Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182/17c97364-2d34-322a-90a6-f80a73c7f5ac.roa
File:                     17c97364-2d34-322a-90a6-f80a73c7f5ac.roa (raw, json)
Hash identifier:          YX24rRUrgK1tCw2Zg1K1JtZh74bNKcGPe5+awh2zcwc=
Subject key identifier:   55:57:C5:A9:9D:A2:9A:05:CA:EF:6B:17:11:62:AF:8E:E8:B4:F8:19
Certificate issuer:       /CN=0845ba3b-9fc2-40fb-b74c-445ace8b4182
Certificate serial:       010D0C9F432858487FB5E5556858C99DE8A1A500
Authority key identifier: 6B:84:42:69:D7:70:DD:26:8A:F7:B3:53:16:F4:AE:16:1C:63:F0:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182/17c97364-2d34-322a-90a6-f80a73c7f5ac.roa
Signing time:             Fri 10 Jan 2025 14:00:51 +0000
ROA not before:           Fri 10 Jan 2025 14:00:51 +0000
ROA not after:            Thu 10 Apr 2025 13:00:51 +0000
asID:                     397423
IP address blocks:        2602:f94c::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7f:b5:e5:55:68:58:c9:9d:e8:a1:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0845ba3b-9fc2-40fb-b74c-445ace8b4182
        Validity
            Not Before: Jan 10 14:00:51 2025 GMT
            Not After : Apr 10 13:00:51 2025 GMT
        Subject: CN=39019d4f-2b07-4e3c-8686-d1e3bf2c684e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9f:8d:a0:ac:54:5f:0c:0e:c1:7c:15:f9:0a:
                    7e:68:05:eb:81:ea:3f:8e:df:fe:e6:a5:40:b4:c6:
                    55:d0:f7:48:e9:bc:ca:d4:e4:25:43:ec:ce:50:ef:
                    e7:de:21:26:04:a4:f1:ba:5f:f2:99:53:aa:ea:3f:
                    16:d8:5b:a2:63:6b:2f:f8:bf:28:3a:db:25:4f:a3:
                    2d:7d:fd:b0:eb:6f:1a:cc:9e:9f:ca:8a:be:b3:80:
                    a6:9b:14:b0:e0:ee:68:86:25:b5:7e:78:16:7b:5c:
                    fe:44:85:1c:35:30:38:56:98:b8:66:e3:d5:fb:be:
                    4e:1e:02:16:2b:da:3d:5b:cb:c3:bf:e6:93:28:96:
                    c5:6d:ed:06:25:05:57:ef:b1:2c:11:b2:43:4a:c3:
                    55:1e:4e:9e:5e:99:7c:03:5a:45:20:6c:25:54:ec:
                    5e:25:23:d7:9c:03:e3:6c:3a:9f:64:76:9b:06:18:
                    81:1f:0d:d9:a2:92:a7:f2:26:98:72:43:78:16:e8:
                    9d:f4:58:69:09:07:79:a4:56:a1:79:4e:a9:ad:24:
                    90:cf:3c:ee:95:a2:37:64:1f:92:19:05:d5:1d:53:
                    4c:46:38:5d:da:a4:48:8a:9b:b7:2f:79:18:7c:90:
                    8e:ae:aa:b9:9e:e1:74:26:f2:97:bf:3b:44:65:10:
                    26:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:57:C5:A9:9D:A2:9A:05:CA:EF:6B:17:11:62:AF:8E:E8:B4:F8:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182/17c97364-2d34-322a-90a6-f80a73c7f5ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182/0845ba3b-9fc2-40fb-b74c-445ace8b4182.crl

            X509v3 Authority Key Identifier:
                keyid:6B:84:42:69:D7:70:DD:26:8A:F7:B3:53:16:F4:AE:16:1C:63:F0:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f94c::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:6c:d0:4a:21:a9:d1:0a:64:04:83:cf:a9:63:29:f3:60:84:
         d4:49:67:d1:6b:a0:2c:a3:3a:71:5b:70:18:4e:a6:fe:26:5c:
         73:a9:5f:34:49:71:43:7f:c8:3f:e9:eb:d0:bf:a0:31:89:65:
         1d:2c:04:3f:9d:34:cd:e9:dc:6f:b6:37:d8:ae:3c:35:e9:a4:
         17:e9:10:19:d3:8d:2b:a4:7f:64:68:b1:46:48:34:24:e7:5f:
         d9:32:c9:82:f3:1d:9a:62:29:9d:c0:7f:c9:36:74:f5:70:41:
         93:fb:e5:fb:10:d3:89:40:d4:16:b2:a3:23:09:68:d8:21:a3:
         d8:9f:9d:2e:f5:95:ef:33:83:c2:a6:d7:4f:e2:67:86:5b:6a:
         cc:f5:66:94:71:42:58:86:ed:15:07:32:31:1e:66:86:fe:9b:
         02:f9:0b:6a:1f:ee:a1:0b:16:95:08:60:9f:e6:3e:07:9e:b9:
         16:f0:cf:8a:db:3d:70:85:55:37:5e:c3:14:0a:e3:12:a7:a4:
         f8:dc:10:d8:f4:11:74:cb:b2:1b:ed:02:56:f9:a3:7a:f8:53:
         65:fc:f3:45:ec:7f:f7:39:14:65:2b:c1:67:66:1f:d2:e9:a0:
         32:09:a2:0b:17:2d:87:1f:19:46:67:24:19:c2:8e:69:89:bd:
         d4:ec:df:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----