Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/deb4a797-c84c-366e-afb9-971de9e46797.roa
File:                     deb4a797-c84c-366e-afb9-971de9e46797.roa (raw, json)
Hash identifier:          +zVFziMCrAdwuVd3cX/fk6BXH/lnkw1KehuVSv9vpdo=
Subject key identifier:   B4:71:3B:FA:0A:37:DB:86:46:57:4B:B3:B3:9C:D3:3B:AD:A5:CA:F0
Certificate issuer:       /CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
Certificate serial:       010D0C9F4328584800AFC6209AA0BC5BE9DD8B80
Authority key identifier: BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/deb4a797-c84c-366e-afb9-971de9e46797.roa
Signing time:             Tue 26 Nov 2024 02:00:26 +0000
ROA not before:           Tue 26 Nov 2024 02:00:26 +0000
ROA not after:            Mon 24 Feb 2025 02:00:26 +0000
asID:                     38047
IP address blocks:        2602:f83b:2::/48 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:00:af:c6:20:9a:a0:bc:5b:e9:dd:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
        Validity
            Not Before: Nov 26 02:00:26 2024 GMT
            Not After : Feb 24 02:00:26 2025 GMT
        Subject: CN=03d5fd50-f261-4574-9544-4f01a92ba75f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:66:65:ff:42:3c:38:bf:5d:a6:09:00:98:00:
                    65:98:3e:1c:0c:b4:5b:84:b7:26:e5:aa:90:f6:8d:
                    22:9f:5a:57:1b:11:88:79:8e:31:0b:51:2d:18:34:
                    c5:93:56:30:61:be:d6:da:11:0a:90:b9:60:d5:36:
                    c5:35:5f:f0:0a:63:88:f7:ae:c4:81:30:09:f0:c3:
                    d6:27:99:e3:63:72:1f:f4:2f:53:08:d1:60:d9:cb:
                    7c:41:2a:28:69:83:63:b0:b8:e8:b0:28:b3:65:9d:
                    56:0c:bf:b9:81:48:65:67:67:fa:24:c6:e8:1a:b3:
                    2f:bd:a7:ea:87:33:53:b4:b5:2b:44:ea:32:0b:b1:
                    be:c4:10:1b:30:0e:6c:7e:66:57:8d:71:21:7d:82:
                    82:b5:60:dd:78:3a:52:21:76:97:96:01:1f:1e:ea:
                    e3:99:2f:60:0f:cd:e3:e2:af:e5:b6:44:d2:f4:ce:
                    d2:21:81:49:4e:4e:fc:f8:a2:63:84:3d:c1:47:07:
                    79:1b:57:c1:9c:9f:01:f7:7e:c2:db:bb:8e:c3:7f:
                    c1:c3:95:e0:27:6d:9d:83:18:43:ec:fd:ad:76:43:
                    14:fa:94:fe:a8:02:84:ed:0c:d8:42:82:8e:78:4d:
                    a5:90:c3:42:7e:bb:c5:f3:02:ae:a0:53:5d:37:be:
                    fe:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:71:3B:FA:0A:37:DB:86:46:57:4B:B3:B3:9C:D3:3B:AD:A5:CA:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/deb4a797-c84c-366e-afb9-971de9e46797.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl

            X509v3 Authority Key Identifier:
                keyid:BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f83b:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:b8:66:3e:00:bb:48:51:63:fd:d6:09:ea:87:e8:a6:27:a9:
         d6:67:75:a6:bf:ad:2b:fb:69:0a:cd:d7:9a:b7:b2:f6:91:7c:
         02:aa:70:6d:88:36:45:55:c6:9f:af:d9:26:43:3b:52:0a:41:
         d8:bf:14:38:53:6d:8b:57:1e:4b:17:66:3c:db:72:46:00:c4:
         21:a1:3d:56:75:33:44:2c:78:f1:a2:e9:4d:c1:d1:76:0d:95:
         cb:05:72:08:d6:27:71:39:49:7f:c7:3f:14:07:fd:68:11:ba:
         54:8f:6b:d9:cc:b8:54:0f:28:5d:28:6c:e2:b3:37:cf:38:38:
         9c:15:16:50:73:c9:3f:7e:91:cb:4e:a9:d2:59:a2:4c:31:37:
         6e:58:b5:25:4c:50:e4:b7:5a:57:1f:65:ad:72:4e:7a:ce:48:
         31:b2:83:93:3f:08:ca:6e:0f:2c:36:88:dc:1c:e7:8e:9f:5c:
         10:3f:67:e4:89:8b:0d:fa:1d:bf:06:9d:ad:77:c5:8e:6c:d6:
         7d:15:12:23:2a:60:ee:c9:22:cc:c2:f0:47:9d:d6:34:1e:1d:
         32:e1:e0:46:70:7b:be:6d:e5:d1:c5:25:6b:c6:e6:14:1c:08:
         32:14:31:d9:d2:41:be:b6:c7:6e:f9:23:a2:4b:ae:0b:51:45:
         c6:c0:a7:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----