Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998/c006e98f-3ece-3757-bd45-4b1d0796733d.roa
File:                     c006e98f-3ece-3757-bd45-4b1d0796733d.roa (raw, json)
Hash identifier:          NxJXbUGWI3RT76t1Qjq/X4qHK+3tQcaw//ibZanhSWk=
Subject key identifier:   04:73:B5:C0:B6:03:C0:CA:2C:13:40:40:38:3F:52:BD:D9:CA:2B:14
Certificate issuer:       /CN=c0ae1cff-309c-40d1-9760-3a89a481e998
Certificate serial:       010D0C9F432858480BDA66FAFE41D33259856640
Authority key identifier: 3D:5C:C9:D2:DF:E0:F1:12:4E:09:59:BF:BE:75:A7:C9:39:BB:13:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998/c006e98f-3ece-3757-bd45-4b1d0796733d.roa
Signing time:             Sat 30 Nov 2024 02:00:39 +0000
ROA not before:           Sat 30 Nov 2024 02:00:39 +0000
ROA not after:            Fri 28 Feb 2025 02:00:39 +0000
asID:                     14907
IP address blocks:        2620:0:860::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0b:da:66:fa:fe:41:d3:32:59:85:66:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0ae1cff-309c-40d1-9760-3a89a481e998
        Validity
            Not Before: Nov 30 02:00:39 2024 GMT
            Not After : Feb 28 02:00:39 2025 GMT
        Subject: CN=160c6bd7-ae1a-45d2-8438-a2f14e291151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a9:c8:dd:23:39:d6:f3:be:19:4a:7d:57:1a:
                    08:13:b2:3a:f2:12:ef:3e:97:a0:80:89:fa:db:e9:
                    6a:e0:4c:1c:c9:3a:63:03:13:5b:cd:75:96:75:dd:
                    ff:1b:03:57:73:d9:47:b0:6f:98:a7:46:63:57:89:
                    fd:4b:4e:18:63:87:55:25:da:17:a1:4d:f2:7d:22:
                    7d:b2:f3:28:f5:6f:f8:86:b4:15:ba:45:1f:62:4a:
                    7d:e8:3f:26:52:92:5d:4e:37:ee:e8:46:e8:61:70:
                    02:f5:a1:da:ef:ba:01:60:42:a4:96:bd:32:a5:6d:
                    cd:4e:ae:25:27:87:32:92:4e:f7:8c:7a:0d:e0:c5:
                    d6:82:2a:b2:22:af:f0:bd:6c:cd:cd:4c:6e:65:65:
                    30:4b:74:13:a2:7d:cb:8e:eb:fd:e7:17:0d:4c:57:
                    ea:a9:a9:46:18:87:21:d0:85:be:eb:9d:05:1a:fc:
                    af:b7:34:72:fa:43:ca:24:a1:82:0b:03:d8:16:46:
                    0c:54:e7:0f:c8:11:85:70:c6:8b:82:90:5b:dc:fe:
                    aa:73:85:8e:bc:56:c0:3d:c9:0a:d3:c5:ea:a6:68:
                    ce:8e:11:fd:89:42:43:c9:27:9e:dd:da:f8:1d:40:
                    ed:09:ee:7f:34:0d:e6:eb:10:58:c7:64:c8:57:07:
                    9b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:73:B5:C0:B6:03:C0:CA:2C:13:40:40:38:3F:52:BD:D9:CA:2B:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998/c006e98f-3ece-3757-bd45-4b1d0796733d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998/c0ae1cff-309c-40d1-9760-3a89a481e998.crl

            X509v3 Authority Key Identifier:
                keyid:3D:5C:C9:D2:DF:E0:F1:12:4E:09:59:BF:BE:75:A7:C9:39:BB:13:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:860::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:d8:71:60:c2:f0:f9:fd:21:02:75:8e:0d:17:33:58:9f:53:
         39:c3:02:02:ae:aa:f6:22:49:09:0d:e8:5d:ad:39:db:b4:2a:
         dc:99:a1:d5:22:ea:94:50:b4:f7:d0:4b:97:25:d9:37:33:00:
         dc:2d:fd:1c:c2:79:d9:7c:c5:56:87:3e:88:e9:8f:23:1b:22:
         8d:db:8d:8d:04:fb:14:61:99:05:23:77:24:76:19:b0:4b:23:
         64:f2:d6:d0:e7:e0:c9:09:91:30:eb:dd:06:f6:09:8f:7b:e0:
         22:14:b4:0f:08:e7:4c:40:1f:75:0f:aa:04:c4:b5:34:6b:ae:
         dd:31:bf:ef:65:57:a5:f4:ae:18:89:38:10:61:fd:ef:b7:30:
         8e:6d:8b:3a:f0:50:4a:65:9f:ae:8d:cf:b0:79:6b:c1:8d:1e:
         dd:77:96:9c:94:b5:5f:7c:c4:33:5d:e9:b2:5b:36:9e:40:f0:
         1a:4d:62:3b:03:11:63:48:9a:dc:e1:76:2f:fc:1d:90:42:ea:
         f1:32:b0:7a:d3:82:a0:c5:29:7a:39:3b:b9:22:ca:76:99:34:
         b5:be:5f:66:36:a8:01:b4:c2:58:75:85:05:54:b2:1c:52:ef:
         6b:4f:74:f4:e4:a4:b8:ab:6b:36:7b:bc:0c:52:c7:64:e6:dc:
         25:72:4c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----