Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc9d2aef-2dd9-4387-b47c-98bb910e52fe/2278ed48-ebd6-3528-b97b-a1b2aea80dab.roa
File:                     2278ed48-ebd6-3528-b97b-a1b2aea80dab.roa (raw, json)
Hash identifier:          msNQk9gFqKMgGRp+3MsH9c1kps1jt2OC2+eCAfWiFos=
Subject key identifier:   57:43:D0:88:F1:06:8F:21:E1:7A:0C:32:FE:BB:99:FF:D2:07:16:CB
Certificate issuer:       /CN=bc9d2aef-2dd9-4387-b47c-98bb910e52fe
Certificate serial:       010D0C9F43285847E4C4A749097521E41E606900
Authority key identifier: 5F:0C:BB:1B:2F:ED:25:26:3B:25:9E:EF:CB:2B:49:E2:EB:09:40:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc9d2aef-2dd9-4387-b47c-98bb910e52fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc9d2aef-2dd9-4387-b47c-98bb910e52fe/2278ed48-ebd6-3528-b97b-a1b2aea80dab.roa
Signing time:             Sat 16 Nov 2024 02:00:28 +0000
ROA not before:           Sat 16 Nov 2024 02:00:28 +0000
ROA not after:            Fri 14 Feb 2025 02:00:28 +0000
asID:                     20206
IP address blocks:        2001:504:13a::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e4:c4:a7:49:09:75:21:e4:1e:60:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc9d2aef-2dd9-4387-b47c-98bb910e52fe
        Validity
            Not Before: Nov 16 02:00:28 2024 GMT
            Not After : Feb 14 02:00:28 2025 GMT
        Subject: CN=35987b52-2148-4596-803f-ef4ba568cc2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:01:fe:db:03:fc:ed:fd:1a:55:53:fa:17:f3:
                    25:05:ff:cb:ef:ce:92:85:3a:e1:2d:e0:ad:55:81:
                    c5:b5:16:a0:aa:78:d3:26:66:83:d2:c0:7a:3c:13:
                    96:41:6d:0a:00:39:bd:48:60:5a:8c:db:2c:4a:4f:
                    f2:07:86:f6:17:b9:59:f0:d2:fd:e0:d9:1f:ea:46:
                    6f:2f:75:56:34:bd:26:dd:03:0d:4e:4c:d3:59:fa:
                    e2:12:fe:bb:0e:55:22:73:62:b8:72:19:d0:11:30:
                    24:1a:fc:8f:5a:e7:1b:30:37:74:a1:3f:fd:af:0c:
                    03:d7:3c:89:a6:1a:a4:4b:96:c4:8e:cb:df:79:52:
                    0a:72:04:40:76:21:44:82:ed:8d:c0:64:e5:ba:43:
                    9e:76:f0:4d:d3:29:48:1b:21:3e:7f:25:10:5e:0e:
                    c1:1a:69:76:88:c2:53:7c:9e:64:a0:f1:1a:12:03:
                    0f:24:6c:c6:b7:bb:58:d5:d9:df:8e:31:61:b3:93:
                    1b:7a:9e:9f:2d:19:4f:01:77:49:2c:83:30:18:a1:
                    0d:1e:84:f7:f2:ff:5d:ef:78:85:ef:c5:85:58:e1:
                    80:af:b8:dc:ee:f1:49:29:9b:ed:12:02:1c:dd:d3:
                    f8:7b:34:0a:29:b2:f4:e2:9f:47:ad:08:08:92:a5:
                    f1:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:43:D0:88:F1:06:8F:21:E1:7A:0C:32:FE:BB:99:FF:D2:07:16:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc9d2aef-2dd9-4387-b47c-98bb910e52fe/2278ed48-ebd6-3528-b97b-a1b2aea80dab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc9d2aef-2dd9-4387-b47c-98bb910e52fe/bc9d2aef-2dd9-4387-b47c-98bb910e52fe.crl

            X509v3 Authority Key Identifier:
                keyid:5F:0C:BB:1B:2F:ED:25:26:3B:25:9E:EF:CB:2B:49:E2:EB:09:40:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc9d2aef-2dd9-4387-b47c-98bb910e52fe.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:504:13a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:44:31:93:89:56:0e:a1:12:e2:25:28:fa:19:60:e0:1b:f0:
         e9:36:7e:3e:c3:2a:08:01:30:f4:01:1a:8a:a6:06:7a:81:45:
         0f:be:7e:24:56:01:4d:9e:8b:b2:93:a9:06:73:90:14:61:3a:
         c7:02:c8:93:f4:f0:9b:b6:4c:0a:8e:9a:80:d6:94:fe:a8:79:
         e8:5b:fa:08:1c:a7:46:2c:f0:78:73:42:39:c4:43:18:6a:e7:
         0d:63:59:dc:a6:a7:eb:c2:69:9b:99:b1:4e:90:e5:d9:c0:b8:
         66:31:fb:27:e5:07:2e:31:2d:ee:a0:6b:03:77:89:49:cb:49:
         ef:27:d9:14:3d:a6:aa:8f:23:4f:db:2f:7f:90:c9:bf:bc:05:
         b6:60:5b:fa:61:12:e3:a2:71:d9:58:0b:52:3a:2a:9d:62:46:
         fe:d5:1e:3e:a0:4d:fa:f8:df:a5:cf:7a:c2:d6:e6:d7:f3:d9:
         48:6b:10:e7:ea:3a:5a:57:da:21:69:08:cd:76:aa:e7:33:55:
         eb:84:9b:f3:f9:f6:01:7e:34:a5:9c:b0:06:08:61:36:99:72:
         9c:5c:08:8e:08:74:7a:a4:ed:65:7a:ec:d4:59:df:5a:bc:d5:
         99:cd:e7:fc:47:ee:53:47:0f:b4:4a:5a:b8:fe:a6:32:2e:95:
         a6:4c:04:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----