Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ee98796c-4bca-31b9-9f1f-de4315577d49.roa
File:                     ee98796c-4bca-31b9-9f1f-de4315577d49.roa (raw, json)
Hash identifier:          8Ch31sNSSDaBPDgP1t5DDokD0ENt9VeGLpsjZjVfHMM=
Subject key identifier:   9B:F8:41:29:8B:D5:DE:A7:62:F7:71:0D:8B:A9:10:04:3B:E7:80:AE
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F432858485F9AF7096EBA0C99D95D4180
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ee98796c-4bca-31b9-9f1f-de4315577d49.roa
Signing time:             Mon 30 Dec 2024 02:00:39 +0000
ROA not before:           Mon 30 Dec 2024 02:00:39 +0000
ROA not after:            Sun 30 Mar 2025 01:00:39 +0000
asID:                     54113
IP address blocks:        2607:8940:4a50::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5f:9a:f7:09:6e:ba:0c:99:d9:5d:41:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Dec 30 02:00:39 2024 GMT
            Not After : Mar 30 01:00:39 2025 GMT
        Subject: CN=1caa2ee2-e47c-437b-93ff-f45ddb075cdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:df:62:b7:82:72:00:c2:f6:ef:e8:77:c8:24:
                    55:a6:39:6c:3e:97:84:13:8e:b1:ba:b7:3b:d1:e6:
                    5e:87:33:12:fe:a5:68:29:fd:ef:d7:76:68:2a:f0:
                    d1:6b:e4:39:00:91:1f:64:f2:f2:e7:ee:69:1f:f7:
                    4c:15:f5:80:9a:76:42:ec:d9:d7:c0:a6:be:cc:6a:
                    d5:c5:4c:54:75:7a:8c:23:1e:8c:16:59:a6:e4:53:
                    e6:57:24:ee:50:bd:53:ec:30:0b:79:c8:ef:ca:a8:
                    e7:f5:6e:e1:c1:89:a0:c1:68:e1:73:6d:2c:ed:70:
                    52:7f:c7:bd:65:5a:1d:a2:22:4c:f4:4a:35:2f:5c:
                    fd:32:e7:6e:48:97:0a:bf:f7:19:45:df:aa:cc:93:
                    65:11:7d:14:38:6f:6c:19:4c:ff:31:ba:ac:4a:b5:
                    8c:92:d2:e6:3c:57:69:44:19:18:19:92:bf:95:20:
                    33:9d:6d:35:94:43:e2:9e:71:c3:6f:c3:72:e4:d8:
                    85:90:82:90:69:f0:f2:b5:14:44:44:fc:0e:26:5c:
                    bc:82:71:73:9a:fa:3e:12:bd:ba:e5:3b:77:de:24:
                    89:1a:ee:d1:99:35:04:ec:a5:08:fa:30:03:75:4c:
                    ae:57:a0:f0:ae:12:62:25:db:ab:78:30:43:8c:b7:
                    9c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:F8:41:29:8B:D5:DE:A7:62:F7:71:0D:8B:A9:10:04:3B:E7:80:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ee98796c-4bca-31b9-9f1f-de4315577d49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4a50::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:b8:1d:cd:07:b1:a3:77:3c:57:8e:b6:d1:42:1f:9e:0b:54:
         95:3b:30:4d:b4:a8:15:3a:99:3b:bb:48:9a:c9:26:d8:82:97:
         b7:dc:58:66:9b:45:b8:a3:af:29:7a:47:f4:cf:b8:d5:85:94:
         71:a4:f9:1b:5e:0a:6b:ca:ec:67:55:78:18:5b:ff:79:3f:49:
         76:27:40:e4:9e:d6:34:75:5a:2e:2f:38:ee:56:8d:24:72:dd:
         4a:16:7b:b9:f2:97:7d:e6:2a:b7:d1:fb:7d:97:de:1c:5a:1a:
         34:b5:b5:fa:9b:a3:4b:cd:b8:ce:d4:cd:b0:47:45:4c:4d:04:
         f0:60:a7:23:3f:b2:ef:00:3c:1c:bc:25:82:3c:89:a4:ba:4d:
         e9:52:ba:d8:95:08:26:b7:4a:54:20:a8:e6:19:ba:8f:b3:9b:
         4e:3f:66:9c:d6:2c:aa:7e:81:13:51:41:19:3a:3f:01:d7:e5:
         21:a9:b8:23:74:ae:43:67:75:30:6d:1a:10:01:8e:4b:01:f7:
         4b:82:a5:80:e4:2b:bf:c4:d3:d8:1f:58:e7:52:3d:c5:61:70:
         9d:e8:12:91:4d:6d:68:e5:97:c3:b4:03:81:31:05:bd:67:b8:
         cf:00:9c:21:9a:f9:df:69:6f:f2:df:a3:d0:e3:36:7e:2f:a7:
         92:93:1e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----