Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/dc3c5dcd-faad-3b07-a375-e7e2db7f8385.roa
File:                     dc3c5dcd-faad-3b07-a375-e7e2db7f8385.roa (raw, json)
Hash identifier:          GU46L4lS9O4fIh/ERPWK2bxMraP0nwB5bdoW3XrVql0=
Subject key identifier:   C7:0A:38:F5:13:69:17:5D:D3:14:3F:F2:10:09:A6:E6:2C:36:E4:7C
Certificate issuer:       /CN=78a3d836-1df8-4303-a944-17cd53d7d04e
Certificate serial:       010D0C9F432858484AAADFAAFF40B6C70A54C600
Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/dc3c5dcd-faad-3b07-a375-e7e2db7f8385.roa
Signing time:             Sun 22 Dec 2024 14:00:51 +0000
ROA not before:           Sun 22 Dec 2024 14:00:51 +0000
ROA not after:            Sat 22 Mar 2025 13:00:51 +0000
asID:                     3477
IP address blocks:        2601:a013::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4a:aa:df:aa:ff:40:b6:c7:0a:54:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e
        Validity
            Not Before: Dec 22 14:00:51 2024 GMT
            Not After : Mar 22 13:00:51 2025 GMT
        Subject: CN=cf0dad21-f9cb-40ec-ab06-2825fbf50305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:30:14:85:14:66:a2:62:e6:a1:2c:d5:ae:d9:
                    a8:d3:f5:90:a8:bf:09:0a:a7:49:2f:f1:f0:35:c2:
                    52:e7:8d:7f:68:12:4e:3c:e0:2d:b1:ac:ec:27:07:
                    1b:44:65:f2:28:b1:80:cc:58:45:f3:43:3c:92:a4:
                    96:a5:eb:4d:e7:69:d7:75:68:33:99:31:10:4c:63:
                    f0:8d:3b:6e:9f:c3:b9:77:6e:37:31:7c:69:49:ad:
                    ad:0b:b5:69:66:f3:68:67:45:e8:18:03:ad:66:d2:
                    85:c6:e1:2f:e5:27:0a:13:df:7c:ac:30:a1:a9:24:
                    46:97:11:3f:c3:86:7c:aa:cc:e4:da:4f:7f:58:40:
                    75:b2:5a:30:c4:04:5b:e5:0e:ed:98:f6:f4:e4:7e:
                    35:8b:3e:6f:cb:46:b5:f0:48:26:31:a5:dd:74:31:
                    f5:09:da:1f:a6:5c:4a:67:a1:da:93:33:6f:54:e6:
                    ab:31:3e:46:87:c2:a0:e6:ef:a3:df:db:63:81:50:
                    71:07:12:a2:cf:1f:19:03:f5:d1:e7:7b:b3:3f:94:
                    4d:52:18:10:8e:bc:15:70:a6:0f:18:eb:fa:07:96:
                    db:11:d4:79:1b:b0:e2:48:a9:25:b1:b6:e1:ce:24:
                    b0:dd:c5:c2:90:5b:92:33:ae:d4:99:31:b6:11:42:
                    03:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:0A:38:F5:13:69:17:5D:D3:14:3F:F2:10:09:A6:E6:2C:36:E4:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/dc3c5dcd-faad-3b07-a375-e7e2db7f8385.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl

            X509v3 Authority Key Identifier:
                keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:a013::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:74:cd:60:e7:0d:c0:23:ff:e9:b6:85:28:e3:ec:ad:ab:c0:
         e6:1e:b3:90:77:da:58:c8:05:7d:b0:fa:19:40:ea:7b:f3:2c:
         b0:76:d5:41:72:10:33:98:7c:87:92:7d:16:e9:96:f1:60:a6:
         73:ec:d8:e6:77:3d:ad:b7:f9:4e:fa:c9:d5:94:17:bc:b1:36:
         a8:89:62:f8:fa:ff:33:cf:fb:c3:99:58:bf:27:34:d3:5d:0e:
         2b:98:18:bc:a7:ee:c3:4e:05:a1:ca:88:ce:ce:9a:e4:ee:8d:
         86:a6:2e:02:c3:8a:94:b8:96:90:af:cb:a9:48:11:af:f9:e4:
         2b:7b:3e:5a:69:c1:5d:46:fc:7f:b1:a6:aa:3b:f6:98:6c:25:
         09:1e:0c:1c:8d:eb:f4:ef:1e:05:49:00:71:d4:9f:2d:ae:7f:
         fb:3e:46:cc:71:7b:ea:59:2b:56:cc:c0:8e:16:3f:72:bc:6d:
         d6:2f:7c:44:b9:02:ee:28:b2:49:0d:27:8a:ce:0c:14:64:e7:
         4f:6b:c8:2b:1c:8b:03:e0:a0:e5:dd:e4:5c:47:67:f6:5d:f7:
         df:d8:af:b3:91:8a:cd:8f:a0:3c:bf:2b:d9:46:21:0e:9f:98:
         3d:a7:e6:0e:63:6c:62:24:d8:11:f6:5c:72:5d:b6:d9:ac:33:
         92:18:b9:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----