Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/9a3a024e-5a9f-301d-902a-eacf3e1a9e1a.roa
File:                     9a3a024e-5a9f-301d-902a-eacf3e1a9e1a.roa (raw, json)
Hash identifier:          MfS+BctgbTXhrs5Y0oT+/Vgx0FAJVNQUkvYXRTKo4T4=
Subject key identifier:   41:9D:45:0C:94:A2:E3:9D:F3:8C:44:4F:3E:82:4B:05:AF:FD:13:F8
Certificate issuer:       /CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078
Certificate serial:       010D0C9F43285848854B4FBFD815CEA0A225A200
Authority key identifier: 10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/9a3a024e-5a9f-301d-902a-eacf3e1a9e1a.roa
Signing time:             Sun 12 Jan 2025 14:00:53 +0000
ROA not before:           Sun 12 Jan 2025 14:00:53 +0000
ROA not after:            Sat 12 Apr 2025 13:00:53 +0000
asID:                     25664
IP address blocks:        2607:cc80:6000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:85:4b:4f:bf:d8:15:ce:a0:a2:25:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078
        Validity
            Not Before: Jan 12 14:00:53 2025 GMT
            Not After : Apr 12 13:00:53 2025 GMT
        Subject: CN=1ea373a9-4974-41db-ab62-b6b0f8611470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0d:97:e4:03:97:70:f1:f3:52:06:05:6c:6e:
                    63:50:a3:87:e5:d7:37:73:ce:c3:e3:ee:79:41:29:
                    b4:8f:7f:48:4b:bb:0a:f9:d6:a0:79:aa:9c:b3:75:
                    7a:48:52:cb:c5:60:f5:2e:0e:60:b8:41:38:39:2d:
                    cc:5f:c8:c9:22:cf:87:f9:62:7c:7c:78:bf:7d:5f:
                    54:c7:7c:cb:7f:7d:f1:1c:d5:4a:ab:e6:f4:b0:83:
                    a1:28:ba:a3:13:bd:d3:a7:d0:66:2a:8d:c9:82:e4:
                    d8:24:cb:2d:8b:ef:d8:b6:bf:2d:36:a5:cb:b0:61:
                    34:ce:bf:1e:98:44:b6:77:12:dd:af:13:63:18:3c:
                    01:91:b7:78:d5:11:d7:37:46:67:7a:75:fd:97:80:
                    f4:2e:1d:56:68:b5:c2:e4:6c:98:00:e8:f0:11:a3:
                    5b:3c:0d:da:29:b5:15:a9:21:9b:0f:64:e5:81:c5:
                    74:7d:24:dd:b7:72:2d:31:f8:a0:82:fd:e5:f2:52:
                    04:e3:fb:41:71:1a:74:50:8d:94:42:84:ed:5c:48:
                    c0:47:c9:4a:b5:31:57:3e:e8:40:77:e8:da:74:d4:
                    7d:be:2c:99:91:9d:97:74:df:18:9f:eb:f7:8d:bb:
                    a0:9a:f0:36:1b:3e:38:01:55:50:24:c2:21:b7:a7:
                    6e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:9D:45:0C:94:A2:E3:9D:F3:8C:44:4F:3E:82:4B:05:AF:FD:13:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/9a3a024e-5a9f-301d-902a-eacf3e1a9e1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl

            X509v3 Authority Key Identifier:
                keyid:10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:cc80:6000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:a6:e7:82:3c:8d:51:51:1b:a3:0d:e2:16:fc:ba:ad:1e:1a:
         5f:e5:02:35:ed:69:5d:55:02:38:07:db:21:a9:ec:de:8d:f9:
         39:b9:8c:f3:40:17:fc:ad:93:74:37:07:2e:f0:4d:b3:90:90:
         c9:ef:f3:c1:cc:6f:69:34:3f:43:de:0b:01:7b:fd:1b:00:34:
         40:46:12:c8:98:dd:a7:cf:e3:e5:d2:95:fa:10:2e:21:ea:a8:
         e5:c3:52:d4:21:2b:c0:4f:4d:5c:91:8b:80:a5:9f:57:22:b0:
         3a:ec:66:b6:58:17:c7:78:c0:c1:0f:08:91:8a:77:65:e7:b2:
         91:4f:3a:67:4f:ea:32:71:0b:6a:44:89:1f:d3:41:14:01:a2:
         6d:c8:9a:81:71:4d:3b:2e:b3:24:e5:2c:8d:b9:e9:ca:d5:fd:
         3b:d5:3b:4f:b3:d7:b6:a2:e0:16:bb:f3:93:68:71:17:02:97:
         18:71:60:89:05:ef:cb:bf:d9:67:46:29:4b:1c:37:26:8e:61:
         63:ec:60:0a:b3:89:3c:a2:8d:2c:e2:48:6a:05:97:2f:fe:b9:
         26:be:1b:9e:6c:ad:b2:aa:ac:e5:6e:07:ef:e3:db:88:6c:35:
         b5:dd:eb:8f:54:50:1e:ae:ba:a3:03:b2:0b:b3:b4:2f:9f:b6:
         e3:50:ae:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----