Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/63a2688f-9916-362f-afd7-09bfbd816217.roa
File:                     63a2688f-9916-362f-afd7-09bfbd816217.roa (raw, json)
Hash identifier:          pc22ig0l86pNpQWYAfM+l60dLMCpN+v48Xx3hPFJ7+o=
Subject key identifier:   88:21:BD:3A:E2:2A:61:52:66:07:45:D7:EC:69:36:EA:3E:87:FF:12
Certificate issuer:       /CN=d9f29a16-e7b1-40c8-87bc-34e2c5624862
Certificate serial:       010D0C9F432858487325AF10C63C33155B3E1A80
Authority key identifier: DB:FA:83:FE:6D:96:CD:CC:6C:DE:3A:15:B4:20:98:9D:63:D7:B6:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/63a2688f-9916-362f-afd7-09bfbd816217.roa
Signing time:             Mon 06 Jan 2025 02:00:40 +0000
ROA not before:           Mon 06 Jan 2025 02:00:40 +0000
ROA not after:            Sun 06 Apr 2025 01:00:40 +0000
asID:                     62654
IP address blocks:        2606:3dc0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:73:25:af:10:c6:3c:33:15:5b:3e:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f29a16-e7b1-40c8-87bc-34e2c5624862
        Validity
            Not Before: Jan  6 02:00:40 2025 GMT
            Not After : Apr  6 01:00:40 2025 GMT
        Subject: CN=faa76d02-9cd0-44b7-a9b2-80ed2d179062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a6:76:ee:c4:70:05:ef:8f:d1:aa:1d:23:ba:
                    3c:c6:67:33:54:2d:ac:b3:ef:eb:96:6c:92:bd:a9:
                    30:55:85:54:21:cf:98:5f:f5:7f:8e:37:cb:a1:f6:
                    eb:fc:e1:02:35:b0:85:ad:f4:9e:f9:c6:ce:5e:5c:
                    00:1a:aa:bf:ec:ab:fe:f3:e8:e8:b5:4a:23:93:04:
                    19:9d:48:1f:df:69:ee:4d:17:3c:d8:89:f2:78:09:
                    9a:8a:95:3c:98:7c:52:58:78:98:21:32:43:f1:29:
                    ce:63:c9:cc:55:d7:da:dc:ed:33:c9:86:06:7f:83:
                    3d:31:e3:ce:95:f0:a7:aa:5c:ab:ce:d4:24:d2:4d:
                    d3:e9:c7:46:61:d3:34:1f:82:a6:14:c4:aa:2c:81:
                    4d:79:97:9e:d9:08:41:d0:18:cb:1d:70:73:ac:e4:
                    16:e1:73:38:6a:9a:2e:b5:9e:10:1c:e4:35:03:4d:
                    25:62:e5:97:41:01:dd:73:88:7d:9b:9b:23:7a:8c:
                    41:e1:4d:31:20:fc:3f:ba:f7:63:d6:0c:04:85:52:
                    2d:33:05:ed:f1:9b:13:50:36:dd:2c:52:6f:ff:5d:
                    2b:e4:c5:13:3d:1a:a7:31:e5:8b:5c:fe:c2:f3:c1:
                    c9:7d:0f:7f:d9:89:5f:f3:2f:79:89:14:f6:bf:7f:
                    93:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:21:BD:3A:E2:2A:61:52:66:07:45:D7:EC:69:36:EA:3E:87:FF:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/63a2688f-9916-362f-afd7-09bfbd816217.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.crl

            X509v3 Authority Key Identifier:
                keyid:DB:FA:83:FE:6D:96:CD:CC:6C:DE:3A:15:B4:20:98:9D:63:D7:B6:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3dc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:a2:39:fd:81:4b:e6:d8:1c:06:f6:1a:a1:24:c8:1c:ff:f7:
         98:cd:5a:95:85:ff:6d:e4:66:ef:43:01:df:10:69:af:81:b7:
         1b:33:5f:7a:ce:87:78:3c:38:f3:a9:ef:1a:6c:d9:b0:f6:8d:
         57:cc:a1:91:f8:36:5c:1d:de:0e:25:4c:a9:12:99:a8:67:09:
         62:51:34:07:42:99:11:d7:8e:1d:35:30:07:31:cd:95:3c:1c:
         e1:28:c0:d8:7a:b3:ab:aa:b4:a0:86:70:66:d8:35:88:83:75:
         70:7a:4f:e0:da:7c:6b:77:01:8f:68:c3:d5:09:d3:08:a8:29:
         0c:fd:03:2f:49:e0:f4:fb:76:4a:ca:be:d6:ad:de:51:00:75:
         ac:01:c4:99:38:e5:5c:2c:56:86:5f:59:ab:b5:7c:4c:04:ed:
         df:21:44:d3:96:91:e4:0b:b6:7b:36:20:d3:3b:8c:1b:6d:b1:
         2b:c6:f7:c1:22:67:22:e0:18:76:c7:01:a7:46:83:15:36:7f:
         13:c8:ff:7c:73:55:0c:0b:73:f6:c6:bc:03:e2:71:59:f2:63:
         45:44:dc:f8:3a:1d:29:23:03:cb:4b:cc:df:26:3b:dc:64:bc:
         e9:04:ed:14:d4:e0:49:42:6a:37:f3:24:af:55:ac:16:28:cc:
         ed:0b:08:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----