Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/0092ac2b-5291-3213-961f-46693932424a.roa
File:                     0092ac2b-5291-3213-961f-46693932424a.roa (raw, json)
Hash identifier:          f377+ABn8nmYMq/AY0Fne2SelRmTYayd0lJLntHt+XU=
Subject key identifier:   1A:58:7D:AA:5B:EC:FA:59:E2:63:88:38:AD:90:F5:8A:22:61:8B:C3
Certificate issuer:       /CN=9c6e9a25-1599-4e9b-a8a2-015995c805b8
Certificate serial:       010D0C9F432858484C1020B27BF8FA65DFD16F60
Authority key identifier: 8E:F7:C9:9E:50:68:66:1B:10:0F:56:6A:37:AB:5B:FF:D4:26:8F:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/0092ac2b-5291-3213-961f-46693932424a.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     400312
IP address blocks:        2602:fbf0::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:10:20:b2:7b:f8:fa:65:df:d1:6f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c6e9a25-1599-4e9b-a8a2-015995c805b8
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=26e7b61e-bb5d-44d7-8f94-13afcc0302a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:4a:6e:ab:a3:e3:06:ae:19:c8:1c:19:85:ab:
                    cc:d9:a8:aa:e0:56:cd:44:88:e5:cd:13:cf:2b:af:
                    4d:9e:28:85:0f:52:da:e8:3c:3a:a3:80:15:7d:ef:
                    c3:bc:0c:48:97:91:2c:92:54:0e:a8:c8:be:fb:52:
                    d1:a2:27:ba:c9:4b:91:a7:fa:d5:c6:73:10:81:f6:
                    66:1b:8e:db:ea:d0:3d:6a:ee:97:b4:c5:4b:01:a7:
                    ea:4f:d8:a9:64:82:94:d7:c2:be:2e:aa:d3:fb:75:
                    79:87:f9:ad:96:9e:d1:2f:02:11:75:83:84:fd:df:
                    b9:cb:94:d6:3c:da:90:55:bd:d1:57:84:a2:a1:b3:
                    c2:41:23:95:04:c7:4a:47:b4:e7:2e:1c:48:91:63:
                    25:5c:c8:ee:06:7d:a4:84:53:2d:70:10:a3:8e:dc:
                    65:a1:72:a0:27:d5:8d:cf:c1:66:7b:e1:f2:02:2c:
                    67:74:52:58:d7:f6:56:59:f9:f7:a7:00:e9:10:b5:
                    82:c3:6a:92:a7:c0:0a:45:67:e2:80:af:08:9a:71:
                    ce:f9:0d:cd:ae:c5:62:9f:52:df:09:ff:04:e2:25:
                    8e:cb:33:af:27:da:8c:61:02:a4:4d:6f:4b:ab:45:
                    88:5d:55:3d:51:2a:94:58:60:36:d4:81:09:97:6f:
                    e2:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:58:7D:AA:5B:EC:FA:59:E2:63:88:38:AD:90:F5:8A:22:61:8B:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/0092ac2b-5291-3213-961f-46693932424a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/9c6e9a25-1599-4e9b-a8a2-015995c805b8.crl

            X509v3 Authority Key Identifier:
                keyid:8E:F7:C9:9E:50:68:66:1B:10:0F:56:6A:37:AB:5B:FF:D4:26:8F:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbf0::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:24:99:56:48:11:fb:55:25:6d:71:6e:0c:bd:94:65:b3:9f:
         0f:95:27:3f:6a:0b:24:f9:e4:7e:0d:6c:b7:db:cf:0a:cd:04:
         82:96:00:61:75:ee:9b:d9:c8:68:fa:4e:21:a4:f3:01:12:12:
         26:27:28:2d:5f:ba:89:8f:15:aa:f4:ee:99:08:0f:2a:2a:05:
         5e:34:e6:33:61:e7:8d:18:2e:76:5a:9b:a3:33:ab:c0:e9:af:
         72:bb:f7:d5:2c:da:91:0a:78:eb:5b:6e:2e:e0:d4:c6:c4:0e:
         fc:fb:90:2e:03:06:8e:4d:48:3d:d0:e6:8d:b5:ed:ce:17:50:
         e2:c9:8e:8c:eb:5b:b0:17:db:b0:20:43:6a:af:56:a4:f1:dd:
         fc:38:89:34:2a:9b:c0:49:3c:ee:b5:b4:f4:6d:55:c9:e4:39:
         e9:39:83:85:ad:a3:ff:d7:6c:4a:1b:11:ea:da:fe:cf:06:ea:
         eb:3d:98:f4:62:2f:10:b1:9d:15:80:b9:28:7d:7d:5c:ef:29:
         36:76:9b:08:34:d5:d9:31:ad:05:c4:8f:db:8a:17:ae:9b:f1:
         65:0f:eb:52:2c:6b:60:26:fa:6d:67:f5:f0:b5:35:82:93:03:
         12:e4:25:f9:e1:ed:24:35:70:67:09:d4:72:ea:1a:0f:9b:09:
         ba:de:0d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----