Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba339105-0dc8-4e13-ab0d-3279a6b58f97/7b10d9a5-8c6f-3592-b138-29e238ff65e0.roa
File:                     7b10d9a5-8c6f-3592-b138-29e238ff65e0.roa (raw, json)
Hash identifier:          C6y3dCLAdAej/9Kg8P5Q1rvD6wzC/h8/CSLmk8/xqsg=
Subject key identifier:   C1:42:7B:DA:97:8D:DF:34:E4:24:E5:3F:EB:A6:C6:5D:9C:55:DD:EE
Certificate issuer:       /CN=ba339105-0dc8-4e13-ab0d-3279a6b58f97
Certificate serial:       010D0C9F4328584849456586FFDD137774CFCB20
Authority key identifier: 90:B8:5A:EE:92:C4:9A:6D:E8:77:45:60:0F:2D:77:2A:26:11:83:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba339105-0dc8-4e13-ab0d-3279a6b58f97.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba339105-0dc8-4e13-ab0d-3279a6b58f97/7b10d9a5-8c6f-3592-b138-29e238ff65e0.roa
Signing time:             Sun 22 Dec 2024 02:00:39 +0000
ROA not before:           Sun 22 Dec 2024 02:00:39 +0000
ROA not after:            Sat 22 Mar 2025 01:00:39 +0000
asID:                     7720
IP address blocks:        2602:fc1d::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:49:45:65:86:ff:dd:13:77:74:cf:cb:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba339105-0dc8-4e13-ab0d-3279a6b58f97
        Validity
            Not Before: Dec 22 02:00:39 2024 GMT
            Not After : Mar 22 01:00:39 2025 GMT
        Subject: CN=b6976792-cacb-4431-97dd-de2bb95ff2c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:2f:a8:78:6c:7e:79:bc:58:4d:db:8f:ea:11:
                    13:cd:aa:75:a3:df:f6:37:fd:88:5a:bd:47:e2:cf:
                    52:44:77:ad:5b:45:cc:fe:57:d2:e4:2d:8e:07:ef:
                    d4:65:ab:cf:87:29:fb:9a:87:ba:af:02:14:68:46:
                    97:e7:c3:e3:8d:da:b5:36:6b:c0:fc:44:e4:ec:fc:
                    dd:ad:04:8b:03:62:85:b2:2e:5a:0c:bd:c2:d1:a8:
                    5f:5f:d7:90:4d:ed:b3:1c:e1:d4:3e:a6:20:6f:e7:
                    ce:c5:71:30:fe:7a:5e:d9:23:9a:e7:60:ec:cd:66:
                    56:ec:fd:2e:29:55:1d:8c:b5:8d:d1:42:64:ad:0a:
                    c5:95:26:42:90:6c:a2:09:e0:ff:65:8b:6f:fc:dd:
                    f6:60:f1:33:56:59:ba:8f:31:e0:29:2b:64:42:d3:
                    57:fd:c5:0d:1a:34:98:03:4e:e2:e5:7a:33:31:20:
                    52:73:b0:25:4a:cf:ab:86:32:22:72:5a:4a:4d:09:
                    33:0d:e1:b6:13:f2:4f:18:9f:1a:e2:d6:c8:c1:b4:
                    b0:89:16:f4:57:ce:07:45:22:fc:e8:46:31:0b:09:
                    ed:39:09:ce:0b:8f:63:29:1a:77:f3:64:4e:88:25:
                    67:ac:ba:d6:c0:57:fc:5a:cd:3c:c3:60:e9:d0:5b:
                    96:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:42:7B:DA:97:8D:DF:34:E4:24:E5:3F:EB:A6:C6:5D:9C:55:DD:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba339105-0dc8-4e13-ab0d-3279a6b58f97/7b10d9a5-8c6f-3592-b138-29e238ff65e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba339105-0dc8-4e13-ab0d-3279a6b58f97/ba339105-0dc8-4e13-ab0d-3279a6b58f97.crl

            X509v3 Authority Key Identifier:
                keyid:90:B8:5A:EE:92:C4:9A:6D:E8:77:45:60:0F:2D:77:2A:26:11:83:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba339105-0dc8-4e13-ab0d-3279a6b58f97.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc1d::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:b3:6f:26:21:bb:d3:35:f7:f4:ad:68:c9:68:2e:1b:e7:bd:
         5c:30:16:77:be:8d:53:29:92:8f:75:99:d5:0a:fb:9c:4e:5e:
         ed:36:e6:e7:77:ab:10:75:27:df:8b:49:b8:2f:7e:83:8f:4a:
         54:6b:aa:f1:b9:ca:3f:ca:3d:b1:75:c4:aa:6a:8a:c8:4f:30:
         2f:d6:25:19:20:e3:c2:d8:06:8b:f9:02:4a:59:e8:d7:25:46:
         15:6b:1a:1e:00:a4:ca:2e:f9:f5:80:ae:9e:8a:ee:54:3f:81:
         2b:73:9f:c5:cc:10:a7:9d:2f:df:58:dd:1e:24:02:ed:1f:33:
         c2:06:fb:e8:7a:b0:11:ee:73:30:b2:34:18:37:a1:31:1f:30:
         0b:38:c5:98:7b:c4:1b:dc:0b:79:43:8a:46:2e:43:7f:6d:bd:
         92:2d:7f:d8:a5:4d:89:9a:41:16:81:c2:b1:bb:ac:5f:02:c8:
         5d:e5:8d:3a:42:f4:50:56:30:88:7b:01:e4:c7:30:ae:de:d7:
         02:f6:83:50:9f:32:c8:eb:ec:56:3c:1d:00:cb:6b:09:15:f9:
         b2:4c:90:90:fd:61:ff:57:51:ba:69:1b:ae:23:aa:95:db:74:
         35:79:a0:76:dd:fb:ba:3b:32:59:8b:2b:04:26:29:ed:a4:30:
         71:46:3b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----