Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/42c6d736-2c48-339f-99bf-9b9b3538e2f5.roa
File:                     42c6d736-2c48-339f-99bf-9b9b3538e2f5.roa (raw, json)
Hash identifier:          Zdw84AMU6AyH6wwICWIuacXWoQctM47vKHv8tm6pVds=
Subject key identifier:   FD:F2:C4:1E:0A:B7:8D:08:3C:46:CC:8C:4F:6C:15:6E:9A:28:F0:DF
Certificate issuer:       /CN=77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6
Certificate serial:       010D0C9F43285848037B648A09C3CCE805FCF400
Authority key identifier: E2:9D:E8:0D:86:E0:8B:FD:22:CF:FE:65:78:94:20:F0:BD:72:DF:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/42c6d736-2c48-339f-99bf-9b9b3538e2f5.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     9505
IP address blocks:        2606:c00::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7b:64:8a:09:c3:cc:e8:05:fc:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=710a467a-4429-481f-bc59-8dc6493fe89e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:98:01:6b:ff:2a:6e:10:68:b2:2f:61:7d:62:
                    7f:1e:ff:c9:fa:d7:6a:5f:02:3c:b5:a1:ff:64:92:
                    53:13:ba:f9:a9:26:e6:51:ea:d4:fa:bb:96:5f:cc:
                    84:78:4d:51:dd:1a:e6:08:3b:1e:20:c9:cb:36:c1:
                    71:68:b1:c2:87:53:78:e1:b1:bf:66:1e:55:55:5c:
                    28:61:09:05:fb:74:d4:fc:62:bb:2f:15:06:dd:33:
                    08:89:54:bb:0c:e0:be:71:13:26:b1:82:69:03:8e:
                    10:4f:c3:7f:59:18:5b:39:d6:ba:9c:71:b1:2d:f5:
                    c5:ff:c0:7d:3c:d8:8d:02:32:8f:eb:78:5b:9c:d1:
                    ae:85:0d:88:c3:c2:9d:05:78:a9:4e:71:36:b4:53:
                    42:a9:d4:c4:25:35:6a:fc:b5:47:5e:f2:db:1e:21:
                    44:c2:33:49:75:53:9e:96:d4:bd:b1:cc:3e:a1:ce:
                    ad:7b:b2:dd:e3:8d:16:c4:47:17:c2:17:51:2d:91:
                    d3:9c:19:23:ef:46:8e:ba:56:7b:3e:e1:a1:bd:c9:
                    c3:7e:b6:46:04:43:cf:68:5d:67:c9:30:62:50:c0:
                    3a:c0:05:94:f6:34:4e:d3:d5:e5:c7:c6:58:80:22:
                    f3:2b:67:be:3f:08:36:c0:56:f1:90:b0:3b:b7:f2:
                    04:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:F2:C4:1E:0A:B7:8D:08:3C:46:CC:8C:4F:6C:15:6E:9A:28:F0:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/42c6d736-2c48-339f-99bf-9b9b3538e2f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.crl

            X509v3 Authority Key Identifier:
                keyid:E2:9D:E8:0D:86:E0:8B:FD:22:CF:FE:65:78:94:20:F0:BD:72:DF:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:c00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:84:ec:8c:34:a0:bc:a9:66:1e:ec:e8:58:4b:2b:ba:1f:57:
         e1:09:65:2a:50:f5:1e:11:b0:e1:d2:d3:d5:69:f8:f8:53:e3:
         da:f4:1f:6d:4a:87:95:7f:e4:ac:eb:0d:43:5a:a9:37:80:27:
         1d:11:5c:f0:1a:db:c7:33:c2:09:7c:12:67:5c:a3:3d:d5:5c:
         64:4a:89:75:c5:f3:8e:75:67:52:e1:69:24:da:e0:cf:e8:2f:
         b5:5b:37:29:a6:fa:9e:42:b4:a8:4d:ed:41:e8:b3:3e:c1:01:
         dc:c3:79:e3:e4:6b:9a:f1:ad:fa:0e:e8:15:88:87:04:87:b7:
         3b:8b:8b:36:a2:9c:26:fc:98:60:4d:77:d2:13:38:e5:e1:1b:
         67:ec:75:14:65:a4:ff:23:8f:2b:00:d9:a1:29:55:e7:b0:df:
         da:42:fc:f4:dc:31:2f:f4:7a:c7:44:b5:b8:7c:84:38:84:78:
         a4:17:b9:0c:37:b5:92:4d:9e:21:24:50:43:77:6e:46:58:43:
         3d:13:ad:e5:8e:d2:73:a6:db:08:2a:57:7c:41:a4:0e:af:23:
         f2:83:7d:64:75:b0:4e:5d:20:56:55:c0:b2:9a:bd:db:ff:e4:
         06:16:6d:e2:3b:6e:e4:7b:0f:01:a5:38:58:2c:c0:bc:25:f2:
         ae:21:3b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----