Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/5627e100-c664-3915-9d0e-2b2a862911a1.roa
File:                     5627e100-c664-3915-9d0e-2b2a862911a1.roa (raw, json)
Hash identifier:          TPa3n1rdbdHAObZPuhA98aJdE8S/qBNzdkA4oC+xOlo=
Subject key identifier:   E4:7E:4D:68:CE:6D:BC:8B:C4:02:F2:2D:B0:2B:E1:1E:07:F0:97:AD
Certificate issuer:       /CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
Certificate serial:       010D0C9F4328584800AFC679780947D13CBFE3A0
Authority key identifier: BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/5627e100-c664-3915-9d0e-2b2a862911a1.roa
Signing time:             Tue 26 Nov 2024 02:00:26 +0000
ROA not before:           Tue 26 Nov 2024 02:00:26 +0000
ROA not after:            Mon 24 Feb 2025 02:00:26 +0000
asID:                     38047
IP address blocks:        2602:f83b:55::/48 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:00:af:c6:79:78:09:47:d1:3c:bf:e3:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
        Validity
            Not Before: Nov 26 02:00:26 2024 GMT
            Not After : Feb 24 02:00:26 2025 GMT
        Subject: CN=e19322d0-79b3-4cd9-992e-747bcf1b3680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:89:fa:c5:81:ef:b8:3e:5f:9e:22:67:1b:bf:
                    4e:07:35:22:64:bb:8b:11:c1:12:6d:f2:42:cd:fb:
                    6f:5a:5c:00:56:07:58:dd:08:32:5e:b2:83:fb:1d:
                    2c:fc:b4:26:b5:44:47:b3:a2:6d:91:a6:f9:2a:1a:
                    8a:c1:dd:d6:4d:bc:47:f7:c4:31:bd:89:3a:ce:67:
                    52:b9:21:aa:cc:2c:b3:94:53:8c:0b:e7:3d:23:0d:
                    cf:0a:bb:e6:e7:a3:26:0d:d8:a1:97:14:99:04:b9:
                    99:5a:10:7a:52:b4:c1:4a:3f:38:6f:69:a4:65:2b:
                    78:fc:e2:99:eb:90:70:88:a4:ba:d1:61:3e:26:ca:
                    8e:f8:e2:21:30:dd:2f:d0:85:76:3f:3a:df:ea:78:
                    d9:02:46:7b:14:e9:1c:98:b5:fa:76:13:20:ca:06:
                    f7:79:30:69:fa:7d:47:c7:30:f3:f1:36:fa:78:c8:
                    84:2f:a1:f0:a2:2c:e9:42:48:00:d7:57:a2:08:34:
                    e1:f1:97:50:59:99:55:5a:e2:87:40:cf:df:7d:a6:
                    3b:d2:94:0c:c4:8b:30:f0:a6:e5:ac:36:f3:f9:43:
                    bc:a4:30:36:da:07:a6:59:c0:0e:5a:dc:6b:ed:df:
                    d8:63:98:10:f4:99:2a:1c:33:d6:83:60:fd:73:6a:
                    58:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:7E:4D:68:CE:6D:BC:8B:C4:02:F2:2D:B0:2B:E1:1E:07:F0:97:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/5627e100-c664-3915-9d0e-2b2a862911a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl

            X509v3 Authority Key Identifier:
                keyid:BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f83b:55::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:22:ba:bf:19:b4:87:5c:5e:43:ec:d6:c4:8b:d6:0f:16:1c:
         78:5e:2c:4d:cb:aa:74:2d:ce:2d:b0:88:54:d0:d9:ef:ea:a7:
         40:fb:fd:9f:d3:4b:7d:2a:95:da:af:0e:75:6c:36:5e:69:5a:
         ee:f4:6f:62:53:f8:36:11:50:7d:8c:f8:5a:67:ef:fc:48:9e:
         1c:41:f4:92:ff:fb:cf:c8:2f:34:7f:aa:77:86:00:68:56:19:
         48:29:64:62:cc:a2:16:99:90:5c:0a:7f:4d:51:bb:f5:f5:e2:
         f9:49:5c:91:a3:14:1f:36:43:64:57:f0:67:92:9b:c4:c2:c8:
         b6:bb:85:12:96:4b:72:af:b9:3e:59:c3:83:1d:eb:63:fa:08:
         2e:e9:a8:e6:2d:ae:23:e2:fd:07:08:ca:ce:62:73:33:83:68:
         e4:f3:f1:15:07:14:e9:e6:45:37:49:15:1a:0c:73:83:bc:38:
         da:b1:db:ec:bf:6e:73:32:a6:16:a2:e3:d3:24:e7:b0:e4:ee:
         69:25:bf:f7:b6:32:36:31:01:93:21:fb:a1:cf:ca:33:ee:b3:
         48:5c:5f:02:09:da:be:10:2d:05:73:26:b1:4b:f9:4a:ef:72:
         99:58:cf:ae:0e:3f:7b:76:95:ca:7b:63:8e:d3:bd:89:fa:b1:
         28:16:d6:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----