Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2bc63006-f79b-37ef-9e50-066d567deef4.roa
File:                     2bc63006-f79b-37ef-9e50-066d567deef4.roa (raw, json)
Hash identifier:          b7flbQIjRztZdWCN2OlmNDgCer5DfcdtdY5+OgFKlsA=
Subject key identifier:   06:5D:1A:79:A5:86:0F:6C:7C:2E:86:68:9F:2B:FC:52:8D:8E:D0:B2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584854703CA0F70F4713A43DAB80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2bc63006-f79b-37ef-9e50-066d567deef4.roa
Signing time:             Thu 26 Dec 2024 02:00:40 +0000
ROA not before:           Thu 26 Dec 2024 02:00:40 +0000
ROA not after:            Wed 26 Mar 2025 01:00:40 +0000
asID:                     33657
IP address blocks:        2001:559:a02b::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:54:70:3c:a0:f7:0f:47:13:a4:3d:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 26 02:00:40 2024 GMT
            Not After : Mar 26 01:00:40 2025 GMT
        Subject: CN=6f261c83-b393-4ae6-8108-9374a8af1533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:01:7b:b2:85:e0:49:3f:6c:46:ec:c3:e2:aa:
                    3d:74:13:95:8c:4e:05:15:32:6b:6e:c8:af:32:06:
                    4d:df:1e:01:f5:e8:95:69:75:2a:57:cb:7d:b7:4a:
                    dd:26:ff:e5:47:e1:fe:ec:a9:34:ad:73:1c:b8:73:
                    00:0b:61:c0:b9:72:0e:2a:80:66:47:fb:94:95:09:
                    44:0d:72:73:fd:0c:13:24:d6:65:35:11:ce:9f:fb:
                    4b:aa:f7:05:a0:59:b1:ff:02:4c:6f:a0:a1:1d:93:
                    98:26:2f:7c:29:cc:ce:be:34:1d:27:73:41:00:24:
                    5f:37:53:3a:39:cf:6b:22:bd:b5:bd:65:63:20:47:
                    78:e0:a0:c6:51:fb:51:ba:35:36:52:d5:d4:8e:c3:
                    4b:0e:42:d2:dc:ae:61:e4:01:61:91:09:14:f3:7d:
                    dc:f5:5e:af:fa:b7:ba:36:17:91:36:d0:9e:59:49:
                    b6:0b:91:53:a8:f2:bb:fd:30:56:8d:b5:21:79:54:
                    8e:33:12:e6:bf:d4:f2:2a:17:04:e0:14:0b:c1:ee:
                    3f:ea:fa:04:1b:2b:15:36:55:21:57:e0:73:e0:c6:
                    a3:93:43:e1:66:0f:ce:24:4c:24:ac:f6:57:ae:40:
                    23:55:61:78:92:f0:db:31:f9:4b:99:dd:d3:c1:15:
                    0c:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:5D:1A:79:A5:86:0F:6C:7C:2E:86:68:9F:2B:FC:52:8D:8E:D0:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2bc63006-f79b-37ef-9e50-066d567deef4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:a02b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:26:82:89:fe:e1:2c:4a:de:48:3e:55:46:fd:e0:48:a9:04:
         59:6a:16:b9:88:8f:a6:0c:9d:e0:64:53:0f:ff:5f:25:ef:88:
         eb:f1:6b:7d:21:2f:a0:6d:b2:bd:9a:00:4a:b7:24:75:1e:25:
         a5:23:95:d1:5d:d6:14:73:33:0f:96:4f:84:b0:97:f5:fd:96:
         7a:71:18:40:29:24:b2:5b:64:ac:92:97:2b:a0:13:d1:3e:ed:
         96:e4:d2:4f:22:ae:ff:fb:91:7b:55:5b:48:c5:ab:4c:95:fe:
         46:a0:76:ae:3a:31:5b:7a:2f:e6:dc:91:ca:8a:2a:21:86:7d:
         c1:d0:34:dc:f2:a4:4c:18:fb:e4:0a:51:c3:fa:69:86:e2:b7:
         13:97:ce:5c:5b:76:ed:05:36:fe:86:5e:7d:d5:8a:94:f1:60:
         22:a4:75:ee:90:f1:eb:00:5f:79:1f:23:a2:c3:6f:a7:9c:65:
         3c:15:55:8e:b4:dc:96:8e:fd:19:f5:b0:99:d3:40:18:13:89:
         9e:fc:72:1c:2c:92:61:e1:a4:d6:b4:6c:2b:85:c7:af:67:18:
         8b:fc:b2:c7:1e:70:cd:2e:35:dd:d6:33:4d:fc:bc:a7:5d:9c:
         ba:a2:91:eb:47:e1:e2:68:51:81:32:2f:f0:d9:32:d1:71:76:
         f9:2c:45:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----