Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f601ba70-383e-4f5d-aacb-7e45e33ac6ba/c2d2ca0b-f812-3101-ba90-0261d1b5768a.roa
File:                     c2d2ca0b-f812-3101-ba90-0261d1b5768a.roa (raw, json)
Hash identifier:          UT12Or8ebQCXSE3wPXv5n3KZ0EednUGBPHl8eClxxBs=
Subject key identifier:   49:DC:B3:3B:50:5E:42:D3:32:8C:0A:07:BE:BE:37:F3:91:94:43:B3
Certificate issuer:       /CN=f601ba70-383e-4f5d-aacb-7e45e33ac6ba
Certificate serial:       010D0C9F43285848424ADC32E23DFC42F4C599C0
Authority key identifier: 63:E4:E1:0B:2B:65:78:FC:96:06:23:A2:03:18:67:8B:54:59:F4:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f601ba70-383e-4f5d-aacb-7e45e33ac6ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f601ba70-383e-4f5d-aacb-7e45e33ac6ba/c2d2ca0b-f812-3101-ba90-0261d1b5768a.roa
Signing time:             Thu 19 Dec 2024 14:00:52 +0000
ROA not before:           Thu 19 Dec 2024 14:00:52 +0000
ROA not after:            Wed 19 Mar 2025 13:00:52 +0000
asID:                     40846
IP address blocks:        2602:2e4:1::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:4a:dc:32:e2:3d:fc:42:f4:c5:99:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f601ba70-383e-4f5d-aacb-7e45e33ac6ba
        Validity
            Not Before: Dec 19 14:00:52 2024 GMT
            Not After : Mar 19 13:00:52 2025 GMT
        Subject: CN=186ca25f-ec01-4629-acdd-43cfe396cdf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:80:bf:a8:15:b4:e3:98:27:af:81:93:cd:8a:
                    28:46:37:e6:72:3c:fe:93:96:76:cb:e3:32:40:63:
                    da:f7:b1:29:a5:15:10:84:2a:55:57:db:33:c9:62:
                    9f:56:32:a8:b9:bb:37:9d:d7:56:fa:ba:77:85:4b:
                    cf:bf:b5:20:63:40:ed:e0:85:ae:52:7a:14:66:c6:
                    96:92:8c:a7:93:02:11:5b:29:4b:3f:26:1e:34:33:
                    47:66:96:8c:5e:30:dd:3a:dd:f9:f1:07:c6:79:4c:
                    b9:dc:f0:ad:8b:79:a9:25:e6:38:b7:4b:75:94:5b:
                    43:3c:e1:71:df:1f:6f:cc:01:6c:e7:91:0e:f0:3c:
                    72:03:62:80:e9:c7:aa:ca:83:1e:7a:42:80:6f:fc:
                    91:32:6e:d9:f1:9d:b7:2b:bd:fd:52:7e:1a:07:00:
                    70:56:4e:0d:05:4a:a2:35:30:49:f2:75:b3:8f:f8:
                    ad:e5:22:64:4f:fa:42:53:8f:4c:bf:a2:f3:ce:16:
                    27:0f:9b:6a:62:d9:39:88:ed:cd:d3:96:02:cd:ab:
                    05:8e:1a:58:ea:54:f8:a9:2f:e4:9d:78:80:6f:36:
                    e1:8f:3c:78:1b:51:71:bb:5b:58:30:45:64:06:43:
                    9b:e7:5a:a3:77:6e:a0:4c:d0:a2:f0:af:bc:ec:c9:
                    c2:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:DC:B3:3B:50:5E:42:D3:32:8C:0A:07:BE:BE:37:F3:91:94:43:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f601ba70-383e-4f5d-aacb-7e45e33ac6ba/c2d2ca0b-f812-3101-ba90-0261d1b5768a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f601ba70-383e-4f5d-aacb-7e45e33ac6ba/f601ba70-383e-4f5d-aacb-7e45e33ac6ba.crl

            X509v3 Authority Key Identifier:
                keyid:63:E4:E1:0B:2B:65:78:FC:96:06:23:A2:03:18:67:8B:54:59:F4:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f601ba70-383e-4f5d-aacb-7e45e33ac6ba.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2e4:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:08:17:50:ca:5b:a9:13:28:bf:4e:ee:3e:65:41:30:fc:b5:
         cf:ee:30:77:28:34:4f:7a:97:f2:b0:fe:eb:bd:b6:ac:b0:76:
         0c:44:c5:2c:9b:6c:91:bc:b8:48:a9:03:9b:14:52:69:05:16:
         99:ae:ec:7c:94:b6:0b:da:a8:54:61:b8:4f:b0:53:f0:71:5e:
         0c:dc:d5:96:d5:96:05:82:f1:18:76:ed:1f:cf:8c:04:af:ae:
         b3:a5:66:6f:b3:a8:e6:ac:bf:58:e8:1b:49:b4:be:94:18:a4:
         ad:14:6a:5b:29:a3:32:36:e0:71:81:18:de:42:47:5a:ed:ae:
         af:44:e9:4f:fa:36:8f:41:95:fc:d8:c1:0d:bc:e1:61:cd:fb:
         b8:29:61:ed:44:33:4c:f0:f0:83:79:6d:08:48:fb:0d:be:dc:
         da:7e:08:2e:53:9a:22:b6:66:55:fb:51:ca:91:8b:5e:e1:b6:
         3b:b9:bf:16:4f:78:0d:db:01:bc:21:03:56:03:bb:5f:b8:e1:
         58:d3:f2:a0:21:9a:c5:60:a5:56:5d:2d:23:8b:e1:94:cd:13:
         a1:a9:16:2f:54:c7:b3:e9:67:33:7e:4e:86:d9:7a:8c:16:87:
         a0:7b:97:88:6d:f2:af:91:f9:30:35:f6:f8:5b:a5:92:bb:0a:
         54:85:81:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----