Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f601ba70-383e-4f5d-aacb-7e45e33ac6ba/9843d163-819a-3ab6-8ca0-90d88abb7ebb.roa
File:                     9843d163-819a-3ab6-8ca0-90d88abb7ebb.roa (raw, json)
Hash identifier:          xQ4z8sD1UzQl46HqKFmcUSlKrB3q4Fdd8xzRmhYNLx4=
Subject key identifier:   48:7A:8B:DB:3D:DA:8E:55:9F:57:CA:FE:73:8E:50:E0:27:81:00:2B
Certificate issuer:       /CN=f601ba70-383e-4f5d-aacb-7e45e33ac6ba
Certificate serial:       010D0C9F43285848424ADC40695A33A61104D380
Authority key identifier: 63:E4:E1:0B:2B:65:78:FC:96:06:23:A2:03:18:67:8B:54:59:F4:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f601ba70-383e-4f5d-aacb-7e45e33ac6ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f601ba70-383e-4f5d-aacb-7e45e33ac6ba/9843d163-819a-3ab6-8ca0-90d88abb7ebb.roa
Signing time:             Thu 19 Dec 2024 14:00:52 +0000
ROA not before:           Thu 19 Dec 2024 14:00:52 +0000
ROA not after:            Wed 19 Mar 2025 13:00:52 +0000
asID:                     40846
IP address blocks:        2602:2e4:2::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:4a:dc:40:69:5a:33:a6:11:04:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f601ba70-383e-4f5d-aacb-7e45e33ac6ba
        Validity
            Not Before: Dec 19 14:00:52 2024 GMT
            Not After : Mar 19 13:00:52 2025 GMT
        Subject: CN=90e71615-9ee8-41e3-930b-8ea16516661f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:97:85:55:72:49:22:89:b7:ce:f5:6a:30:00:
                    94:4e:21:d6:88:53:c1:8f:47:6c:9e:0f:20:80:70:
                    08:b0:4e:1a:68:84:e7:2b:e7:f1:94:df:25:dc:37:
                    2a:fc:a4:89:7c:ba:cf:8f:11:b1:50:cc:26:0b:fb:
                    32:4b:cb:ae:41:8b:bc:17:a3:47:42:80:fd:ea:3b:
                    5a:d8:f0:f3:a6:1c:04:da:f4:21:06:52:3c:2e:91:
                    53:77:90:c0:33:72:b3:ca:34:52:9e:02:5a:c9:55:
                    27:b1:a9:e0:36:89:94:45:56:a1:1c:78:f8:b4:87:
                    f4:e8:a6:da:ed:4a:8a:79:4c:c9:2c:a7:78:dc:bb:
                    96:8e:02:dc:99:2d:3e:21:c2:c1:dc:f1:3a:77:99:
                    b1:4e:63:0e:54:88:5c:ad:51:4a:b2:47:af:0c:5a:
                    18:1f:d5:a0:52:04:ee:f9:01:74:98:52:8f:6c:31:
                    a2:2d:e9:e9:ab:88:c7:d2:e3:38:54:7e:59:4f:a1:
                    1b:db:ed:f1:35:f1:1e:19:71:66:74:d2:4a:28:68:
                    14:f1:a0:58:c4:b8:82:c0:04:cc:a8:0a:63:8d:c8:
                    4a:84:a2:cc:94:85:8a:0c:ea:8d:61:38:f4:c5:f7:
                    3a:a3:95:07:d1:6b:ce:2e:f7:c4:42:f6:48:08:76:
                    a5:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:7A:8B:DB:3D:DA:8E:55:9F:57:CA:FE:73:8E:50:E0:27:81:00:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f601ba70-383e-4f5d-aacb-7e45e33ac6ba/9843d163-819a-3ab6-8ca0-90d88abb7ebb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f601ba70-383e-4f5d-aacb-7e45e33ac6ba/f601ba70-383e-4f5d-aacb-7e45e33ac6ba.crl

            X509v3 Authority Key Identifier:
                keyid:63:E4:E1:0B:2B:65:78:FC:96:06:23:A2:03:18:67:8B:54:59:F4:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f601ba70-383e-4f5d-aacb-7e45e33ac6ba.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2e4:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:2e:68:c1:41:56:b4:ee:6b:0a:84:26:b6:66:57:b9:9b:0c:
         e5:98:38:40:b6:37:83:e6:6b:84:76:ea:69:fa:28:f9:34:44:
         3b:c0:60:0f:c5:33:af:0c:de:63:d6:47:23:c5:2f:ef:2d:a3:
         23:50:ad:f4:11:ee:aa:fe:19:95:9c:fb:1d:94:8a:1c:4c:5e:
         8a:7b:37:a5:c2:b5:62:09:d1:b6:b6:23:06:ef:1b:e1:15:eb:
         9b:50:67:ef:aa:e8:32:8a:5f:56:3f:64:44:ba:dd:e6:ac:89:
         c7:75:70:be:d8:2e:36:8e:c7:07:dd:19:fb:18:59:e6:bf:79:
         bf:08:77:06:ee:41:cf:bd:3b:e2:a3:56:12:25:26:8b:46:9e:
         7d:ac:bb:57:c3:fd:97:d4:d8:85:dc:74:92:29:d7:d0:77:08:
         43:f5:31:76:0f:9d:23:dd:80:d8:90:72:4c:df:79:8f:94:ce:
         6c:5c:c1:1e:d9:8d:4e:08:f8:dc:6e:37:c6:3c:e5:6f:c3:4d:
         46:a9:9b:fb:e9:dc:dc:09:9a:61:9d:c3:38:d8:6c:3c:cd:0c:
         ef:66:3f:0d:75:f5:25:45:a2:e1:99:9a:e5:21:b0:50:bf:e6:
         cc:d7:e3:64:b0:18:6c:f9:20:3c:45:12:71:82:88:a9:0a:b5:
         54:a3:30:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----