Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0c29d5bc-55a4-35fe-bd2d-931ef6465871.roa
File:                     0c29d5bc-55a4-35fe-bd2d-931ef6465871.roa (raw, json)
Hash identifier:          UmAFLz2Z5/TVkx0OAQP0hb//kELlJq/d661aFRBrDK8=
Subject key identifier:   8C:90:46:C8:20:B6:94:FA:2F:7B:48:05:31:69:C3:07:38:A4:21:86
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F432858485F9B095AA5039C6C090A3800
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0c29d5bc-55a4-35fe-bd2d-931ef6465871.roa
Signing time:             Mon 30 Dec 2024 02:00:39 +0000
ROA not before:           Mon 30 Dec 2024 02:00:39 +0000
ROA not after:            Sun 30 Mar 2025 01:00:39 +0000
asID:                     54113
IP address blocks:        2607:8940:4a10::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5f:9b:09:5a:a5:03:9c:6c:09:0a:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Dec 30 02:00:39 2024 GMT
            Not After : Mar 30 01:00:39 2025 GMT
        Subject: CN=535c98d5-8532-499e-bbd2-939f63b221c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f3:dc:c2:7f:19:a4:ca:41:ef:d6:81:f2:a3:
                    fe:62:3e:0d:69:ca:c9:f6:f7:3d:9d:b2:0b:eb:33:
                    e8:dc:df:05:49:fd:42:1e:87:5f:d2:a6:e3:fa:63:
                    8e:fb:a1:37:ba:01:26:23:c2:fb:f3:63:e9:17:5e:
                    bb:db:dd:dd:0d:e6:82:4d:05:0c:60:f0:15:fe:9b:
                    4d:70:b3:34:3d:11:cf:be:eb:78:e7:02:8d:56:a6:
                    08:c0:fb:bf:b8:23:0a:57:ae:34:97:45:7c:ce:d7:
                    8f:01:fb:a2:59:86:ea:33:69:b4:4a:39:19:fc:74:
                    e8:6d:df:b6:b4:64:d1:93:25:c1:33:61:48:f7:6b:
                    66:5b:59:c6:56:77:ac:be:8c:ec:50:54:85:b7:30:
                    49:d7:aa:ba:52:91:b4:74:34:ec:41:99:52:2b:18:
                    ea:79:4c:e7:87:6d:96:36:13:dc:b9:11:b0:a1:3b:
                    17:01:66:59:dc:ff:6a:cf:6b:e9:75:e4:d0:af:08:
                    08:06:41:9d:04:04:b6:13:aa:c5:df:1c:a4:5b:07:
                    5c:1a:ba:37:73:27:df:78:cd:ff:b0:f4:31:99:17:
                    24:b4:6a:44:5e:aa:8c:5e:99:77:5b:f5:a1:aa:36:
                    c3:0f:49:0f:ec:84:5b:0c:a4:50:33:8f:34:28:9b:
                    c7:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:90:46:C8:20:B6:94:FA:2F:7B:48:05:31:69:C3:07:38:A4:21:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0c29d5bc-55a4-35fe-bd2d-931ef6465871.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4a10::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:e1:e8:1e:3e:26:f8:0c:f9:18:14:8a:fc:25:37:15:16:aa:
         63:5d:d4:7f:1d:30:cf:03:e8:dc:a0:e1:36:c0:dd:b9:2a:d4:
         3c:39:27:3a:de:c9:bd:bc:c5:83:c2:ac:c2:92:6d:7c:b0:48:
         4d:cd:8b:5a:7e:ff:5a:45:d9:61:6e:31:6d:62:d8:2a:22:7c:
         32:28:58:da:25:9e:f6:64:49:1c:97:de:f0:1a:bf:59:ad:12:
         90:a9:16:92:33:8d:25:e7:b1:b2:a0:77:e8:d2:40:f8:ed:7a:
         a6:e1:ab:21:5e:20:f1:7c:6b:74:0e:73:d5:c3:2e:d5:68:3b:
         fb:09:1d:fc:89:09:9e:47:ed:72:f5:98:a2:08:aa:19:f9:36:
         d2:d8:95:31:2d:10:3b:12:89:d1:b4:2b:8f:af:a0:8d:c3:7c:
         7a:1c:c4:6a:85:f6:3d:ee:19:a1:6a:79:fa:05:c1:4f:30:39:
         f9:59:8a:80:ef:cd:86:9d:32:29:7f:ca:36:29:e4:89:c3:7c:
         1e:c1:22:78:f2:3a:93:d5:61:f0:d1:b9:a3:14:ce:12:45:75:
         97:3e:de:33:42:e3:0b:ba:90:e1:19:4e:47:60:27:d5:6b:fd:
         e1:8d:80:87:b4:8e:a5:1c:a0:22:d2:70:cc:3c:7c:30:b7:ea:
         fb:75:58:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----