Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/0d80c925-cfb7-322e-87ee-c2f5bad0f14e.roa
File:                     0d80c925-cfb7-322e-87ee-c2f5bad0f14e.roa (raw, json)
Hash identifier:          RWYm5wYgZLZksXWlZ3MyFWU9fDzfND4h9+vMJ6RLFDQ=
Subject key identifier:   AB:9F:03:80:AA:65:FC:0F:C8:2B:B0:E0:52:3C:77:60:36:50:9C:E3
Certificate issuer:       /CN=775d20f6-1cfa-483e-be0f-d15eb548f66d
Certificate serial:       010D0C9F432858483F803B8965AEBBCA9345D140
Authority key identifier: 1B:2D:AA:08:66:16:A6:E1:D8:3F:F1:B7:3B:2D:EC:74:7F:13:23:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/0d80c925-cfb7-322e-87ee-c2f5bad0f14e.roa
Signing time:             Wed 18 Dec 2024 14:00:52 +0000
ROA not before:           Wed 18 Dec 2024 14:00:52 +0000
ROA not after:            Tue 18 Mar 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        2603:5004::/34 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3f:80:3b:89:65:ae:bb:ca:93:45:d1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=775d20f6-1cfa-483e-be0f-d15eb548f66d
        Validity
            Not Before: Dec 18 14:00:52 2024 GMT
            Not After : Mar 18 13:00:52 2025 GMT
        Subject: CN=1e8132eb-7bbe-4448-89ea-ddb938e65c5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:55:18:76:50:2c:2f:de:89:89:79:46:34:f0:
                    cd:c9:5b:e6:80:20:71:6e:00:25:4d:0f:df:33:43:
                    ff:15:78:70:e3:13:a3:3d:de:5a:5e:2c:eb:e1:12:
                    31:9c:db:cc:7a:3a:38:a3:b6:67:2a:7e:1e:a1:47:
                    14:1d:bf:fd:c0:eb:e5:f0:86:fe:59:a1:ad:87:4e:
                    cc:21:0b:b5:8e:86:c7:f2:10:ed:b9:46:15:70:42:
                    4f:55:31:28:39:b5:1b:7e:a8:32:f1:ae:7b:d9:7a:
                    f9:50:a0:f5:03:12:9f:c4:86:03:f2:f6:b2:b7:30:
                    dc:da:fc:f2:f7:0e:93:a3:15:ba:28:6d:eb:af:ae:
                    49:03:33:2b:f7:bf:eb:85:5e:76:62:6a:00:0e:7d:
                    68:51:50:cb:cd:5e:b5:40:82:f9:0a:fd:17:0e:fe:
                    86:90:30:24:32:f3:2c:45:9c:57:a7:d7:a3:ce:3f:
                    50:f7:10:4a:24:1d:09:b8:d5:77:ba:90:2a:f4:96:
                    1b:c2:ee:6b:d7:e8:e3:73:d1:0d:e7:65:2c:79:1a:
                    7b:3f:cd:c0:99:28:0f:95:35:5a:45:d8:95:dc:a6:
                    8d:bd:0d:f9:74:5f:20:50:ff:89:a8:f7:05:3a:45:
                    d9:97:98:b8:7b:5a:11:cd:15:96:71:cc:48:ca:27:
                    9a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:9F:03:80:AA:65:FC:0F:C8:2B:B0:E0:52:3C:77:60:36:50:9C:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/0d80c925-cfb7-322e-87ee-c2f5bad0f14e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/775d20f6-1cfa-483e-be0f-d15eb548f66d.crl

            X509v3 Authority Key Identifier:
                keyid:1B:2D:AA:08:66:16:A6:E1:D8:3F:F1:B7:3B:2D:EC:74:7F:13:23:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:5004::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:6c:9e:46:05:5c:25:6f:f9:8f:88:24:84:3c:a4:a3:5b:1b:
         a2:26:8a:4e:5e:ad:13:6e:ff:54:5f:e4:75:27:99:7a:84:ea:
         f3:ae:a1:b8:f7:c4:b3:8c:6a:4e:8e:d3:33:69:a7:e8:9b:e6:
         3d:07:82:c9:f4:8f:9f:87:93:c0:3c:ba:b6:0b:10:a9:ac:ab:
         db:d1:39:3b:3f:3d:fd:8b:d3:6a:8e:e2:88:fc:de:6c:18:2b:
         d5:64:8e:0b:c7:9e:9b:93:df:d4:3b:32:be:a5:99:7e:90:a9:
         0d:09:74:d9:61:b3:8d:f0:69:de:e0:ef:3f:4f:d1:e7:1c:ff:
         f8:e0:c1:5c:34:09:48:03:eb:f8:9e:90:e7:f0:55:c3:4d:8f:
         96:8c:70:b6:95:69:48:f8:8a:d0:67:b2:cd:cc:30:94:5d:4f:
         80:bc:24:f4:8d:a8:9b:c2:c3:75:33:0a:17:6f:dd:78:54:6c:
         49:c8:d5:33:0b:e3:bf:b3:f2:76:a3:59:2b:10:d0:43:9a:63:
         0f:12:7e:5c:f5:d4:69:d1:02:93:79:0a:bf:12:02:53:4f:ad:
         3c:99:96:19:29:d9:2e:da:3e:31:f3:67:04:49:10:ce:09:03:
         da:4b:55:8e:33:a7:f8:f4:f5:a7:88:e3:00:4e:74:19:4c:f8:
         d8:2f:b1:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----