Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/67048364-819f-3191-853f-4269ffe18a99.roa
File:                     67048364-819f-3191-853f-4269ffe18a99.roa (raw, json)
Hash identifier:          hGYBpMU8/fcfnAzpG2WOMeuWUV+d8UkvpmX+B8kjR28=
Subject key identifier:   CB:99:B5:D1:F5:A5:63:C5:45:C6:A8:CC:D7:CE:E2:59:F6:B8:E0:84
Certificate issuer:       /CN=af4b288d-bc7b-443a-b3f4-52662b22717a
Certificate serial:       010D0C9F432858482CD1D9970E61D7D8B629F880
Authority key identifier: 33:00:06:6E:0F:90:44:FD:C5:20:B6:BA:C7:52:F3:7D:C9:E2:A4:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/67048364-819f-3191-853f-4269ffe18a99.roa
Signing time:             Wed 11 Dec 2024 21:25:17 +0000
ROA not before:           Wed 11 Dec 2024 21:25:17 +0000
ROA not after:            Tue 11 Mar 2025 20:25:17 +0000
asID:                     53667
IP address blocks:        2602:f7c5::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2c:d1:d9:97:0e:61:d7:d8:b6:29:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af4b288d-bc7b-443a-b3f4-52662b22717a
        Validity
            Not Before: Dec 11 21:25:17 2024 GMT
            Not After : Mar 11 20:25:17 2025 GMT
        Subject: CN=104d562a-9b20-40df-945e-86ad9fd0a5f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:cb:cd:88:e6:35:c0:bd:bd:98:1c:b7:c1:69:
                    80:4d:d1:56:0a:e8:20:3d:c8:c1:3e:ba:be:c6:0f:
                    54:ad:e5:c2:62:e0:60:a4:dc:c6:b8:1f:fb:f7:c1:
                    ff:0c:74:93:3b:ca:13:73:1c:b8:ef:a3:82:8f:85:
                    7b:04:1f:70:66:90:b2:11:a0:8b:03:ab:91:5f:ec:
                    7a:6d:ee:ac:13:b7:4d:8a:d0:33:73:60:5c:fd:74:
                    60:34:dd:13:ea:58:0e:5e:45:a1:ce:ea:71:52:49:
                    37:3c:fd:6f:ab:30:af:12:10:8c:23:71:b8:ab:bc:
                    b7:61:4e:25:d5:aa:e2:17:ff:bd:7d:a0:99:e3:d5:
                    89:27:48:85:3d:23:82:3e:a7:23:3d:05:63:61:59:
                    e2:b0:da:1d:71:01:70:2b:17:bf:bd:87:10:96:f7:
                    3b:d0:25:ec:11:e1:9d:01:7b:6b:85:f5:5e:8e:0b:
                    51:b6:14:69:09:99:9f:66:15:93:ac:d3:0d:1e:44:
                    4c:02:c5:e6:7d:46:0d:d6:50:16:92:94:db:9c:e6:
                    65:99:18:11:16:dd:be:0a:10:51:3d:ae:f6:38:a8:
                    22:40:1e:58:72:3a:ee:bf:cc:e7:e6:09:c1:19:4a:
                    3a:21:bc:97:eb:1d:ef:87:a4:64:72:3a:08:df:0a:
                    f8:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:99:B5:D1:F5:A5:63:C5:45:C6:A8:CC:D7:CE:E2:59:F6:B8:E0:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/67048364-819f-3191-853f-4269ffe18a99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/af4b288d-bc7b-443a-b3f4-52662b22717a.crl

            X509v3 Authority Key Identifier:
                keyid:33:00:06:6E:0F:90:44:FD:C5:20:B6:BA:C7:52:F3:7D:C9:E2:A4:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7c5::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ce:67:0d:f7:0e:92:1d:c8:df:d6:f4:9e:94:9f:4e:ae:4d:c1:
         6c:19:42:e0:32:29:3b:17:e7:6c:2e:3a:1b:f8:6f:11:51:60:
         46:a4:2c:3a:86:35:76:04:cd:0a:97:d2:4e:3a:14:fe:55:f4:
         1e:16:d8:71:92:db:be:a1:90:b7:09:b6:8f:34:5c:65:10:d8:
         16:de:d9:11:ce:dd:25:c9:68:ed:80:5a:dc:9c:e6:c3:c2:62:
         5f:e0:ca:ba:14:69:d0:e6:c0:08:2d:9d:44:94:ea:1e:f4:86:
         95:35:6c:7b:f0:31:1c:ee:e7:7c:9f:fe:d1:97:fb:aa:ed:96:
         df:54:7d:0c:6b:75:0d:51:88:78:98:35:28:60:74:7e:6b:0c:
         46:43:7a:7a:e9:33:e7:19:00:df:0d:00:da:f4:5d:f6:64:f2:
         56:87:7a:f6:ce:70:53:a3:47:87:32:f0:2b:27:dc:7f:75:dc:
         87:61:7f:48:34:c7:3a:0f:d7:5d:1e:85:45:f0:76:2e:07:4f:
         f0:13:b2:97:e0:51:ae:3f:c1:ac:dd:43:fc:a6:6a:6f:5d:9b:
         c8:e7:da:c3:18:3a:0e:57:0f:d1:e9:32:16:bb:d6:90:77:71:
         d5:96:5e:15:06:3d:ad:e5:33:93:55:bc:de:7d:03:26:ea:9b:
         f5:2c:f4:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----