Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9021175d-e99d-33b6-80bf-1b22ac4d2f91.roa
File:                     9021175d-e99d-33b6-80bf-1b22ac4d2f91.roa (raw, json)
Hash identifier:          YVJau9SEUNn4dA1Sp8BikaF+rUUECAb+o2zhI3nfgww=
Subject key identifier:   F2:84:E1:C9:5B:A4:18:DE:C2:B1:05:68:9B:AE:09:E1:AC:06:BC:60
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285847F1550EF1A7D17F1A49B3AD80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9021175d-e99d-33b6-80bf-1b22ac4d2f91.roa
Signing time:             Wed 20 Nov 2024 14:00:52 +0000
ROA not before:           Wed 20 Nov 2024 14:00:52 +0000
ROA not after:            Tue 18 Feb 2025 14:00:52 +0000
asID:                     7029
IP address blocks:        2604:cb00:41::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f1:55:0e:f1:a7:d1:7f:1a:49:b3:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Nov 20 14:00:52 2024 GMT
            Not After : Feb 18 14:00:52 2025 GMT
        Subject: CN=9533ae01-33bd-4a4a-b653-ce6cb7d7fc8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:69:bf:07:0e:ae:9a:cc:86:6c:87:7e:a8:f6:
                    3f:87:7a:54:b9:85:0a:5d:1a:59:12:2f:29:d0:26:
                    c5:bb:c8:7c:84:23:0e:36:2d:9a:07:63:69:fc:d9:
                    e7:26:84:05:7a:eb:ab:72:58:d6:36:3b:1b:97:d4:
                    20:95:ce:17:e7:b8:7e:12:86:0b:93:81:78:75:90:
                    0d:c0:0d:a7:11:16:c8:a0:70:d1:a2:46:78:5f:16:
                    c4:8e:45:fd:5b:13:eb:8c:7b:80:5f:80:ce:0d:49:
                    5f:46:5f:6f:52:ee:3d:5f:73:98:a8:d2:b0:38:e3:
                    e8:7d:62:03:77:13:9e:0d:07:e4:e7:1e:a5:56:aa:
                    34:f3:21:4c:1f:6e:80:85:61:56:da:57:22:5b:36:
                    35:b7:ff:a0:38:86:ee:10:9a:95:96:9b:a5:46:68:
                    c1:1b:9f:ed:71:11:1b:61:0d:c7:2d:59:92:e0:fe:
                    cf:e7:4f:e6:ee:51:45:e5:43:af:30:f1:b1:de:67:
                    84:30:46:46:6c:e9:6f:f7:49:bc:d2:df:ef:c6:d3:
                    60:8b:f6:f4:96:31:8d:2f:43:e7:51:24:64:cd:a4:
                    49:35:e1:76:d8:b8:ea:04:93:f7:4b:c9:90:2f:0f:
                    fa:a0:70:5a:14:4f:07:03:64:be:8c:9e:46:15:24:
                    2b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:84:E1:C9:5B:A4:18:DE:C2:B1:05:68:9B:AE:09:E1:AC:06:BC:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9021175d-e99d-33b6-80bf-1b22ac4d2f91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:cb00:41::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:d0:f2:33:e6:1f:d6:0e:a0:09:91:8c:57:d6:33:fa:d7:6e:
         20:de:5b:d4:c7:ec:04:f0:e8:ce:26:64:cd:f4:85:cb:10:d5:
         96:9d:67:03:d6:d7:1c:f9:a5:a0:f4:70:c8:70:e5:dd:6c:ce:
         36:e0:46:e5:2f:1e:49:40:7e:f5:ed:8c:79:d7:fe:d5:9f:34:
         8f:45:d9:4e:af:59:36:47:b7:33:9b:ed:93:49:e3:ba:4b:d2:
         51:da:38:33:80:21:a7:02:d3:0d:31:35:04:79:12:ca:bb:b0:
         af:b6:4e:95:0c:0a:b8:cc:e8:19:a7:43:d4:54:86:02:a2:8c:
         27:16:aa:fa:ad:f7:75:45:09:ae:5f:36:2a:ac:d4:ec:99:5f:
         6f:e1:55:90:9d:2c:49:4c:8e:c9:86:2c:cf:47:e0:a8:fa:84:
         93:16:fc:4f:99:31:c1:67:24:e0:08:c3:cc:f5:66:08:cd:c0:
         ac:4f:3b:a9:f4:3d:ec:23:7d:c9:20:cb:57:a2:2f:a3:d1:72:
         76:26:1c:07:3c:e3:c9:ab:c8:29:e7:b7:f3:09:89:5e:24:8d:
         a8:d8:24:e8:72:ae:01:8f:ec:5b:df:10:24:a2:18:2d:b2:15:
         cf:9c:19:cf:25:14:c7:ba:3f:6e:0e:fd:55:83:93:bf:20:bb:
         11:a9:10:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----