Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/a54bcebf-809a-3fae-9eee-fc77154f45f0.roa
File:                     a54bcebf-809a-3fae-9eee-fc77154f45f0.roa (raw, json)
Hash identifier:          5BNZ5hIzh7n/dgJQokeFqSTGdsvj5jrjyu8HhljCmt4=
Subject key identifier:   19:34:D9:31:A9:30:27:AC:5C:6D:F2:19:A8:42:19:69:E8:43:29:5D
Certificate issuer:       /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial:       010D0C9F4328584849456F8DD977B91F19E97820
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/a54bcebf-809a-3fae-9eee-fc77154f45f0.roa
Signing time:             Sun 22 Dec 2024 02:00:39 +0000
ROA not before:           Sun 22 Dec 2024 02:00:39 +0000
ROA not after:            Sat 22 Mar 2025 01:00:39 +0000
asID:                     9009
IP address blocks:        2607:740:11::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:49:45:6f:8d:d9:77:b9:1f:19:e9:78:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
        Validity
            Not Before: Dec 22 02:00:39 2024 GMT
            Not After : Mar 22 01:00:39 2025 GMT
        Subject: CN=bf4aea29-df34-4e88-b09d-77ef8516de6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d5:de:eb:c1:2a:f5:a6:8a:e5:dc:a9:50:a9:
                    3e:04:08:fd:02:80:75:c9:19:23:5b:cf:06:73:d2:
                    7f:b5:d2:8d:74:94:35:01:b1:ea:49:9f:06:b3:04:
                    ed:a6:77:18:5e:05:9c:94:81:72:80:c8:fa:ee:aa:
                    37:ae:54:b7:dd:b4:64:ce:de:19:30:c2:61:fd:34:
                    2f:a6:7d:a4:59:12:2e:b0:aa:2e:d4:c3:77:5a:48:
                    58:8b:fd:c9:4b:25:a2:90:da:50:8b:38:df:3a:6f:
                    f2:77:2a:cb:c6:74:10:36:7f:b6:21:e2:7f:bb:9d:
                    f4:3e:ac:cb:b2:10:79:cb:b7:0e:37:c5:50:c8:43:
                    85:25:36:83:b2:6d:75:20:1c:76:5c:eb:55:8d:dd:
                    92:d2:96:33:9e:00:7d:ea:27:cd:90:8c:b0:13:a0:
                    23:3e:cd:b2:83:b3:98:6b:87:2c:ec:dc:6a:a5:a5:
                    cc:2d:e0:3d:de:be:cd:ab:0d:90:8f:dc:e4:d1:60:
                    0a:dd:49:55:8a:20:36:a6:33:50:9f:c8:34:ac:b4:
                    a0:b3:01:ae:39:d2:6e:61:85:e8:aa:e8:a3:da:ec:
                    c6:fa:f4:90:da:4b:33:fb:a5:fb:9d:b3:ad:d3:f0:
                    67:9a:17:7b:ad:f7:42:3c:38:34:d5:28:2a:f9:a2:
                    a6:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:34:D9:31:A9:30:27:AC:5C:6D:F2:19:A8:42:19:69:E8:43:29:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/a54bcebf-809a-3fae-9eee-fc77154f45f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl

            X509v3 Authority Key Identifier:
                keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:740:11::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:f5:f8:26:a5:d1:0e:d1:46:ba:ad:c2:5c:ea:11:36:ac:dc:
         9e:a0:8f:a8:9b:98:f7:9d:43:29:46:88:b9:17:36:33:0a:40:
         56:42:37:ea:90:1c:b6:cb:30:df:66:7b:1c:f1:65:4f:5f:a0:
         c1:a7:3d:ae:2a:54:09:29:fe:77:16:d2:c3:9f:cb:ce:0b:85:
         b9:f3:75:e5:9f:2a:1d:a5:c2:33:9d:80:26:27:88:c1:79:b0:
         8a:b8:a1:16:73:88:59:cd:2c:65:97:47:cb:5f:f5:8d:4f:b0:
         2b:6c:19:0d:ac:37:2b:09:45:9f:b7:a9:6f:6c:68:e6:0b:84:
         65:de:c7:a3:98:ed:68:3c:08:bf:60:3e:bc:38:08:92:1e:20:
         e8:5f:94:0d:7d:3d:59:f3:4e:6c:ee:e9:e4:3b:7e:bb:8f:af:
         8d:36:49:ec:e8:50:19:f0:4c:f4:88:4a:1f:b5:8b:7d:1d:22:
         6c:ab:03:82:77:11:d3:14:e2:9a:01:1d:ab:fb:50:8a:06:0a:
         be:ca:3a:3b:0c:15:35:92:e5:46:7f:eb:79:ff:17:b7:33:ae:
         88:b1:69:09:eb:49:fb:17:b7:24:48:0b:16:a0:88:09:79:0f:
         89:4e:5a:41:86:23:b6:9f:b0:f0:bc:9d:07:4a:2f:35:23:d9:
         e9:bf:ba:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----