Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363/6f3c546a-3c39-3e3f-85d1-a4b7965399d7.roa
File:                     6f3c546a-3c39-3e3f-85d1-a4b7965399d7.roa (raw, json)
Hash identifier:          bQ/jpxI1X4tKwW+CRk11RafvCC5fk20CghafJ+H3hbg=
Subject key identifier:   A5:F8:13:4C:AF:22:AF:45:F0:EE:BC:B4:EB:83:18:C7:7D:91:09:53
Certificate issuer:       /CN=c418ca6f-20c8-4f1b-b4f5-e4f805862363
Certificate serial:       010D0C9F43285848090FAC0FFD1EAA0402085710
Authority key identifier: 35:FA:88:74:F9:80:ED:CD:A6:42:D2:0B:1E:D0:B8:8B:EF:EB:D7:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363/6f3c546a-3c39-3e3f-85d1-a4b7965399d7.roa
Signing time:             Fri 29 Nov 2024 02:00:39 +0000
ROA not before:           Fri 29 Nov 2024 02:00:39 +0000
ROA not after:            Thu 27 Feb 2025 02:00:39 +0000
asID:                     13354
IP address blocks:        2606:fe80:10::/44 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:09:0f:ac:0f:fd:1e:aa:04:02:08:57:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c418ca6f-20c8-4f1b-b4f5-e4f805862363
        Validity
            Not Before: Nov 29 02:00:39 2024 GMT
            Not After : Feb 27 02:00:39 2025 GMT
        Subject: CN=2d8957ee-7e0f-4345-9093-6f849be088ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:6a:cb:3e:0a:3d:f0:f4:e8:fd:5b:61:55:24:
                    3f:1b:69:73:bc:76:d8:44:ec:f3:e7:d4:5d:14:e8:
                    29:2a:f1:b4:f4:5d:03:c0:90:52:55:49:cd:79:dc:
                    f0:d0:d0:12:4e:50:df:17:56:56:0f:e4:6f:2b:b0:
                    f6:38:f9:6e:5e:92:a6:15:59:20:bd:1f:43:8b:f9:
                    b3:cc:e6:b6:7b:87:32:f3:d0:78:fb:b6:ca:53:c4:
                    b2:b2:9e:95:46:51:15:20:2e:9d:79:6c:da:2b:93:
                    72:2a:d7:cd:8a:c4:6a:f4:13:e6:db:42:b1:ed:0c:
                    f4:f3:47:a9:0e:ef:75:32:7d:9e:00:57:db:df:95:
                    3c:6a:31:0b:77:c7:92:83:e5:e0:ea:06:32:f9:dc:
                    9c:d6:28:a6:f0:a7:44:78:4b:54:bb:17:b7:c9:b0:
                    65:9a:09:9f:bc:ca:75:43:56:12:6f:2b:85:7f:ab:
                    86:32:5c:fe:e2:9c:68:7c:0d:69:12:2c:86:4b:95:
                    92:ba:ae:12:de:61:4a:81:f7:4a:83:03:2d:3f:d1:
                    1d:64:96:f6:03:81:59:47:42:a6:53:f9:c8:f8:eb:
                    52:ed:ab:64:56:c7:83:9f:ae:f1:27:c7:31:0e:0b:
                    a1:8b:2b:a8:e5:68:6f:87:e7:2a:25:c1:67:35:c1:
                    1f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:F8:13:4C:AF:22:AF:45:F0:EE:BC:B4:EB:83:18:C7:7D:91:09:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363/6f3c546a-3c39-3e3f-85d1-a4b7965399d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363/c418ca6f-20c8-4f1b-b4f5-e4f805862363.crl

            X509v3 Authority Key Identifier:
                keyid:35:FA:88:74:F9:80:ED:CD:A6:42:D2:0B:1E:D0:B8:8B:EF:EB:D7:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:fe80:10::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:8a:2f:17:f6:71:46:51:36:e4:6c:dc:12:0f:07:85:b5:bc:
         62:8b:12:6b:16:69:1e:3a:da:58:09:38:18:2e:58:4c:50:33:
         bb:20:f7:36:58:a8:2a:3c:a7:1e:bf:6f:16:e7:93:f7:cc:33:
         2e:22:bb:72:2a:e8:1a:92:82:23:7a:c1:37:cf:82:e0:cf:1e:
         cc:94:81:cf:71:8d:a6:24:de:e8:93:38:bb:69:30:6f:97:f3:
         6f:4e:8e:b4:46:77:c7:31:9c:a4:f4:96:56:71:3c:de:73:2c:
         82:6b:51:a1:9b:4c:cf:5b:49:7b:bd:95:9d:68:17:91:74:24:
         98:fd:69:a6:c8:cd:cf:9e:12:fb:0d:ff:37:43:9d:7a:73:62:
         f1:c0:57:de:9d:8e:46:f7:2f:af:ab:20:92:6e:b7:51:e1:06:
         a8:60:3f:69:4f:cf:b1:03:24:95:b9:f4:bb:07:f0:a6:9c:4a:
         d8:f4:33:a6:09:1d:a4:98:2c:3e:12:02:28:17:82:a0:2d:af:
         b8:4d:85:ff:69:e1:40:ea:20:13:99:0e:41:64:22:68:5e:fe:
         75:f2:7c:33:0b:65:b7:3a:2a:c7:25:3d:e0:33:fd:2e:a0:f0:
         05:9e:a7:d1:ea:93:06:e6:93:25:3d:70:d0:da:44:82:71:80:
         2d:63:e9:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----