Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/9df4a168-5353-3835-8ec0-fd968df0dab7.roa
File:                     9df4a168-5353-3835-8ec0-fd968df0dab7.roa (raw, json)
Hash identifier:          KnW0F8WZh3ZWrBQd9g0uZ7HL1QWK7FWJ+0YbcrvcwyM=
Subject key identifier:   A1:0C:EB:AB:9E:6B:2B:19:D8:7D:A0:B6:38:88:9A:56:06:F0:3B:F0
Certificate issuer:       /CN=1e268aaa-6306-4988-99f7-d5802a67b577
Certificate serial:       010D0C9F432858483B59D2D0E44D871DC1422EA0
Authority key identifier: 6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/9df4a168-5353-3835-8ec0-fd968df0dab7.roa
Signing time:             Tue 17 Dec 2024 02:20:34 +0000
ROA not before:           Tue 17 Dec 2024 02:20:34 +0000
ROA not after:            Mon 17 Mar 2025 01:20:34 +0000
asID:                     397763
IP address blocks:        2605:59c7:f081::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3b:59:d2:d0:e4:4d:87:1d:c1:42:2e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e268aaa-6306-4988-99f7-d5802a67b577
        Validity
            Not Before: Dec 17 02:20:34 2024 GMT
            Not After : Mar 17 01:20:34 2025 GMT
        Subject: CN=d3cd66a9-e749-4c9a-b4d2-bc751641bdce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:3c:d9:23:5b:0a:61:df:fe:b7:ee:ca:27:5e:
                    30:56:6a:d9:96:70:8c:13:d9:42:a2:07:9a:f0:a0:
                    0b:59:dd:49:18:96:37:3c:d7:c1:20:b7:e3:4f:3a:
                    68:d5:29:85:55:43:78:f9:bb:f8:e3:99:45:5f:01:
                    82:85:47:18:03:79:cc:98:08:e6:c4:78:78:bb:af:
                    3a:51:2d:c8:a7:ce:1b:85:1d:19:b1:ba:0d:e1:6d:
                    f8:27:82:a1:a3:93:67:12:7d:de:a5:01:5f:a7:21:
                    6e:81:64:af:d9:3d:69:c8:2b:bd:5d:8a:8c:8f:19:
                    2b:50:f5:7b:3d:71:88:c3:50:c6:2c:05:a2:80:b9:
                    0b:4f:a8:54:3a:9e:0e:27:f8:6d:25:af:2a:b2:12:
                    d9:2a:d3:d6:e1:f0:8a:6c:4e:4b:7b:6c:ed:2b:2c:
                    17:ff:af:83:47:24:be:06:06:d5:c7:e3:26:a2:33:
                    3f:d4:32:8a:b7:73:d4:f5:82:34:90:74:8e:1f:2a:
                    68:87:51:63:9e:0b:cc:a0:28:e5:c5:51:97:c4:d1:
                    56:e1:71:e1:18:79:84:f5:24:de:e9:02:98:d6:79:
                    b4:fd:02:b2:d3:63:5f:8b:9c:23:74:36:38:ec:da:
                    f9:52:2c:91:1b:39:81:43:4d:1c:02:cf:fc:73:40:
                    f5:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:0C:EB:AB:9E:6B:2B:19:D8:7D:A0:B6:38:88:9A:56:06:F0:3B:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/9df4a168-5353-3835-8ec0-fd968df0dab7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl

            X509v3 Authority Key Identifier:
                keyid:6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:59c7:f081::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dc:bc:bb:0b:9d:c6:91:80:fe:3e:10:d7:7d:b3:d7:fb:86:d8:
         3c:c7:1b:06:1e:f5:c1:5e:3a:8c:78:18:cc:31:b2:ff:d4:10:
         27:ad:d5:91:f3:a2:3a:c8:aa:9e:dc:d5:bd:d3:70:76:32:af:
         ca:ba:3c:22:1b:6b:51:f1:70:4d:ab:e7:3c:79:d5:07:2b:40:
         66:9f:8b:b7:37:6e:36:2e:43:1a:50:79:15:8b:d5:f5:39:17:
         1c:15:4e:f6:e9:e3:0c:99:de:48:e7:3e:3c:64:f2:f3:47:16:
         45:8e:6a:38:cb:b3:38:c5:77:da:b0:6a:80:b2:dc:c7:22:40:
         4f:a3:d3:3f:4c:c2:6d:a0:7a:f4:9f:1c:02:b9:58:6e:d0:e9:
         a4:3d:1d:de:9f:46:e2:9e:0f:7b:d6:ed:61:01:62:89:b9:a7:
         1e:ba:10:cb:c2:f1:f6:e8:3b:fc:52:5d:24:73:e4:91:d4:ba:
         8a:db:08:39:e1:68:3f:56:22:6f:a0:1d:da:26:1c:24:a1:cc:
         6e:66:64:07:39:30:23:09:22:3d:9e:98:d9:af:ad:4d:53:61:
         85:85:b7:e7:72:bc:87:e5:9c:31:b6:57:0b:15:1e:e1:82:98:
         17:17:23:d8:5a:18:88:33:d2:7b:1f:c5:38:74:0b:44:79:1c:
         b7:e3:ba:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----