce:72:71:2b:c0:42:92:de:52:
                    94:14:d1:9f:58:0c:a5:39:54:e8:ca:33:c7:e2:34:
                    4b:9a:b4:5b:a7:c5:7c:ab:ca:71:1c:26:a7:5d:e8:
                    84:ab:03:dc:6b:2a:c4:8e:1c:84:03:bf:16:c0:f8:
                    07:5d:a1:00:a1:dc:d2:0c:95:60:5e:3d:db:a5:07:
                    15:ab:de:54:b7:ee:e1:e8:bb:0d:4e:81:d1:92:0f:
                    fd:ca:25:70:37:c5:3d:b6:98:8a:72:7c:a4:c4:98:
                    48:16:10:e6:d4:f2:35:95:67:3d:b3:13:56:a5:b7:
                    99:bc:19:a2:48:68:55:98:1e:17:2b:5f:21:16:d3:
                    a6:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:85:4F:AD:B0:61:9A:89:31:72:66:B9:76:46:7D:22:56:0C:EA:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/dc80833b-7eb1-3833-9e1a-732a60c6f66d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/552db743-b442-4066-8e02-0dcd47471dce.crl

            X509v3 Authority Key Identifier:
                keyid:EA:6D:22:E3:E4:B1:9D:DB:DA:CB:F0:E2:93:B0:18:81:E9:3F:99:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcf6:ffd::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:37:bd:cf:89:ab:0f:a2:a8:b8:dd:40:69:e8:51:35:4c:23:
         51:c3:b0:4d:3d:f1:be:19:e7:2a:96:3b:27:cd:ce:d7:6e:5b:
         fb:ca:39:0b:9e:4a:3c:ca:d6:b8:b6:37:94:3f:a9:18:b6:a6:
         99:69:42:3a:59:68:88:d4:0e:08:13:48:70:ca:a6:3f:3a:07:
         d1:33:86:3e:92:b3:c5:7e:61:99:66:59:c1:3d:d1:b3:0e:6b:
         01:42:3a:32:b3:d4:10:a8:c3:da:af:bc:ea:8a:78:b4:3d:40:
         cc:fb:39:52:12:e7:1c:2c:02:71:f3:a0:8b:9c:8a:19:55:6b:
         e5:cc:60:8c:41:c5:7e:3e:02:5c:84:db:03:b6:be:45:69:af:
         61:a7:09:12:b6:78:2f:37:0f:e5:95:5c:8d:7f:fe:d7:16:ca:
         b9:a5:c5:3c:69:9b:69:80:41:ac:f0:e6:7a:b4:2a:f3:fa:59:
         d2:62:12:a5:be:c9:ad:d5:1e:f7:3f:98:b9:b8:75:5e:8e:26:
         af:0c:ec:69:d0:6b:2e:97:b6:8c:3e:c3:d4:f1:a4:f4:77:09:
         4c:39:17:27:03:fd:ff:29:76:aa:31:ef:66:95:fe:05:48:43:
         f6:e9:61:be:50:6c:37:bb:41:7f:c5:35:1b:86:4f:a3:24:3f:
         a0:ac:47:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----