Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/63be276a-f236-3e0e-8030-c75791d606a5.roa
File:                     63be276a-f236-3e0e-8030-c75791d606a5.roa (raw, json)
Hash identifier:          jwKZD4MZArWnxxBR025qaBaxqhy7c/IVqEfkAAyOFpA=
Subject key identifier:   E8:E0:F2:5E:34:80:F8:7A:11:67:14:F2:15:54:35:72:28:1C:69:8F
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F432858485F9B014BEE0988F6019DF300
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/63be276a-f236-3e0e-8030-c75791d606a5.roa
Signing time:             Mon 30 Dec 2024 02:00:39 +0000
ROA not before:           Mon 30 Dec 2024 02:00:39 +0000
ROA not after:            Sun 30 Mar 2025 01:00:39 +0000
asID:                     54113
IP address blocks:        2607:8940:5390::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5f:9b:01:4b:ee:09:88:f6:01:9d:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Dec 30 02:00:39 2024 GMT
            Not After : Mar 30 01:00:39 2025 GMT
        Subject: CN=7a3b58ec-d5b5-46f7-8c27-4a7ffb509dde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:af:22:bb:5b:b1:6c:5b:14:3a:d3:ed:d3:80:
                    69:4c:6a:ff:c8:fc:10:13:cb:14:4b:f2:a8:d0:e4:
                    48:4f:77:3c:8c:5d:2f:06:52:7f:f4:25:d2:47:1c:
                    e4:ce:9c:9c:ae:b9:22:f5:94:1d:7a:92:ce:17:65:
                    57:df:7f:0b:de:dc:4a:66:64:15:c8:94:87:75:b8:
                    4a:84:49:e7:ce:8a:e0:36:65:9f:94:ff:f4:e4:3b:
                    ce:fd:2b:9d:69:54:74:32:97:62:12:ed:8b:05:b5:
                    5f:7b:22:c1:d2:d2:16:fc:ef:2e:53:68:67:dd:53:
                    ae:38:cd:c6:92:3a:1d:3e:98:97:1b:50:12:98:ac:
                    34:9d:f0:60:2c:1a:b6:48:ab:2f:3e:8d:ea:8f:a1:
                    43:10:60:27:12:79:64:05:92:cb:f8:d0:15:7e:49:
                    ed:01:e6:f1:dc:37:bc:db:00:d5:2c:ed:d1:3f:7d:
                    37:1f:c3:b2:49:e6:64:c5:2e:2f:9b:5f:90:0d:85:
                    dd:4f:06:df:69:10:27:cf:a4:6a:bb:c6:0b:3c:00:
                    28:0b:ce:43:b3:23:98:b7:fc:75:65:4f:00:5d:ec:
                    1d:4e:ed:66:6b:a8:11:0b:06:8f:fb:6a:43:f8:d0:
                    7e:e6:b1:56:48:17:51:3f:9c:7c:39:37:63:8f:23:
                    30:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:E0:F2:5E:34:80:F8:7A:11:67:14:F2:15:54:35:72:28:1C:69:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/63be276a-f236-3e0e-8030-c75791d606a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5390::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:b1:67:e2:a5:99:8a:27:ff:94:bc:a4:47:53:f1:df:a5:17:
         98:d3:5b:a1:33:4f:8b:ca:37:59:71:72:eb:7f:60:1a:2b:96:
         1d:53:46:07:fd:69:68:4f:b5:5b:be:c5:c7:ff:99:35:48:bc:
         c2:ba:83:c1:69:4d:1e:02:af:7e:70:f9:9d:66:91:38:ac:e2:
         21:85:e3:e6:9c:81:0c:25:95:fe:1d:0c:b2:1a:24:f3:a2:7f:
         5c:69:98:df:f8:0b:f0:e8:c8:e7:99:db:b7:9b:55:d5:12:3c:
         bc:9c:37:a8:7d:96:c5:ca:2e:d3:5e:2b:dd:87:16:3c:84:f0:
         80:55:20:d3:3c:99:e5:e3:3e:dc:09:26:5c:5f:e9:1c:f3:c3:
         81:5f:3e:c5:64:92:7c:8b:90:4d:b4:98:6e:b5:ce:a9:03:04:
         72:61:65:2b:3b:ff:49:c7:fa:3a:29:60:02:6a:2f:3b:d0:9f:
         fc:11:20:c5:a1:df:6b:57:7d:2e:d2:0f:18:33:69:b2:bb:97:
         33:19:50:a5:0c:4b:8d:3f:f5:74:a1:fe:e5:c4:bd:f0:28:e0:
         0a:93:32:a5:3e:56:9d:14:92:e6:99:55:52:73:df:12:df:b1:
         ba:5e:3e:e3:36:1c:a9:9c:f9:a6:3f:6f:2a:69:a5:8d:3c:cf:
         fc:cc:9d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----