Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d0a847ae-2440-31d4-9ab1-dacd3b4c4f68.roa
File:                     d0a847ae-2440-31d4-9ab1-dacd3b4c4f68.roa (raw, json)
Hash identifier:          HYlX9KF+Swr7QcZbqYqiOSZTZxIJzzENrLW0YCuJ8pU=
Subject key identifier:   06:27:88:EF:13:9C:0C:D5:CD:5B:C4:E0:C6:3C:BE:4B:74:AB:1D:E8
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F432858485F9AF42581D5E0647FE01D80
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d0a847ae-2440-31d4-9ab1-dacd3b4c4f68.roa
Signing time:             Mon 30 Dec 2024 02:00:39 +0000
ROA not before:           Mon 30 Dec 2024 02:00:39 +0000
ROA not after:            Sun 30 Mar 2025 01:00:39 +0000
asID:                     54113
IP address blocks:        2607:8940:5410::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5f:9a:f4:25:81:d5:e0:64:7f:e0:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Dec 30 02:00:39 2024 GMT
            Not After : Mar 30 01:00:39 2025 GMT
        Subject: CN=f46126d3-bd39-43c4-bd8b-ea76b494dadd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:da:0d:3e:9c:b3:c1:45:0f:6e:ef:1a:99:63:
                    df:61:94:61:f0:b2:1f:a0:cc:23:ab:36:a6:e2:44:
                    13:1d:4b:ce:c8:45:19:f7:80:09:db:33:43:c1:3b:
                    a2:14:f3:e5:ce:61:d5:75:74:8e:e2:a6:6a:00:8f:
                    cc:3a:cc:25:c8:33:8f:30:3e:b1:e4:22:1b:b1:93:
                    4d:ba:84:36:06:a7:c3:27:b9:b7:50:c7:61:8c:c5:
                    02:0c:41:93:43:47:e4:1e:fe:6c:08:ac:56:68:9e:
                    af:0d:b0:b0:71:f7:59:cd:44:d4:cf:bf:84:ed:bb:
                    d2:35:ba:1a:9d:71:27:6d:fc:82:9e:c2:64:c2:12:
                    05:be:53:95:90:2a:1b:7c:a4:cb:eb:12:19:97:68:
                    e7:f3:77:55:54:19:8d:42:48:3a:77:44:f5:e4:c5:
                    66:64:42:2b:15:fe:19:ec:88:a6:91:8d:40:d3:20:
                    21:2f:99:c6:7a:6a:7e:b9:67:41:25:e4:b1:9b:3e:
                    68:41:69:33:65:46:f4:60:16:74:c2:43:bd:36:92:
                    70:33:0f:13:70:2a:b2:0f:b9:6a:1b:f2:9f:e7:e5:
                    9c:2f:05:08:9f:f1:77:31:74:28:b4:6e:bb:d1:c9:
                    2b:e2:f8:b8:10:b7:24:4c:05:ea:4f:d0:08:d6:60:
                    f9:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:27:88:EF:13:9C:0C:D5:CD:5B:C4:E0:C6:3C:BE:4B:74:AB:1D:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d0a847ae-2440-31d4-9ab1-dacd3b4c4f68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5410::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:b0:b4:c1:72:9c:09:a0:8a:c8:cc:d8:87:04:ea:13:86:27:
         6b:b2:eb:36:42:e7:0f:ac:57:17:c9:cf:1b:f9:fd:7b:35:9e:
         a3:71:38:f3:2a:83:33:f2:ab:1f:cd:a3:22:d2:e9:b8:62:7d:
         67:f8:7c:3e:23:75:53:a7:a0:5a:e8:32:08:5d:e7:fa:6b:6b:
         12:8d:a4:d4:68:6a:fe:9c:2d:3a:bf:e7:dd:3e:ce:03:e3:9f:
         00:72:13:1d:5f:ba:29:45:98:6f:a1:c4:57:e3:5f:ee:02:f9:
         95:25:17:46:23:4b:38:1a:53:d5:f6:c9:ed:2f:7a:84:45:15:
         b7:87:44:0c:17:70:af:a6:08:fa:70:47:89:a9:02:ca:dc:52:
         2d:1b:38:aa:00:a0:43:d7:cc:74:77:51:3d:2f:2b:c2:d7:2a:
         0b:65:6a:8e:ca:d3:5d:1b:71:27:14:33:c3:94:26:a4:9a:1f:
         03:8b:71:9d:61:b6:ca:32:8f:79:d8:cc:42:96:52:6f:4a:d4:
         0a:29:96:54:2d:ff:66:d1:9a:d8:aa:04:be:fd:f9:c8:48:32:
         95:93:bf:c1:fa:ba:83:08:67:f0:b8:b8:f4:59:c7:0e:17:2c:
         5f:cf:92:f4:80:25:b0:68:03:a2:60:b4:42:79:ac:6b:62:ad:
         9d:81:08:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----