Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/058152a1-3891-368d-8027-9c6237fb76c5.roa
File:                     058152a1-3891-368d-8027-9c6237fb76c5.roa (raw, json)
Hash identifier:          9hkSPV1gZRWxSfGBca3xy7907eHU69OuQ/LLLo1XhlQ=
Subject key identifier:   F1:68:50:66:8E:8D:EE:C4:61:39:47:C6:6F:E1:B1:C3:91:EE:53:CB
Certificate issuer:       /CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
Certificate serial:       010D0C9F43285848A315D2DF3ED9595A9FEF7B00
Authority key identifier: E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/058152a1-3891-368d-8027-9c6237fb76c5.roa
Signing time:             Thu 23 Jan 2025 06:07:37 +0000
ROA not before:           Thu 23 Jan 2025 06:07:37 +0000
ROA not after:            Wed 23 Apr 2025 05:07:37 +0000
asID:                     19165
IP address blocks:        2604:5500::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a3:15:d2:df:3e:d9:59:5a:9f:ef:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
        Validity
            Not Before: Jan 23 06:07:37 2025 GMT
            Not After : Apr 23 05:07:37 2025 GMT
        Subject: CN=c932fdb8-c4ba-46f8-af04-2343dd530f51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:9a:c0:8d:cb:1e:c0:12:3e:ac:29:cc:c5:fb:
                    95:67:b0:74:45:d1:77:4b:49:46:26:6b:7a:1c:49:
                    e9:03:af:9f:d1:76:fc:24:a0:a6:68:c6:8d:20:d6:
                    c5:ac:4c:05:27:b6:02:2e:c5:ad:dc:55:47:34:a5:
                    1a:2b:b8:8b:3e:a8:4d:18:84:9f:29:8e:90:fa:65:
                    3a:d4:2f:0a:26:7b:fb:8d:8a:98:ff:34:08:a0:13:
                    a7:2c:aa:4b:20:a1:b1:ef:ff:72:92:0c:ee:77:4b:
                    67:ec:87:c8:28:57:98:18:a4:16:28:8e:70:ed:a9:
                    24:fa:ae:c5:ce:cb:77:df:ca:05:9d:47:ce:30:f4:
                    fa:dd:4c:1a:c1:96:c7:04:54:1f:f5:6d:b6:63:fc:
                    7a:68:63:b6:52:9f:f1:bc:2f:95:df:ae:9e:a4:76:
                    34:15:7e:02:39:bc:ae:cf:bc:b4:11:7f:e2:42:26:
                    7e:49:e2:b5:58:ee:70:07:f5:74:90:e8:c7:71:5c:
                    ff:ed:89:a9:6d:0e:54:48:2b:75:98:f0:ce:bb:20:
                    6c:5e:e6:00:6e:9f:4d:a3:0a:0c:7a:b8:4b:76:cd:
                    57:98:f0:7d:28:26:80:2d:20:9f:d9:ff:64:4f:07:
                    cc:e6:89:04:75:5b:ba:df:0c:b2:70:62:3f:52:c9:
                    36:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:68:50:66:8E:8D:EE:C4:61:39:47:C6:6F:E1:B1:C3:91:EE:53:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/058152a1-3891-368d-8027-9c6237fb76c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl

            X509v3 Authority Key Identifier:
                keyid:E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:5500::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:73:79:f1:ef:bd:c8:ba:ee:25:d7:94:b9:5f:01:cd:c0:19:
         d3:8b:b2:92:40:e2:71:e0:15:f1:4f:33:23:56:e8:e0:36:c9:
         81:e1:ee:b0:22:74:e9:37:d1:26:2b:ad:51:74:ea:78:59:5d:
         6d:d6:44:53:57:e7:94:7d:09:bd:cf:eb:eb:10:5d:7d:48:53:
         ca:36:60:db:9c:fd:ce:6f:68:a0:ba:45:f3:81:dd:5d:47:e6:
         cd:8d:23:62:8b:5b:fc:c3:da:e4:5b:84:2d:40:80:b8:2c:ca:
         18:4d:fe:78:6c:f2:e6:b6:1b:9d:83:cb:ed:fe:05:16:0d:a6:
         0b:fa:b1:c5:6b:0d:fd:70:e8:06:7d:e0:96:73:d7:cc:63:c6:
         9f:c8:fd:09:31:af:c4:6d:3c:5e:e2:33:f1:19:f9:2c:52:35:
         2b:0f:9d:9c:01:e3:db:d8:d8:0e:30:25:31:b5:b7:7c:2a:ea:
         2e:fc:b9:a1:95:c1:1d:a8:1d:f8:90:96:09:90:af:bf:20:6e:
         61:b6:13:f0:65:6b:69:01:ac:23:b5:11:7d:91:1b:c9:31:58:
         c3:90:5d:23:84:31:d1:5b:0c:71:a1:1e:a4:c5:02:de:65:23:
         e5:31:0d:f6:5f:7b:e1:7a:fe:a8:93:08:16:b7:b0:ae:76:44:
         da:34:86:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----