Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39785d42-deab-45fc-836f-b97c88036ed9/877a3d50-9aeb-37bd-9079-3ab4d103c46d.roa
File:                     877a3d50-9aeb-37bd-9079-3ab4d103c46d.roa (raw, json)
Hash identifier:          bodfEhjUt4nKfj6lU33sVhmRFgXc7ZxL9Venc1IACiQ=
Subject key identifier:   E9:14:65:B5:DD:35:10:7B:3A:B6:69:77:CA:DB:00:56:1C:09:DE:54
Certificate issuer:       /CN=39785d42-deab-45fc-836f-b97c88036ed9
Certificate serial:       010D0C9F4328584854702E9EFCB49F2214D59300
Authority key identifier: 38:E5:F5:9A:7D:C5:20:BA:6A:A8:AD:B5:5B:59:45:CA:8B:D1:C8:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39785d42-deab-45fc-836f-b97c88036ed9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39785d42-deab-45fc-836f-b97c88036ed9/877a3d50-9aeb-37bd-9079-3ab4d103c46d.roa
Signing time:             Thu 26 Dec 2024 02:00:40 +0000
ROA not before:           Thu 26 Dec 2024 02:00:40 +0000
ROA not after:            Wed 26 Mar 2025 01:00:40 +0000
asID:                     31898
IP address blocks:        2602:f97a::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:54:70:2e:9e:fc:b4:9f:22:14:d5:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39785d42-deab-45fc-836f-b97c88036ed9
        Validity
            Not Before: Dec 26 02:00:40 2024 GMT
            Not After : Mar 26 01:00:40 2025 GMT
        Subject: CN=57c4e6ac-d9be-4b16-946b-f1159d0ab572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:b2:50:b4:e5:83:4e:4d:b1:00:67:fb:dd:1c:
                    cd:a6:cd:5c:a8:bb:64:26:6a:22:24:3a:24:14:a6:
                    1b:0a:33:db:8f:79:d4:ef:44:9a:95:12:86:89:1b:
                    75:ba:f3:a3:6f:91:51:5d:0e:30:02:87:7d:88:01:
                    eb:54:f6:1a:d4:1d:53:01:7b:12:20:46:53:66:8d:
                    18:c7:cf:f4:df:d9:bc:6d:72:86:80:e3:bb:2d:02:
                    2b:fb:9a:9e:b7:92:60:f1:f0:20:e3:bf:36:09:ea:
                    a5:6b:ea:97:b6:ae:72:ec:6f:e1:f0:b2:1f:ca:df:
                    1c:d0:78:1f:f0:67:86:ef:cc:f9:53:df:5c:95:c0:
                    27:16:3c:c3:76:27:8b:76:e3:b9:7f:53:51:6f:34:
                    aa:c3:09:5d:31:be:0e:81:76:9f:c2:1e:a7:ab:26:
                    42:77:b6:99:d4:76:f2:05:79:ce:1e:9b:59:32:5a:
                    e6:c3:45:f4:94:84:8c:df:36:a5:3e:3f:8a:47:e0:
                    5d:2f:37:ad:35:16:e1:c6:fb:f0:33:74:2b:3f:a2:
                    dd:6f:80:4c:ae:8b:18:20:43:9f:f4:82:e2:12:d1:
                    9e:3d:5d:c6:7f:69:db:2d:82:39:e0:23:b6:11:3c:
                    a1:8a:3f:dc:fd:ed:ad:a7:85:61:8c:a9:1a:8c:1c:
                    ca:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:14:65:B5:DD:35:10:7B:3A:B6:69:77:CA:DB:00:56:1C:09:DE:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39785d42-deab-45fc-836f-b97c88036ed9/877a3d50-9aeb-37bd-9079-3ab4d103c46d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39785d42-deab-45fc-836f-b97c88036ed9/39785d42-deab-45fc-836f-b97c88036ed9.crl

            X509v3 Authority Key Identifier:
                keyid:38:E5:F5:9A:7D:C5:20:BA:6A:A8:AD:B5:5B:59:45:CA:8B:D1:C8:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39785d42-deab-45fc-836f-b97c88036ed9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f97a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:d5:01:92:60:3c:51:03:f8:c7:ce:38:d1:2c:af:d7:c9:1e:
         a1:9f:e9:0b:fe:4a:4f:4f:47:40:71:e1:37:a3:13:99:10:a8:
         48:ab:6e:29:d9:0e:1f:54:6e:36:89:68:36:8e:4a:07:9a:9e:
         81:b3:67:ce:42:5b:b8:c9:b3:d5:fb:6d:fa:68:02:53:3f:ff:
         cc:23:5c:88:1d:84:34:39:34:26:d0:80:dc:8a:11:68:2d:a6:
         2f:62:d8:1b:b0:d9:ad:6b:47:49:77:d2:c0:6f:d0:d1:cc:d9:
         5e:97:7c:41:43:e0:1c:16:18:df:0d:d6:5d:c0:5f:cc:26:60:
         84:81:ac:e8:05:39:c9:c1:2e:15:3b:60:89:61:cb:e4:3c:56:
         f5:40:2a:f5:ff:e5:6f:10:a2:c7:fd:8a:91:21:20:69:7a:d6:
         b4:87:cc:0e:51:97:63:86:dd:e0:57:2d:9e:51:e6:66:85:3f:
         1d:5e:cd:8d:d4:06:c7:97:a7:35:ca:4f:b8:bd:3f:45:88:93:
         ac:7e:db:6e:e3:66:cc:1b:a9:e8:69:e6:ec:73:4f:d3:a5:3e:
         e6:38:59:d6:2b:bf:1d:5e:a9:14:a2:4b:09:3b:4e:77:cd:b4:
         9b:17:92:46:ff:07:c5:ff:3c:4d:1c:90:08:2f:e2:f3:c4:0d:
         d4:7d:67:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----