Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/16b79074-bbf7-3524-99af-0e785a088a41.roa
File:                     16b79074-bbf7-3524-99af-0e785a088a41.roa (raw, json)
Hash identifier:          YPEe8kQkvd2oSapKsNI7FC9QvWCvboIw17cd4KP3gmI=
Subject key identifier:   C6:F7:D4:2B:09:7F:3D:64:44:09:E7:0F:3D:86:AC:63:EC:78:DC:D2
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F432858485F9B04AFCEA06CC34D8E22D8
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/16b79074-bbf7-3524-99af-0e785a088a41.roa
Signing time:             Mon 30 Dec 2024 02:00:39 +0000
ROA not before:           Mon 30 Dec 2024 02:00:39 +0000
ROA not after:            Sun 30 Mar 2025 01:00:39 +0000
asID:                     54113
IP address blocks:        2607:8940:5370::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5f:9b:04:af:ce:a0:6c:c3:4d:8e:22:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Dec 30 02:00:39 2024 GMT
            Not After : Mar 30 01:00:39 2025 GMT
        Subject: CN=8a6bf79e-58cd-40b6-8c38-6fe0003335d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:7a:79:d1:fd:c8:d6:df:a4:93:82:52:be:cf:
                    71:a0:03:5b:82:60:08:f3:06:13:23:e1:32:22:c9:
                    b7:ab:bd:eb:fc:d7:ec:59:5a:28:d8:1d:13:92:4d:
                    3e:5f:9f:60:e3:fc:09:4b:ef:f4:1e:b6:18:a9:b8:
                    09:74:71:e1:47:ca:35:13:94:b4:71:88:fa:9f:d3:
                    93:95:e4:e2:86:b1:e9:9d:76:77:20:dc:66:d1:a4:
                    e2:12:14:23:6b:72:c0:64:b1:b0:56:06:4d:4e:53:
                    4c:58:ac:7f:76:58:ad:6a:27:f7:9f:f3:c6:ff:56:
                    21:68:48:67:23:22:b8:49:0f:3b:79:23:74:50:cf:
                    24:db:43:de:f8:6f:fe:c1:b4:4c:35:a0:e4:50:aa:
                    58:1c:f4:23:76:a9:27:f1:52:b2:b5:c5:7a:b6:9e:
                    75:5b:b8:ab:d1:39:69:46:78:f9:1b:4e:69:1e:0f:
                    e8:c9:0c:11:79:ea:c8:2c:74:09:f6:a7:c7:ba:6e:
                    8d:05:df:a0:f9:27:6b:42:d2:48:30:59:b2:12:72:
                    4b:7e:b6:b0:43:f0:26:5f:94:cd:e9:6d:00:09:ff:
                    ef:17:35:2d:32:45:bb:67:24:e8:a7:f1:f0:f8:22:
                    10:3e:fb:0a:da:b4:2f:1e:49:52:b3:e1:3e:aa:95:
                    cc:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:F7:D4:2B:09:7F:3D:64:44:09:E7:0F:3D:86:AC:63:EC:78:DC:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/16b79074-bbf7-3524-99af-0e785a088a41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5370::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:47:87:b8:fa:49:29:ba:30:73:39:d6:25:71:b5:e8:06:87:
         13:da:66:9b:8e:fb:a8:fe:2a:b4:12:88:e2:db:28:da:02:db:
         d1:11:cb:e6:d2:91:24:e6:7c:c5:74:af:87:71:e1:f8:05:b3:
         dc:b5:29:7b:1c:78:24:5d:9f:ee:0b:d6:3a:56:a2:6a:94:5f:
         d8:45:9d:8c:b3:16:3c:bb:e5:b0:86:9a:8e:2f:f7:bc:c8:27:
         2f:cd:8a:62:12:8a:17:e5:9e:73:27:82:39:eb:28:5b:ba:81:
         7d:3f:7f:31:c4:93:00:c6:3f:aa:0b:18:de:01:c9:1c:cc:af:
         ff:0b:14:8a:c5:9e:00:fb:cd:94:ce:9b:e7:98:75:f7:87:43:
         8b:ee:30:9a:15:84:3d:d0:a3:c3:52:f4:d3:f8:a6:58:68:56:
         97:f9:ea:99:ec:e2:a7:1f:d2:e5:3c:e2:cc:4b:f3:ce:cd:38:
         b9:43:6c:2c:85:a0:69:c8:d9:38:cc:36:57:12:ad:35:68:ac:
         5c:f9:d8:85:14:30:b2:82:ba:11:01:94:50:a2:c3:bc:3e:d4:
         ba:78:d6:79:a8:2b:5e:4f:98:9b:86:6d:92:08:c3:7c:d4:c9:
         ff:fc:81:a6:d1:38:79:02:dd:31:ee:0b:ea:0a:0f:e3:94:c0:
         2d:c2:71:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----