Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/af539044-fd14-3446-bffe-783064015394.roa
File:                     af539044-fd14-3446-bffe-783064015394.roa (raw, json)
Hash identifier:          okAn5NeLciEFS9v7M3q7dn7oCbUPBnx7zZsWabEScDs=
Subject key identifier:   B6:69:59:CE:D7:A3:2A:20:74:C8:FA:06:B2:2D:91:75:05:01:6E:BA
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F432858483885556FD972CA0046276580
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/af539044-fd14-3446-bffe-783064015394.roa
Signing time:             Mon 16 Dec 2024 02:00:39 +0000
ROA not before:           Mon 16 Dec 2024 02:00:39 +0000
ROA not after:            Sun 16 Mar 2025 01:00:39 +0000
asID:                     20940
IP address blocks:        2001:418:1401:400::/56 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:38:85:55:6f:d9:72:ca:00:46:27:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Dec 16 02:00:39 2024 GMT
            Not After : Mar 16 01:00:39 2025 GMT
        Subject: CN=b813f029-1472-4ba7-9cc0-0a2b195d823b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:01:5a:35:61:c4:23:e8:1c:a9:cd:c0:03:88:
                    b4:8f:23:99:5e:3f:77:a6:29:3f:e5:4f:21:77:f8:
                    96:57:78:b9:cd:e5:b7:33:1f:1c:10:6c:a6:97:56:
                    e6:82:2d:32:96:84:f3:47:9f:aa:d8:13:69:c3:ca:
                    67:e7:d3:e7:56:07:05:27:f3:56:a7:db:0a:3b:0f:
                    a2:81:e9:e2:b0:9f:14:cb:e6:80:39:b9:53:f6:3a:
                    30:7e:72:47:20:57:d4:3e:03:57:59:f7:38:e3:a9:
                    86:39:ec:19:7a:73:1a:f8:01:b4:77:81:99:05:d2:
                    d9:06:07:1c:d5:01:83:45:08:a3:2a:2b:ef:4b:42:
                    ea:f9:d8:4d:7e:fd:4f:ce:1d:ff:11:31:0c:f2:af:
                    82:d8:6f:8d:76:b4:a9:f8:7a:f7:6e:37:1d:97:95:
                    e4:1b:37:e9:ca:8d:5a:2c:c8:8d:92:28:43:56:b3:
                    43:df:f0:4e:4c:a5:dd:a3:76:27:cc:15:17:a3:e5:
                    39:a2:26:0c:05:ca:b5:40:26:da:51:71:10:fa:5f:
                    1f:01:97:76:ab:01:46:62:63:63:6f:e4:76:0c:01:
                    cd:5c:55:c8:c9:14:cd:ec:3b:18:98:da:c2:51:3c:
                    61:c5:0c:f2:e5:da:1b:1d:11:d5:1e:43:39:3a:cf:
                    15:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:69:59:CE:D7:A3:2A:20:74:C8:FA:06:B2:2D:91:75:05:01:6E:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/af539044-fd14-3446-bffe-783064015394.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:418:1401:400::/56

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:7a:74:20:0c:2d:89:08:a6:04:ac:08:7d:a7:49:bc:e5:d4:
         1e:72:a8:2f:33:f3:2c:cd:5b:15:3c:3c:88:26:79:74:23:c0:
         f1:f5:ac:35:2a:b4:b5:a1:50:a8:9d:9d:a9:08:2e:b2:79:a2:
         95:60:5c:ea:51:06:76:39:a4:6a:32:b6:bf:11:33:88:c0:20:
         23:55:20:2f:23:50:37:80:9e:d5:58:86:e7:9b:a3:9e:95:b2:
         52:85:bb:4e:23:f1:91:2d:2d:09:f0:84:5c:b9:6e:bb:fd:9a:
         8f:34:11:e6:5e:ec:e4:75:13:b9:f4:32:85:d8:ef:70:0b:73:
         5f:75:1b:4c:4d:1a:76:a1:3e:a1:bd:42:da:28:c6:b0:c3:a4:
         70:b4:0d:9b:fb:fa:6a:88:51:01:96:70:04:35:82:ce:ea:0a:
         d5:22:d2:e7:4c:2f:74:67:d0:b4:15:22:3d:bd:8a:43:51:9f:
         be:de:d4:6e:94:f5:9b:5d:68:9d:62:3a:bc:45:a6:b3:da:4f:
         7b:21:d5:19:0b:b3:a4:c6:e2:ce:cc:c9:cb:3e:63:60:46:63:
         03:e9:9e:6c:86:0d:66:18:43:17:e8:ca:8a:e1:30:b5:f6:5c:
         32:79:0f:da:a2:5d:e4:ad:73:3e:e4:dc:8c:ec:72:a1:57:a4:
         a7:e3:2c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----