Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/a854fa6a-8ff2-39cd-bb8a-bf0412672cf3.roa
File:                     a854fa6a-8ff2-39cd-bb8a-bf0412672cf3.roa (raw, json)
Hash identifier:          ff9QykRBnHEZrhqhqmKH6vlgWeeByIJy6ufJKcfkDS0=
Subject key identifier:   91:26:97:AF:07:CE:7C:23:00:4A:79:F2:DE:AE:C3:D9:41:9A:B0:50
Certificate issuer:       /CN=78a3d836-1df8-4303-a944-17cd53d7d04e
Certificate serial:       010D0C9F432858484AAADF4B04C7B8553ABC96E0
Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/a854fa6a-8ff2-39cd-bb8a-bf0412672cf3.roa
Signing time:             Sun 22 Dec 2024 14:00:51 +0000
ROA not before:           Sun 22 Dec 2024 14:00:51 +0000
ROA not after:            Sat 22 Mar 2025 13:00:51 +0000
asID:                     3477
IP address blocks:        2601:a004::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4a:aa:df:4b:04:c7:b8:55:3a:bc:96:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e
        Validity
            Not Before: Dec 22 14:00:51 2024 GMT
            Not After : Mar 22 13:00:51 2025 GMT
        Subject: CN=a30fa506-004f-4f17-84b7-4fae8604c42a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:49:55:cd:e4:54:ee:0e:95:7a:dd:5b:9b:0d:
                    c8:72:96:18:3b:18:86:fd:33:68:ec:12:f6:17:00:
                    8f:2d:c4:22:01:c5:7e:53:a2:b6:34:4c:71:ba:35:
                    c2:53:27:20:a2:d0:08:65:2c:4a:3c:64:dc:38:9d:
                    16:29:1c:4e:fe:b5:42:4f:4f:79:9d:35:59:08:37:
                    3f:56:e9:47:ca:45:47:53:4f:0a:b6:13:0b:9c:ce:
                    8d:f1:9f:b6:46:ca:b6:85:c6:51:c7:76:40:ba:f7:
                    20:b5:76:65:cb:8e:1f:61:a7:84:ca:a7:c7:6f:90:
                    d7:91:c9:9e:69:ae:52:25:0c:1d:85:b1:3b:2f:98:
                    cd:e2:7e:a3:9b:d2:2b:9b:2e:f5:d9:4f:a3:0d:98:
                    95:49:68:da:85:52:a3:a7:7b:a1:03:8c:93:12:a4:
                    7e:d1:35:f6:3b:ca:98:04:5b:81:22:4d:6f:67:1f:
                    13:62:e4:31:7e:27:db:f9:ac:7c:86:0b:9c:b8:b8:
                    68:ec:97:e7:01:d1:d9:6e:2f:e0:4e:dc:cd:57:8d:
                    a4:5b:1a:73:f8:e7:e4:20:45:cd:aa:ec:6c:1f:e6:
                    a9:cc:85:fe:61:e9:2b:84:41:3b:57:f1:cb:f6:32:
                    c5:a9:59:cc:f9:ac:2e:04:72:58:ea:ed:fe:e2:d9:
                    95:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:26:97:AF:07:CE:7C:23:00:4A:79:F2:DE:AE:C3:D9:41:9A:B0:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/a854fa6a-8ff2-39cd-bb8a-bf0412672cf3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl

            X509v3 Authority Key Identifier:
                keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:a004::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:b3:56:59:18:0d:d6:a5:ad:54:c3:2e:b5:58:67:56:69:e1:
         53:46:bf:28:0c:df:1f:4d:ee:1c:f2:09:54:f4:d9:e0:9b:0b:
         ec:a7:df:08:05:ed:bd:33:e0:cc:26:2f:c6:5b:fd:9e:ed:2b:
         0b:08:3b:17:1e:a2:27:f5:38:88:04:11:0e:7c:a5:29:03:a8:
         0d:f3:50:fa:0f:57:4c:88:f1:7e:05:76:ab:02:9f:37:41:b1:
         83:2a:cf:06:48:29:11:b3:48:2c:70:e4:16:7a:81:90:a7:81:
         e6:6d:2a:d2:15:ed:fa:89:7e:e8:c5:a5:dd:2c:41:06:01:3e:
         17:cc:64:24:aa:f7:86:8b:f1:aa:96:55:c4:4f:33:fb:90:fe:
         67:fa:35:7d:2e:e1:ee:11:15:db:6f:45:a9:e1:ef:4c:6f:8f:
         7d:fc:bf:c0:e1:87:2a:c4:e8:96:ae:42:69:e0:a5:a3:c9:08:
         1b:76:e2:a4:ae:31:28:5d:8d:65:df:57:d5:c4:75:0a:1a:68:
         70:51:30:ef:42:1e:c4:2e:32:d5:5c:39:75:44:d5:a9:8d:ad:
         b5:9b:8f:5c:35:e2:f0:84:7c:8b:9d:26:19:91:54:b4:7d:8d:
         1c:9d:98:22:31:13:c7:3e:c6:f8:76:2a:ec:13:e6:ea:b6:c5:
         3d:f7:ed:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----