Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7cde927e-30dd-3cea-ade4-ca2c969dab06.roa
File:                     7cde927e-30dd-3cea-ade4-ca2c969dab06.roa (raw, json)
Hash identifier:          Ao2XZLWuJ41WPQhZmkJk3zquXWhuVFNxqmw5FOGFfxo=
Subject key identifier:   55:C0:97:00:CF:AA:4F:17:C5:98:67:BA:B4:76:F9:D9:FC:3F:3A:F5
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F432858485F9AF302634DA4E211AB7000
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7cde927e-30dd-3cea-ade4-ca2c969dab06.roa
Signing time:             Mon 30 Dec 2024 02:00:39 +0000
ROA not before:           Mon 30 Dec 2024 02:00:39 +0000
ROA not after:            Sun 30 Mar 2025 01:00:39 +0000
asID:                     54113
IP address blocks:        2607:8940:5440::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5f:9a:f3:02:63:4d:a4:e2:11:ab:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Dec 30 02:00:39 2024 GMT
            Not After : Mar 30 01:00:39 2025 GMT
        Subject: CN=71941293-519d-4468-ba22-2d5ffb9ad3d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:50:a5:6e:4f:86:52:68:bc:4d:85:fd:14:b6:
                    87:f0:47:3e:00:98:41:20:57:bf:05:f0:25:54:4f:
                    b8:ac:ea:39:4b:d1:cb:d1:3f:26:9c:81:80:7c:7f:
                    20:fd:2e:d9:c1:da:ac:b4:69:8b:89:23:26:a7:32:
                    01:ee:1f:c1:18:01:a0:55:87:27:89:79:04:b8:05:
                    33:e3:f1:5c:0b:c4:a7:39:41:4c:f5:fd:c4:5e:d3:
                    29:14:60:9a:25:15:db:46:c2:a2:cd:1e:2f:44:84:
                    1e:23:c1:a8:a6:0b:84:e8:20:ea:62:3a:2e:b8:a2:
                    dc:25:6c:a5:9f:b3:7c:ec:bb:78:b4:86:ba:79:c6:
                    ee:38:ee:26:88:49:8e:b3:a8:f3:c4:5e:ea:49:0f:
                    b5:66:56:e4:68:db:b5:d7:d9:c9:00:5b:10:80:92:
                    c0:94:f6:95:da:16:d5:92:03:d1:60:5d:b2:da:2d:
                    7e:7c:86:af:8f:18:dc:d0:7b:c7:02:ea:a9:40:13:
                    ab:d5:5e:fa:f9:e5:88:ab:b9:53:86:9b:09:04:23:
                    95:61:f3:bf:15:44:20:2f:80:42:cb:c5:ba:f6:55:
                    ff:25:88:1b:e9:a4:a6:ba:44:bb:94:27:bd:22:db:
                    ca:d6:56:c1:de:df:25:9e:e5:2c:d1:01:3c:90:d3:
                    f8:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:C0:97:00:CF:AA:4F:17:C5:98:67:BA:B4:76:F9:D9:FC:3F:3A:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7cde927e-30dd-3cea-ade4-ca2c969dab06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5440::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:e3:b2:13:50:42:6b:a3:57:46:a0:61:6f:7c:17:2f:b6:ca:
         48:3b:1e:da:c4:ad:6d:1f:0e:f5:ca:8e:80:f2:c8:7a:c3:31:
         8c:30:5c:c4:a6:95:ea:de:51:30:ef:8c:12:dc:0d:83:37:1b:
         69:b8:9f:83:1a:b7:e6:12:72:94:53:15:97:f8:82:d3:64:35:
         e7:dd:75:53:5e:af:90:fb:01:4a:8a:5c:ba:db:5b:50:66:dc:
         de:fe:b6:a3:36:d8:02:dc:1c:a0:d8:17:88:80:24:10:c5:99:
         5b:57:c1:32:8b:40:94:6a:73:c9:65:f8:39:e2:0a:74:e5:c8:
         be:00:45:90:90:37:66:2b:b2:97:37:14:75:c8:cc:87:8b:eb:
         9b:1c:58:0a:61:c9:76:1c:da:4f:d3:b7:27:ad:69:30:2d:3a:
         a4:50:cc:bb:72:41:99:71:f1:84:23:32:8e:56:aa:ca:c1:0c:
         f1:01:c5:f2:b0:e3:14:b9:e3:82:c0:24:ab:68:13:49:4c:ba:
         72:a6:3c:a4:a0:ed:6a:59:9f:37:c8:a7:8c:9d:7a:a0:82:67:
         1a:48:2a:46:f8:06:d9:42:cc:53:00:c2:e1:1a:ef:0a:3b:cc:
         09:09:52:f8:b5:27:b6:b1:62:7e:9a:d9:13:5f:8d:ee:37:18:
         7a:22:95:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----