Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6672c1f7-100b-38e7-b621-0a62898ff089.roa
File:                     6672c1f7-100b-38e7-b621-0a62898ff089.roa (raw, json)
Hash identifier:          tIannnnBLCyOykxQfAFpze3ZQ5DUwzJMUiuCYU1hyis=
Subject key identifier:   83:DF:4B:82:DD:9C:72:D2:A7:8B:4B:94:28:C1:76:D8:8E:81:00:41
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F432858485F9B0368F62318651A1A7280
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6672c1f7-100b-38e7-b621-0a62898ff089.roa
Signing time:             Mon 30 Dec 2024 02:00:39 +0000
ROA not before:           Mon 30 Dec 2024 02:00:39 +0000
ROA not after:            Sun 30 Mar 2025 01:00:39 +0000
asID:                     54113
IP address blocks:        2607:8940:4ab0::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5f:9b:03:68:f6:23:18:65:1a:1a:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Dec 30 02:00:39 2024 GMT
            Not After : Mar 30 01:00:39 2025 GMT
        Subject: CN=9e6c7a83-762c-404e-83e2-7d182b87fc0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:eb:a3:26:cf:b3:e7:9b:13:63:05:56:2c:bf:
                    aa:63:0c:6c:d7:39:e7:11:3c:fa:43:4d:90:b1:6f:
                    da:7b:c5:76:7a:67:3b:99:36:2d:0b:d2:5d:00:39:
                    7b:6b:62:bb:e3:49:e5:dc:94:7f:63:84:48:fa:0b:
                    06:bd:aa:27:c4:d8:2b:f1:d5:0e:b9:2d:4a:12:24:
                    73:71:fa:ed:38:99:5a:39:64:b8:48:a8:8e:c4:26:
                    1b:18:35:ba:e8:6d:6c:0b:19:97:98:98:98:3f:cd:
                    93:67:85:e0:ce:d4:43:29:37:b4:ff:25:d8:4e:27:
                    d4:27:6e:ca:a8:65:4d:3d:db:c8:f7:40:84:b7:eb:
                    4a:78:be:85:51:ab:1d:91:d2:5f:7b:63:3a:47:ba:
                    81:61:df:4b:b5:b5:d5:f8:2b:48:a6:74:0c:1a:8a:
                    e6:a3:64:d8:86:64:44:04:49:f6:c3:ea:00:1e:f8:
                    23:27:86:a4:47:ff:c3:90:31:cb:ed:cd:cb:d2:c2:
                    bc:f6:df:4e:4f:2e:a7:9b:2b:0b:d0:c9:bf:cd:f4:
                    11:1b:9b:2c:4a:88:84:51:35:41:ce:ad:62:2e:a7:
                    73:6e:03:ad:72:9a:b0:87:b8:8b:5d:7c:1f:8f:ec:
                    7a:44:0d:85:ed:af:04:1c:e5:75:a8:d1:91:13:46:
                    db:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:DF:4B:82:DD:9C:72:D2:A7:8B:4B:94:28:C1:76:D8:8E:81:00:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6672c1f7-100b-38e7-b621-0a62898ff089.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4ab0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:81:8c:5f:0e:ab:76:cb:92:a2:70:f6:8a:47:ca:04:2f:2e:
         49:ea:dd:d1:19:e0:76:3d:7d:58:4d:4f:28:00:25:64:10:c4:
         af:fd:eb:1c:2a:28:2a:55:a2:e5:a0:a7:42:cb:73:55:a3:79:
         79:78:e1:56:71:c5:7b:3e:f6:e3:80:71:6e:c4:aa:96:2a:28:
         73:f1:32:01:88:8c:fc:d8:2d:bf:8b:1b:8a:ec:50:45:61:1d:
         d1:10:f7:f7:45:6c:5c:52:49:f9:ee:23:c1:9e:9a:09:51:ca:
         09:b7:b7:51:f6:2f:55:bf:32:55:ba:6a:8b:6b:c0:50:35:b6:
         b8:42:22:ea:7c:ed:f6:25:2c:b7:11:bb:10:7f:59:b6:67:45:
         01:5b:2e:ab:59:87:0b:ae:a8:27:ce:8c:58:fd:05:41:4b:10:
         9d:b5:51:f0:76:e7:7a:2f:13:6a:26:5e:38:c4:e9:63:80:dd:
         c1:70:c8:74:2d:eb:61:07:70:95:03:7a:9d:4e:64:28:88:aa:
         fa:cb:b9:32:cc:5f:80:4a:64:fc:7a:aa:2d:e2:04:0a:7b:eb:
         ae:13:aa:09:54:6f:d3:41:70:3b:28:13:29:fd:1f:d8:ba:45:
         f0:91:ad:c0:82:7c:d4:12:b2:b7:78:6f:90:4c:4c:36:c7:83:
         3a:89:70:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----