Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/4a6b6451-8445-3cbd-8767-c10ab07c9f40.roa
File:                     4a6b6451-8445-3cbd-8767-c10ab07c9f40.roa (raw, json)
Hash identifier:          H55RRX9hGV1EqK+0+7sJagzlB0uCgrbd5W7sTM5xis8=
Subject key identifier:   6C:4D:86:62:9E:D6:FC:FC:61:5F:0E:E9:E8:4A:74:A3:E5:3E:09:9C
Certificate issuer:       /CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
Certificate serial:       010D0C9F4328584800AFC685F18BDCF932B9F3A0
Authority key identifier: BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/4a6b6451-8445-3cbd-8767-c10ab07c9f40.roa
Signing time:             Tue 26 Nov 2024 02:00:26 +0000
ROA not before:           Tue 26 Nov 2024 02:00:26 +0000
ROA not after:            Mon 24 Feb 2025 02:00:26 +0000
asID:                     38047
IP address blocks:        2602:f83b:54::/48 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:00:af:c6:85:f1:8b:dc:f9:32:b9:f3:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
        Validity
            Not Before: Nov 26 02:00:26 2024 GMT
            Not After : Feb 24 02:00:26 2025 GMT
        Subject: CN=ef7228a5-3f62-479c-a1e9-8cfec41ca1d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:55:e9:8d:21:77:9c:8a:25:51:1c:68:c5:f6:
                    e9:36:88:7f:9f:dc:fb:46:03:89:bc:c8:70:a5:db:
                    6c:51:3b:7a:66:c5:f8:60:95:a4:e1:5e:5c:02:8c:
                    bd:3d:0d:02:9c:2e:b3:62:98:49:57:50:90:eb:4c:
                    02:8a:17:5a:5e:a1:79:d0:6b:c9:62:32:5c:fa:61:
                    b0:8d:b2:52:85:67:61:7f:bc:eb:67:0e:57:24:4b:
                    b4:85:3f:7d:4f:c7:25:06:7f:0f:43:aa:cd:b8:ba:
                    82:59:ce:56:7c:b3:2e:3e:e5:8d:3b:06:f4:36:92:
                    e1:8c:3c:12:44:f1:09:a6:9f:3b:08:b8:2c:76:a6:
                    e7:01:d2:af:4a:ad:a9:ac:6a:0f:8c:99:b5:4c:33:
                    12:4c:20:dc:a2:60:6d:7e:1f:5b:65:78:90:a2:c5:
                    4c:0a:c3:b6:73:d3:83:c1:2c:7f:69:2f:fb:1f:f9:
                    d8:09:8f:c8:7d:df:cb:68:95:d4:a3:7f:2b:4e:69:
                    bc:e3:25:9c:4f:9f:ee:f8:41:d5:28:a7:e5:63:42:
                    bc:ec:cb:79:a9:60:cc:59:b1:aa:27:61:68:9e:da:
                    4b:4c:67:32:45:77:f5:1e:2e:31:0a:96:64:47:65:
                    31:48:98:8b:17:0d:44:88:11:96:3d:be:08:17:99:
                    8f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:4D:86:62:9E:D6:FC:FC:61:5F:0E:E9:E8:4A:74:A3:E5:3E:09:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/4a6b6451-8445-3cbd-8767-c10ab07c9f40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl

            X509v3 Authority Key Identifier:
                keyid:BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f83b:54::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:05:0c:2f:e6:29:59:e0:13:7e:87:2c:e8:b9:5e:ed:de:98:
         fa:e3:32:27:eb:e8:f9:00:93:d4:30:99:7b:b4:45:39:5c:5b:
         5a:00:53:4d:80:3e:4b:c0:36:5c:c8:2e:87:34:fc:6b:78:89:
         51:0f:14:5d:e2:39:e2:54:c4:7b:94:f1:a2:bf:ad:ee:a6:62:
         dd:c2:67:54:e3:65:fb:23:79:4e:61:1b:2e:8a:ee:3c:2b:84:
         a9:ee:4d:84:c7:2b:f5:89:78:57:87:82:15:03:0f:2c:29:de:
         b6:2e:bb:6e:36:93:73:ea:af:64:f6:89:c4:ff:3d:50:f7:30:
         9c:1b:93:76:9c:1a:b0:05:a3:56:c3:2d:ee:77:4d:c4:b9:a1:
         ed:38:12:0e:f5:13:05:c5:5c:d5:11:f1:d1:4a:20:97:a4:ad:
         61:c6:82:ce:29:a4:41:e7:49:8f:65:af:76:28:47:d4:46:96:
         fa:be:e5:52:48:6c:87:64:d8:0c:cd:7d:29:f4:1c:c5:9f:4c:
         68:be:da:0a:ab:23:b3:b9:1f:6a:4d:f7:ed:84:74:30:d1:8d:
         31:1a:dc:9f:11:3d:e0:7d:7d:a6:42:ec:e5:c8:27:ac:34:d0:
         a8:ab:07:ce:1e:54:10:82:a9:71:11:db:4a:45:39:89:af:0d:
         5c:a7:98:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----