Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3b75d9c1-553f-319b-ba4a-f15368bacb3e.roa
File:                     3b75d9c1-553f-319b-ba4a-f15368bacb3e.roa (raw, json)
Hash identifier:          +DfCWMNN3B5//QkBeHrHlqT8ub2C/jNwDkRQCxk6gZs=
Subject key identifier:   9F:D7:09:83:49:76:3F:1E:AA:59:1A:F4:39:AC:92:48:27:48:8D:72
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F432858483720209E153CB52CFE892F00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3b75d9c1-553f-319b-ba4a-f15368bacb3e.roa
Signing time:             Sun 15 Dec 2024 14:00:53 +0000
ROA not before:           Sun 15 Dec 2024 14:00:53 +0000
ROA not after:            Sat 15 Mar 2025 13:00:53 +0000
asID:                     7029
IP address blocks:        2604:cb00:42::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:37:20:20:9e:15:3c:b5:2c:fe:89:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Dec 15 14:00:53 2024 GMT
            Not After : Mar 15 13:00:53 2025 GMT
        Subject: CN=c26d8599-c041-4b0b-9013-8e4f0e067e5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:5a:e6:85:44:bd:06:c6:bc:5b:38:4c:ff:8d:
                    73:52:f2:5d:dd:f8:79:e8:8a:46:cd:be:01:e0:92:
                    5a:57:67:3b:42:94:f0:a2:14:75:76:10:a4:f1:c9:
                    d3:26:55:3f:bc:1a:76:8d:a2:e3:21:73:4c:cb:73:
                    37:3e:d0:52:6d:cc:78:2d:f3:30:dd:b5:22:4c:f2:
                    82:74:06:f2:e7:56:a7:f9:17:29:e7:2d:e5:22:c5:
                    9f:2b:b4:8a:53:78:18:71:8d:da:98:47:dd:e9:ee:
                    91:7b:09:7d:57:45:15:17:7b:fe:15:34:25:6b:22:
                    8c:16:8a:19:8e:aa:e6:ff:81:7c:9f:18:5c:20:78:
                    c0:e8:69:ef:39:cc:d7:d2:37:70:8c:17:19:84:86:
                    f6:02:c7:69:5c:5d:44:62:12:d2:fe:70:5e:b4:fe:
                    a8:82:3d:93:0e:ec:ba:d0:7a:69:e4:7d:a7:67:1a:
                    d3:24:e9:90:18:1e:aa:dd:d8:89:f0:e1:03:33:d0:
                    3b:d4:ab:8b:b4:61:2b:69:6c:0a:6b:50:97:6c:db:
                    6e:93:43:76:ff:68:48:5d:3f:a3:31:33:83:8b:af:
                    b8:4d:8b:ed:dc:c7:7f:53:3c:b9:9e:27:5b:bd:44:
                    44:01:99:3c:da:98:57:a7:c3:64:b6:42:f1:b6:cb:
                    87:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:D7:09:83:49:76:3F:1E:AA:59:1A:F4:39:AC:92:48:27:48:8D:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3b75d9c1-553f-319b-ba4a-f15368bacb3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:cb00:42::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:9d:f9:c6:8a:5d:20:e1:7c:98:eb:5b:9f:40:c0:f6:b8:4c:
         8b:ec:d9:43:4a:1b:0b:0d:fa:0c:b6:b3:3d:c1:e3:78:ab:f9:
         67:f6:06:4a:00:f8:7a:2e:2a:3b:2e:c9:f9:d5:15:5e:dd:d5:
         04:f4:08:c0:b9:a0:9b:52:89:82:d4:92:6e:4a:32:79:77:e7:
         23:f2:93:f6:0f:bd:29:94:fc:c9:ce:e9:99:20:bb:e7:56:e4:
         e6:28:ef:ab:f5:33:fc:01:02:c7:9e:e1:b9:10:bd:cc:72:72:
         fd:df:36:9e:7f:39:73:f5:69:2f:b8:79:0e:83:f3:7a:46:28:
         46:93:6f:f0:ba:84:a4:fd:e5:d5:62:c8:90:6b:c2:12:b5:49:
         e8:e0:11:6c:77:1d:6e:4d:26:2e:95:8d:d8:97:68:10:72:ff:
         4d:86:55:26:72:ab:10:9c:37:60:cc:06:d9:ca:b5:cc:bb:86:
         ef:14:c8:ca:5b:c2:86:fe:f9:07:c6:d6:5f:c0:da:98:1d:3a:
         da:97:fb:42:1e:02:89:97:08:d1:90:74:f8:38:53:a6:2d:b9:
         df:5d:50:d1:d0:b8:4b:d7:20:ad:c5:d0:85:0f:db:c5:47:1c:
         b7:0b:23:bf:8d:cf:8d:0c:d1:4d:bf:4b:8b:73:10:f4:84:62:
         ca:19:40:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----