Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/027c3693-f63b-4f3e-b9ec-ab08979ee1de/507862dc-7927-305d-a2df-47d0ca20e4a6.roa
File:                     507862dc-7927-305d-a2df-47d0ca20e4a6.roa (raw, json)
Hash identifier:          ylEK4I0edtLEM/udUlaRpo6dLfB5ZmXLpE5KDRyhLWA=
Subject key identifier:   8F:94:E2:BF:89:61:86:A8:6E:90:7F:89:74:69:95:F4:4C:00:8D:30
Certificate issuer:       /CN=027c3693-f63b-4f3e-b9ec-ab08979ee1de
Certificate serial:       010D0C9F432858481E279E25073085610ADEDE80
Authority key identifier: B4:7B:5B:C6:E5:ED:28:DC:E6:69:95:3D:60:A7:3C:4E:36:BC:DD:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/027c3693-f63b-4f3e-b9ec-ab08979ee1de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/027c3693-f63b-4f3e-b9ec-ab08979ee1de/507862dc-7927-305d-a2df-47d0ca20e4a6.roa
Signing time:             Fri 06 Dec 2024 15:20:58 +0000
ROA not before:           Fri 06 Dec 2024 15:20:58 +0000
ROA not after:            Thu 06 Mar 2025 15:20:58 +0000
asID:                     55285
IP address blocks:        2607:e0c0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1e:27:9e:25:07:30:85:61:0a:de:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=027c3693-f63b-4f3e-b9ec-ab08979ee1de
        Validity
            Not Before: Dec  6 15:20:58 2024 GMT
            Not After : Mar  6 15:20:58 2025 GMT
        Subject: CN=967079d0-94a4-43e0-bd11-d6895a96d6fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:36:08:fc:da:62:e1:7c:bb:68:57:79:78:90:
                    4c:f1:09:01:a0:0d:c2:44:df:55:82:d1:32:c5:ed:
                    21:b7:dd:35:56:c3:10:e8:8c:a3:c2:4a:17:bf:af:
                    79:04:34:38:6f:6f:6e:14:9f:aa:ff:62:1c:6d:41:
                    2a:b2:f6:ac:25:fd:af:16:e2:f0:99:b9:b6:b2:8e:
                    e4:14:be:c0:1e:a7:10:5e:05:95:9f:53:74:21:c5:
                    bd:89:0e:f0:b5:c9:a2:05:32:07:1b:7e:84:04:1d:
                    90:ee:f6:92:cf:52:f6:40:65:8e:e6:d7:48:f6:82:
                    a0:c4:28:62:e8:2c:97:8d:4c:22:24:03:ef:a4:bf:
                    cd:d3:32:40:ae:dd:ca:78:ff:2c:1b:ec:17:9b:1d:
                    43:b4:3f:3c:50:fd:95:20:97:7f:13:3d:5f:d5:4f:
                    62:a6:9e:69:11:44:af:fe:36:e6:10:8a:6f:91:29:
                    87:35:63:42:48:bf:26:57:f6:1a:b8:79:9a:b7:53:
                    c2:a7:65:d7:aa:f0:ba:d9:07:2e:52:ea:7b:18:8a:
                    55:09:d2:e5:c4:84:26:41:1b:a9:2c:9c:b3:14:57:
                    6d:bb:5f:ef:53:9c:a1:81:b9:06:bd:15:9d:9a:71:
                    28:76:2d:96:2d:43:18:b7:af:cc:66:38:54:be:4b:
                    7a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:94:E2:BF:89:61:86:A8:6E:90:7F:89:74:69:95:F4:4C:00:8D:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/027c3693-f63b-4f3e-b9ec-ab08979ee1de/507862dc-7927-305d-a2df-47d0ca20e4a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/027c3693-f63b-4f3e-b9ec-ab08979ee1de/027c3693-f63b-4f3e-b9ec-ab08979ee1de.crl

            X509v3 Authority Key Identifier:
                keyid:B4:7B:5B:C6:E5:ED:28:DC:E6:69:95:3D:60:A7:3C:4E:36:BC:DD:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/027c3693-f63b-4f3e-b9ec-ab08979ee1de.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:e0c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:59:0f:6a:a4:a0:ec:dd:5f:c2:8f:9c:10:a4:7a:0e:78:3d:
         bf:ca:19:6c:6e:d7:86:4a:ea:db:de:dc:e8:c7:5a:a4:e4:36:
         6a:12:e6:1c:8b:5c:79:84:8e:ca:77:ce:0c:ed:9c:96:b3:01:
         81:8f:b6:ca:e1:e0:c8:cf:44:af:d8:e6:b5:f4:c9:22:46:02:
         03:ed:92:ea:fd:a0:1f:61:78:c3:26:1d:0c:6b:15:7f:c4:17:
         95:37:35:79:c9:d8:f9:ed:32:63:72:8b:cd:c3:cb:80:7a:96:
         d3:51:5b:a7:6a:ce:ec:e0:90:5c:e4:fd:4f:0c:23:67:a5:96:
         26:c9:6f:e3:cc:4f:6e:7c:4b:ac:ff:60:0c:f3:0b:c2:a7:4a:
         6f:71:82:55:ca:87:b1:8d:eb:07:2b:2a:bb:06:c2:b7:21:7e:
         38:12:b9:e2:1c:fd:84:5c:ae:9c:96:da:b3:f1:cc:74:52:a1:
         14:b2:b9:99:cf:a8:5e:4d:09:9d:0b:d3:79:a4:a2:69:0c:ca:
         4a:92:e4:79:57:4b:f0:9c:39:b7:8b:15:47:9f:87:2c:a1:f6:
         fe:53:02:e9:89:46:e6:e5:11:60:33:a9:f2:c8:ef:48:0d:ab:
         33:74:12:f8:71:bc:08:a5:3a:0a:58:56:b9:c8:92:4b:de:a0:
         9c:39:f7:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----