Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/f7ae8bbe-3eb4-38d8-bd99-308670525a46.roa
File:                     f7ae8bbe-3eb4-38d8-bd99-308670525a46.roa (raw, json)
Hash identifier:          CMDWmffgB4VDhOV3kAo6YEEogFWBOb7k/C1wWU/awME=
Subject key identifier:   E1:0C:75:7C:A5:2A:26:AD:2A:5B:70:76:01:AF:E3:CB:D1:70:3A:8D
Certificate issuer:       /CN=5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593
Certificate serial:       010D0C9F43285847EEE6EE8246E864A052824280
Authority key identifier: 26:40:8A:FD:16:DB:87:11:C6:D9:C6:70:65:4A:9E:DC:F2:BB:93:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/f7ae8bbe-3eb4-38d8-bd99-308670525a46.roa
Signing time:             Tue 19 Nov 2024 17:07:38 +0000
ROA not before:           Tue 19 Nov 2024 17:07:38 +0000
ROA not after:            Mon 17 Feb 2025 17:07:38 +0000
asID:                     396422
IP address blocks:        2604:81c0:3d5::/48 maxlen: 48
                          2604:81c0:3d5c::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ee:e6:ee:82:46:e8:64:a0:52:82:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593
        Validity
            Not Before: Nov 19 17:07:38 2024 GMT
            Not After : Feb 17 17:07:38 2025 GMT
        Subject: CN=fcda134a-f7f1-4095-987e-4703dfbb11f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:34:95:2e:fb:1e:c3:b4:15:e0:85:c9:ed:8d:
                    1c:a6:ae:97:17:c1:ea:93:8a:a9:4f:8f:4d:d7:30:
                    31:97:31:90:d4:91:f6:d7:0c:75:65:cc:18:4a:8b:
                    e0:45:94:0c:84:5e:c4:49:95:27:12:b5:3e:8d:5e:
                    fd:ed:95:9c:06:74:cf:d8:c5:ef:03:48:ed:68:61:
                    81:29:9c:3b:e5:51:b8:f6:8c:7d:5d:ff:49:b7:c7:
                    b2:c4:bc:05:3e:2c:e7:7e:4e:25:46:a7:9f:c2:91:
                    93:44:3e:6a:7d:70:9b:fe:24:98:28:22:e8:c0:de:
                    58:81:51:56:3a:67:aa:ca:b3:bf:4c:ef:7d:96:d4:
                    83:a5:08:da:32:20:0c:dc:03:62:26:eb:88:22:d7:
                    2d:9f:be:02:6b:f7:f5:8d:05:37:9a:07:b7:52:5e:
                    40:bf:f8:00:dd:6e:8e:ee:74:ba:0a:17:48:d1:a8:
                    f4:f0:5c:e5:5e:59:1b:77:7b:1b:e3:29:cd:3e:06:
                    80:01:99:ff:23:36:35:bd:12:22:d1:3b:dd:82:30:
                    e1:34:30:e0:2a:fa:77:2e:3e:62:be:b6:d9:e4:aa:
                    35:51:7e:7c:6e:19:4f:5e:b7:18:dc:9d:36:da:56:
                    83:49:a8:9a:f3:a5:2f:e1:98:0a:0f:c3:ac:fd:9f:
                    b4:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:0C:75:7C:A5:2A:26:AD:2A:5B:70:76:01:AF:E3:CB:D1:70:3A:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/f7ae8bbe-3eb4-38d8-bd99-308670525a46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.crl

            X509v3 Authority Key Identifier:
                keyid:26:40:8A:FD:16:DB:87:11:C6:D9:C6:70:65:4A:9E:DC:F2:BB:93:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:81c0:3d5::/48
                  2604:81c0:3d5c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:70:ef:f4:f1:64:2d:3d:16:e6:34:d4:33:c4:96:37:4a:c5:
         41:cd:f3:65:e8:f7:90:bd:3f:9d:05:65:41:ce:44:e8:af:80:
         b5:b5:81:bf:9c:d8:ce:30:df:40:b5:6e:42:7c:d6:5a:ef:72:
         06:7a:1b:0b:07:6d:2e:51:77:e9:3e:e3:ee:99:80:16:10:0d:
         6a:7c:a1:9e:26:4e:18:e1:3f:8e:1f:db:d0:d3:fb:ef:5b:7e:
         42:d7:f4:96:69:99:ae:23:3a:c5:1c:65:ab:71:4f:5c:87:d0:
         ce:c6:02:32:cf:4a:a7:8c:92:a2:49:c8:73:5c:69:8a:f0:3a:
         e4:22:c5:de:40:8b:4f:3e:ef:dc:b9:3d:f4:43:0b:2e:8b:7c:
         89:69:a0:55:8c:26:ef:24:04:1b:02:1a:b9:5c:54:ee:c5:86:
         7c:e4:a1:be:1c:9b:0d:7d:ae:f8:8c:36:cd:e4:7c:46:50:15:
         f1:40:9d:44:13:ed:63:02:94:4f:2a:fc:4b:c0:20:ad:16:38:
         3a:8c:a0:96:08:65:59:45:c1:96:4d:f2:c0:34:7b:92:9c:89:
         91:d4:b9:93:5f:91:a3:31:09:68:80:a9:2a:5a:9b:54:06:a4:
         16:bf:50:18:cb:de:7b:a9:0d:7e:0b:00:e2:ba:03:4d:ae:0b:
         98:01:e4:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----