Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b/2d1e3726-f4c0-3e94-9e01-9888bea82c8e.roa
File:                     2d1e3726-f4c0-3e94-9e01-9888bea82c8e.roa (raw, json)
Hash identifier:          5+vzNCqNLiST/dFFEwDAi+tY+KAYW+1wEwUD30+Snbg=
Subject key identifier:   78:06:14:C6:0D:60:0D:5C:DD:58:2A:88:21:23:D2:42:A7:19:2C:01
Certificate issuer:       /CN=a6b33052-e5a8-4f63-b264-b55c1ae1ed5b
Certificate serial:       010D0C9F432858480A751CD052E207C374CB0080
Authority key identifier: 98:D1:67:33:F8:B7:06:E1:FB:F7:F7:C0:07:44:45:81:80:71:DC:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b/2d1e3726-f4c0-3e94-9e01-9888bea82c8e.roa
Signing time:             Fri 29 Nov 2024 14:00:51 +0000
ROA not before:           Fri 29 Nov 2024 14:00:51 +0000
ROA not after:            Thu 27 Feb 2025 14:00:51 +0000
asID:                     46969
IP address blocks:        2607:4f40::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0a:75:1c:d0:52:e2:07:c3:74:cb:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b33052-e5a8-4f63-b264-b55c1ae1ed5b
        Validity
            Not Before: Nov 29 14:00:51 2024 GMT
            Not After : Feb 27 14:00:51 2025 GMT
        Subject: CN=bf8cc505-56a6-4842-97ad-93f396e82804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:96:9f:11:78:d8:99:f4:8d:c4:31:7e:e9:2d:
                    06:85:b3:e3:fc:76:c0:c9:46:b0:92:23:9f:64:3f:
                    b0:16:d4:41:10:7e:d0:3d:7f:80:ee:bf:ae:e6:cc:
                    90:fb:3f:8d:21:18:67:db:6a:17:50:40:cf:9d:26:
                    db:ee:93:64:f9:eb:d4:ae:00:b8:e4:ea:46:05:fe:
                    9d:13:34:4b:c5:ae:1f:ee:3f:e1:74:68:db:46:d2:
                    c3:19:37:c7:56:6e:d0:eb:c2:9e:42:cf:74:02:27:
                    60:20:f9:2b:85:d5:0f:22:08:50:a5:34:a6:4d:8e:
                    cb:6e:05:78:b8:eb:0b:ca:fb:99:da:29:f6:6d:f0:
                    35:d2:9c:e0:a7:59:a4:1e:51:25:98:8e:8b:04:95:
                    a4:e3:b2:b2:5d:a3:99:22:33:56:b4:20:7f:75:92:
                    98:99:78:b7:b9:17:35:b9:3b:0e:6e:a0:34:89:5f:
                    e8:41:16:21:c2:19:ee:9d:47:28:32:b3:a6:00:83:
                    44:3c:d3:5e:64:ed:db:cb:e3:d4:00:da:8c:62:b3:
                    46:25:07:b4:9d:b2:36:69:5c:4e:86:a2:23:a5:1b:
                    09:06:e5:9b:b2:4e:13:c6:8c:80:3b:6f:c0:fb:61:
                    e9:d7:56:c6:e8:9a:7b:24:c9:85:4b:a8:cb:d7:fa:
                    bc:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:06:14:C6:0D:60:0D:5C:DD:58:2A:88:21:23:D2:42:A7:19:2C:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b/2d1e3726-f4c0-3e94-9e01-9888bea82c8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b.crl

            X509v3 Authority Key Identifier:
                keyid:98:D1:67:33:F8:B7:06:E1:FB:F7:F7:C0:07:44:45:81:80:71:DC:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:4f40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:81:d2:42:a5:9d:c3:24:c9:06:54:d9:ea:67:e3:4a:85:0f:
         5b:f1:a1:24:66:c7:a5:a1:c8:fa:f5:84:69:49:36:ee:ed:8f:
         ea:d6:5d:54:33:18:69:a8:cb:f4:57:74:f6:65:3a:0b:75:3b:
         94:54:4f:a9:2e:60:d5:e8:c7:e6:ab:4a:38:0b:57:73:05:10:
         17:77:8b:48:0a:a0:f5:a8:0d:44:f0:2e:5a:45:15:d3:89:c6:
         c5:c2:52:df:a9:aa:0b:3a:60:3e:1b:c6:d1:e3:34:62:b0:c6:
         72:8c:b4:29:df:81:02:25:c9:1d:69:c1:46:01:09:6b:82:08:
         86:b6:91:22:72:d7:64:8e:48:56:4e:45:94:ff:a0:a6:c5:5b:
         2a:18:95:62:94:57:31:5b:22:5b:ec:2f:04:21:f0:dc:42:7b:
         22:2e:bf:e9:c6:0f:39:47:be:97:43:cc:9d:93:9a:8d:30:3c:
         36:88:9c:4d:58:65:d7:f7:73:4f:c4:65:61:1d:b7:2f:b1:95:
         a5:40:52:19:26:5f:e8:48:12:14:58:d6:53:d0:b8:69:3a:f2:
         9b:9b:3e:43:fb:b2:5b:60:62:6c:10:91:9a:8f:2f:88:86:db:
         bb:4a:34:6b:49:0a:cc:9f:da:a4:56:d5:ad:b0:68:16:b9:9b:
         87:73:3d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----