Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5eda57ea-8e0c-30fc-a06e-54e2d251e137.roa
File:                     5eda57ea-8e0c-30fc-a06e-54e2d251e137.roa (raw, json)
Hash identifier:          v99IICrqw74s0ldz1uC3GyLshyigPIe7eSqwp0x5b20=
Subject key identifier:   67:8D:15:48:43:1B:79:34:0E:F7:C0:5B:38:C4:4E:93:EC:A9:65:DE
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F432858485F9AFCEA4DC801BDD16B40C0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5eda57ea-8e0c-30fc-a06e-54e2d251e137.roa
Signing time:             Mon 30 Dec 2024 02:00:39 +0000
ROA not before:           Mon 30 Dec 2024 02:00:39 +0000
ROA not after:            Sun 30 Mar 2025 01:00:39 +0000
asID:                     54113
IP address blocks:        2607:8940:4070::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5f:9a:fc:ea:4d:c8:01:bd:d1:6b:40:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Dec 30 02:00:39 2024 GMT
            Not After : Mar 30 01:00:39 2025 GMT
        Subject: CN=08b8cf22-701a-4d27-bd71-a5b636a48aed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8e:4c:12:3f:8c:40:9c:cf:fa:b4:ae:b5:7d:
                    16:c8:49:6a:ee:64:d8:81:9e:9f:a7:20:e5:76:98:
                    05:f0:1d:71:97:f5:4e:01:f5:8d:22:85:23:77:31:
                    12:4d:37:b3:32:40:d6:43:cd:55:9e:73:d1:0d:83:
                    c4:7b:0d:ba:0c:1f:12:19:72:75:8e:8e:8a:e1:05:
                    72:55:d1:09:22:47:9b:25:23:3b:40:21:85:41:20:
                    6f:6a:c4:99:9c:9d:db:c2:b0:bb:d9:d2:88:62:fb:
                    db:c9:d1:bd:a6:3b:43:d3:e2:9f:b4:cf:3f:ae:64:
                    2f:e7:3c:3d:47:64:3c:1b:47:8c:5e:f8:a6:2c:b2:
                    38:f0:82:1d:ed:e6:ae:b7:94:96:0b:ed:c6:04:0a:
                    60:a4:f0:13:8d:98:77:7f:3e:92:2f:17:38:8e:81:
                    f0:55:9e:55:c1:5b:f0:9d:a6:a2:2d:ba:8d:2c:c2:
                    c7:95:fb:13:ab:27:6f:2c:b9:a1:c1:0a:75:b6:e8:
                    87:5c:2f:c4:e8:70:3a:40:68:99:2a:37:fc:18:8c:
                    74:78:6f:cc:d0:f3:55:1a:cd:03:c5:9f:8a:f5:60:
                    15:36:32:a1:53:19:b8:28:22:8b:59:59:34:51:f9:
                    cb:2b:6f:26:83:50:e9:92:f8:69:8b:56:06:0d:f2:
                    08:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:8D:15:48:43:1B:79:34:0E:F7:C0:5B:38:C4:4E:93:EC:A9:65:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5eda57ea-8e0c-30fc-a06e-54e2d251e137.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4070::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:17:4b:3b:ea:2d:72:1d:19:09:5b:bd:74:82:29:ad:14:69:
         77:88:cc:fe:e5:de:d8:80:e0:f4:b0:1b:4c:3a:f0:3b:01:3b:
         c5:d1:d3:36:7e:87:77:61:57:9b:39:ef:ad:43:65:d2:3c:3d:
         2a:f9:25:dd:16:6f:4b:c5:5c:f6:f8:03:42:a3:ed:33:c7:73:
         7b:72:1e:83:e2:22:d6:6c:ae:75:7e:b6:6a:52:fc:32:33:d9:
         d5:57:c6:1b:f6:ff:bf:22:8b:c5:85:8f:ca:76:b0:46:ca:00:
         2e:b0:b4:bf:97:99:64:e2:d8:72:13:e0:00:58:34:5f:5e:13:
         c6:1e:8e:c7:78:0e:2a:b4:81:19:2a:f0:ee:58:47:93:ae:9e:
         d9:cf:f3:06:5d:1f:22:6c:fc:f9:1b:8c:0e:0b:65:30:ce:b5:
         3c:32:97:b9:3c:66:c4:db:2b:a1:69:68:85:06:98:a0:63:95:
         7d:ef:ea:d3:5f:56:10:ef:b2:4f:7e:21:f9:a0:ed:ed:81:c8:
         cc:ab:b6:93:44:67:c1:33:c8:76:0e:75:a6:07:49:98:7d:6a:
         19:33:e7:b6:19:53:e6:43:9b:3a:99:81:7a:6a:f4:2b:b7:66:
         28:da:a7:ed:51:24:7d:5b:93:39:f3:6f:ed:33:5c:fe:c9:77:
         bf:66:89:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----