Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/9d0cc600-34d6-3e3e-b10b-27dc2b5d0539.roa
File:                     9d0cc600-34d6-3e3e-b10b-27dc2b5d0539.roa (raw, json)
Hash identifier:          8YmN0APc5VtrfRusNuY82gcNd3nxvlaLbp7iAd+FFSE=
Subject key identifier:   DF:0F:98:49:D2:C8:37:7F:BD:5D:6F:CB:08:53:97:73:4F:28:1B:9B
Certificate issuer:       /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial:       010D0C9F432858483F80420E8B45732928E3A1C0
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/9d0cc600-34d6-3e3e-b10b-27dc2b5d0539.roa
Signing time:             Wed 18 Dec 2024 14:00:52 +0000
ROA not before:           Wed 18 Dec 2024 14:00:52 +0000
ROA not after:            Tue 18 Mar 2025 13:00:52 +0000
asID:                     16839
IP address blocks:        2606:3600:1000::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3f:80:42:0e:8b:45:73:29:28:e3:a1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
        Validity
            Not Before: Dec 18 14:00:52 2024 GMT
            Not After : Mar 18 13:00:52 2025 GMT
        Subject: CN=9aed6556-9ad3-4ee8-9a41-e01c0a338caf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:92:98:35:8a:32:12:05:dc:1f:d6:c9:a9:89:
                    8c:59:b8:5c:94:1f:20:f8:1f:41:b7:28:d0:fc:8f:
                    f5:e8:e3:ae:e4:9c:5e:01:20:51:ab:15:95:58:fb:
                    d1:dd:67:19:6c:fd:cc:db:73:22:97:82:24:e2:b0:
                    61:16:f8:79:f4:1b:d1:e4:e0:fd:75:6c:5d:6b:6e:
                    13:d2:4d:39:60:47:46:70:96:bd:dd:3c:90:77:e2:
                    ef:57:73:35:18:b0:bd:c7:58:89:44:3e:33:9d:ae:
                    c4:83:9e:6c:b5:6a:1b:18:0e:65:d5:df:94:5d:69:
                    8d:b2:d1:8d:be:a8:bd:3a:c8:14:30:3d:71:2a:bf:
                    36:af:03:63:cf:d1:d8:b9:b8:1e:80:93:5a:d0:89:
                    af:d6:fa:c5:af:5b:f0:ed:fd:f4:43:66:c7:26:4c:
                    d5:fe:be:ae:6c:08:8b:4d:df:4a:88:48:17:da:41:
                    a4:2c:9c:21:d4:14:49:c6:bf:09:65:0a:bb:73:41:
                    1e:62:0d:84:8a:fd:70:b4:84:46:65:01:60:85:ea:
                    e0:25:7d:91:88:b6:83:5a:a6:cb:20:39:c4:83:fb:
                    da:16:34:8c:32:e1:7e:cf:69:91:59:c8:0d:1e:3f:
                    e9:a0:f3:ad:dc:0b:f8:ab:a5:77:4e:a0:c0:78:f8:
                    b8:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:0F:98:49:D2:C8:37:7F:BD:5D:6F:CB:08:53:97:73:4F:28:1B:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/9d0cc600-34d6-3e3e-b10b-27dc2b5d0539.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl

            X509v3 Authority Key Identifier:
                keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3600:1000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:e4:69:d1:7b:57:69:f3:11:4a:a4:df:d8:a2:51:08:0b:9f:
         78:bf:60:6c:ba:47:78:6e:7c:ca:87:7d:27:b4:3a:99:c3:96:
         fc:7c:0c:b1:9b:c9:fe:4b:e5:7a:5d:9c:9f:d2:d1:41:e0:ba:
         d1:66:29:d1:00:a2:57:1b:ce:0c:ae:7f:23:1e:30:46:3f:6c:
         fb:29:07:ac:21:f7:84:db:59:d2:e7:1c:63:21:bf:00:dd:13:
         04:a6:73:b3:55:da:9f:b3:5a:ec:20:10:0a:6b:21:08:85:f8:
         d7:1d:2f:88:58:31:c1:64:d5:9e:d7:bf:2b:a3:02:39:00:05:
         58:34:e2:fb:04:36:36:f1:eb:01:3f:e0:3a:03:d7:a9:35:fd:
         9a:98:24:1f:b2:d9:54:89:77:5d:f7:99:fb:02:80:82:7f:fe:
         b2:ce:5e:cc:93:9d:96:82:fc:18:47:40:1b:9e:0d:13:13:fa:
         78:bc:f9:30:b1:d4:98:01:7c:a8:1a:e2:67:7a:75:1e:a9:2e:
         b2:49:a7:ec:19:ab:68:bc:4a:db:d7:54:63:7e:c6:b5:1c:47:
         a3:3f:e7:22:d3:f4:0d:5c:17:98:40:fb:4b:f6:d5:b7:b9:fb:
         67:98:d1:a5:f6:70:4d:2a:8d:ea:a5:d0:7b:26:a8:92:28:13:
         62:b3:4a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----