Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/58e07563-c033-4e44-b58b-ee57eafd8f85/5bf9da42-fe79-3455-8869-3015b3ade0a5.roa
File:                     5bf9da42-fe79-3455-8869-3015b3ade0a5.roa (raw, json)
Hash identifier:          Iz8y2cFZZY7omECewC8I+4LAuw3nQnG/yl0U1TAJp2M=
Subject key identifier:   A5:4D:03:00:1B:50:1A:93:85:7C:1A:7A:A7:BE:6F:D9:F0:0B:A0:AB
Certificate issuer:       /CN=58e07563-c033-4e44-b58b-ee57eafd8f85
Certificate serial:       010D0C9F432858483F802C1F73E02B2C5C0B2940
Authority key identifier: 46:A3:BD:93:78:F2:9A:FF:35:29:C2:DE:8D:53:FE:0C:63:61:3F:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/58e07563-c033-4e44-b58b-ee57eafd8f85.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/58e07563-c033-4e44-b58b-ee57eafd8f85/5bf9da42-fe79-3455-8869-3015b3ade0a5.roa
Signing time:             Wed 18 Dec 2024 14:00:52 +0000
ROA not before:           Wed 18 Dec 2024 14:00:52 +0000
ROA not after:            Tue 18 Mar 2025 13:00:52 +0000
asID:                     399060
IP address blocks:        2606:440::/32 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3f:80:2c:1f:73:e0:2b:2c:5c:0b:29:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58e07563-c033-4e44-b58b-ee57eafd8f85
        Validity
            Not Before: Dec 18 14:00:52 2024 GMT
            Not After : Mar 18 13:00:52 2025 GMT
        Subject: CN=9609b923-7344-4f83-ab8c-625e0d067fbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a0:cd:6b:dc:88:25:ee:c1:83:41:53:06:de:
                    fd:83:74:24:1e:3e:d1:b6:28:36:e1:39:de:61:c2:
                    ec:ea:15:c5:b5:db:64:b9:87:0f:55:d5:f7:65:7d:
                    94:98:a0:67:c4:12:ce:66:d6:15:79:6f:a6:50:1c:
                    d0:b5:10:da:b6:24:d0:4f:fc:01:19:97:cd:75:af:
                    16:56:b3:25:fb:a5:c3:d4:30:3c:c9:59:95:24:16:
                    1b:10:56:2e:4c:9d:65:fe:34:2f:94:76:40:c2:45:
                    5a:2e:37:e4:45:89:58:51:11:84:97:c7:2e:9d:9c:
                    38:87:23:e2:fd:7b:9d:bf:e7:f1:e0:03:38:00:af:
                    e6:f4:7a:7f:8c:e0:52:b1:6d:83:7c:30:e7:52:75:
                    79:1a:4f:d3:2e:e4:0d:cd:9b:6c:e4:8d:ed:da:11:
                    23:22:6a:f3:71:09:e1:40:9a:5b:88:ac:7e:9c:8b:
                    e6:b0:fa:fa:82:8a:21:b9:9c:98:e1:9f:2e:69:31:
                    6f:b2:47:7d:26:54:af:fa:b5:de:10:37:07:d3:df:
                    23:24:1c:7a:56:05:9a:30:2e:53:7a:64:b9:7f:94:
                    ab:36:64:6a:9e:0f:79:5e:91:17:7c:6d:27:4d:1f:
                    e7:cd:d9:a4:48:a4:12:e5:e2:e1:78:46:dd:e2:7c:
                    f4:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:4D:03:00:1B:50:1A:93:85:7C:1A:7A:A7:BE:6F:D9:F0:0B:A0:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/58e07563-c033-4e44-b58b-ee57eafd8f85/5bf9da42-fe79-3455-8869-3015b3ade0a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/58e07563-c033-4e44-b58b-ee57eafd8f85/58e07563-c033-4e44-b58b-ee57eafd8f85.crl

            X509v3 Authority Key Identifier:
                keyid:46:A3:BD:93:78:F2:9A:FF:35:29:C2:DE:8D:53:FE:0C:63:61:3F:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/58e07563-c033-4e44-b58b-ee57eafd8f85.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:440::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:73:32:88:85:ce:cd:a9:99:9c:96:c5:6b:3e:2b:7a:2e:24:
         9c:e8:39:54:12:3f:f7:56:ec:2a:4b:ec:7c:e4:f2:a1:0d:c3:
         7c:66:e6:f0:6b:62:56:19:05:21:3f:fe:a0:c6:d9:c7:e4:27:
         19:71:5f:19:db:0f:c3:f3:f1:e9:1f:91:74:fd:a0:b3:7a:1a:
         b5:7c:14:b5:0b:d7:bd:c8:f6:a5:25:f9:c2:91:49:95:5b:15:
         ad:cc:0e:5e:a5:f7:a1:d0:ed:a4:48:8d:fa:55:f0:e7:72:6d:
         b7:cd:dd:b5:c0:ad:97:38:d8:e1:e2:da:d1:e9:07:64:12:82:
         13:26:c4:00:3e:47:c8:20:e7:d7:57:14:68:4c:71:07:28:78:
         a0:0b:06:ee:67:ab:99:6c:54:a9:31:ab:33:5f:e4:21:7a:a0:
         d3:fa:b3:48:62:cc:a9:a3:2a:b8:ab:75:35:ce:ef:38:04:9a:
         61:1f:23:17:60:25:5d:df:b0:62:f5:c2:d5:b2:84:41:ab:3c:
         96:52:98:af:97:d9:76:8f:6a:d1:33:46:32:d5:c8:a9:ce:58:
         4b:1b:5f:6d:11:30:61:1c:2b:bf:94:5a:23:6d:ec:43:97:0c:
         68:6a:83:53:aa:a1:34:3e:28:18:88:01:49:5f:bd:9b:00:5a:
         03:54:57:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----