Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/cb319636-4bbd-3bc2-995d-78d626b04d9a.roa
File:                     cb319636-4bbd-3bc2-995d-78d626b04d9a.roa (raw, json)
Hash identifier:          nFb/ASN/0Y7N398JcQD/zO2xHv+OoFhwiAI7mkBlar4=
Subject key identifier:   5B:82:CB:E0:6D:8E:E0:FB:85:45:5E:B6:5C:C4:9B:7D:EE:40:D0:F0
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285848424AD836A96D52E168E6C580
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/cb319636-4bbd-3bc2-995d-78d626b04d9a.roa
Signing time:             Thu 19 Dec 2024 14:00:52 +0000
ROA not before:           Thu 19 Dec 2024 14:00:52 +0000
ROA not after:            Wed 19 Mar 2025 13:00:52 +0000
asID:                     32703
IP address blocks:        2600:100::/28 maxlen: 28
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:4a:d8:36:a9:6d:52:e1:68:e6:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Dec 19 14:00:52 2024 GMT
            Not After : Mar 19 13:00:52 2025 GMT
        Subject: CN=988d90e8-87c4-4a4d-8f33-e7891e81cfe9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4f:4b:2c:0c:58:b4:67:5c:50:a6:7f:e7:3c:
                    f0:92:47:c4:cd:3e:66:43:cf:70:e8:8c:d9:69:c2:
                    6f:ed:fe:50:91:20:65:d3:28:e5:16:aa:92:7b:f2:
                    ad:54:14:0d:28:27:09:c8:50:6d:06:0a:f6:47:b7:
                    c9:db:0a:5d:67:1b:0d:34:84:24:09:21:59:46:7f:
                    f6:5c:f6:7b:92:2a:01:15:28:3c:c8:c2:40:19:6a:
                    2b:2c:1f:6d:bf:c8:87:9c:84:af:46:90:42:81:32:
                    71:95:1e:86:42:33:2a:bb:fc:13:25:b7:2d:0c:81:
                    e5:92:31:bd:03:db:4d:58:07:07:d7:c9:22:e0:da:
                    10:62:ee:06:dc:29:87:2f:f8:ff:e2:97:ff:b6:54:
                    90:5d:27:33:bf:bb:20:61:74:99:cb:01:e7:d6:db:
                    63:5d:49:fe:0c:69:b4:5a:06:1f:6a:07:a4:61:70:
                    25:8b:2c:c7:dd:f9:22:69:46:4b:15:66:ed:37:a8:
                    cb:f4:30:f4:83:a0:c5:82:3d:24:9a:fa:40:04:0e:
                    bc:b6:ee:8e:b5:8e:ca:f9:80:1d:3a:63:df:67:6a:
                    3c:4a:68:e6:f5:cb:78:9b:ce:e8:0f:1b:74:55:6d:
                    98:36:b2:d8:94:13:57:16:a6:fd:3c:8d:8d:f3:9a:
                    7e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:82:CB:E0:6D:8E:E0:FB:85:45:5E:B6:5C:C4:9B:7D:EE:40:D0:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/cb319636-4bbd-3bc2-995d-78d626b04d9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:99:f4:7d:c8:93:7b:06:3f:3d:2d:5c:0c:da:a9:98:30:43:
         eb:5e:c3:8a:ab:63:66:4e:bb:73:1e:4a:6e:e3:f3:f6:b9:42:
         b6:55:19:76:ca:2e:d0:c5:bd:14:b1:69:a2:88:a3:9c:83:f4:
         8b:e3:5a:db:50:33:31:b6:3d:94:fb:4a:19:35:d9:2c:de:d5:
         79:97:97:ac:4c:18:98:2b:0e:55:78:a2:72:d2:12:3a:4f:17:
         f3:8f:0e:f8:02:fb:32:57:d5:14:41:bf:84:c2:32:1f:e4:64:
         6d:5d:d4:24:19:8a:35:5d:d4:54:82:6f:00:e2:db:35:6a:d3:
         88:1c:0f:e1:4f:20:6f:48:05:ec:6c:6e:04:35:4d:ab:26:44:
         ad:c4:7f:b0:61:f8:3b:68:21:54:d7:24:1a:63:3e:15:05:d4:
         bd:86:c8:b1:1b:1a:e2:2b:36:c9:23:01:e1:35:e7:e1:c9:66:
         80:7d:9e:55:90:45:fc:e8:2a:97:34:dc:58:07:86:43:f3:a3:
         58:5e:e2:38:40:bc:b1:d8:51:75:c2:65:b0:23:28:60:6d:7f:
         b1:9e:31:83:87:60:f5:2b:34:07:12:20:b9:32:87:61:d8:85:
         0b:36:1b:24:e4:0f:7f:b4:cc:ac:19:24:8f:e1:cf:1b:6c:30:
         f0:65:ef:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----