Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/ae2c5b0f-33fb-3ffe-b7ad-c483856d4224.roa
File:                     ae2c5b0f-33fb-3ffe-b7ad-c483856d4224.roa (raw, json)
Hash identifier:          +5CCPPyze1VTxFp2/n1nqGVdrZwTgomEUkeriM+it/w=
Subject key identifier:   98:14:B9:44:95:72:8D:24:56:C6:71:9D:D6:EF:93:C9:A1:EC:CC:54
Certificate issuer:       /CN=12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf
Certificate serial:       010D0C9F432858484C10386525083F1B37265040
Authority key identifier: 09:28:03:82:14:21:A9:9C:A8:43:E5:A3:00:37:47:84:D1:24:67:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/ae2c5b0f-33fb-3ffe-b7ad-c483856d4224.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     397041
IP address blocks:        2604:f740:100::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:10:38:65:25:08:3f:1b:37:26:50:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=22eb255a-f9eb-4bb5-a5fb-b93a063dde86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d2:c3:44:ef:e8:e2:7a:26:a8:dd:19:f1:82:
                    51:cb:ec:6a:36:c2:7e:51:91:8a:64:72:a3:a6:50:
                    9e:ad:5c:14:af:39:d3:06:1c:d6:62:0d:51:0a:c5:
                    07:b6:af:9b:ae:d7:d7:fe:87:c5:d0:2e:06:02:06:
                    b8:a2:51:16:9b:0d:6c:ff:7f:e3:3c:ae:54:cd:49:
                    b4:fe:ed:68:32:68:ab:0a:e2:91:a2:59:28:e7:f2:
                    b2:53:32:3e:9b:f3:bc:fb:83:45:34:0f:12:9e:a4:
                    09:97:28:5f:c3:cf:05:16:72:e3:94:e5:a4:d6:43:
                    62:37:07:b8:5a:c0:6a:59:6b:5c:5b:79:db:fc:08:
                    84:f6:ab:05:c4:50:7c:78:49:21:51:d5:8b:56:c0:
                    b4:f8:53:5c:39:12:de:c1:d5:e0:50:8b:e5:b4:53:
                    09:f9:27:9c:34:a2:cf:25:90:f3:65:6b:57:c0:1f:
                    fa:cc:93:bb:05:29:74:16:15:3e:f0:53:cb:80:18:
                    00:0e:5d:d8:58:98:ee:92:b9:33:56:2f:7d:89:09:
                    7f:8a:17:78:03:ad:52:16:8d:b0:d6:af:06:1b:21:
                    df:8d:d4:5e:af:2f:ec:55:90:f5:44:81:99:a0:52:
                    3b:d5:c9:5d:9d:fc:1e:6a:5a:af:5c:8d:a0:82:c4:
                    e7:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:14:B9:44:95:72:8D:24:56:C6:71:9D:D6:EF:93:C9:A1:EC:CC:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/ae2c5b0f-33fb-3ffe-b7ad-c483856d4224.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.crl

            X509v3 Authority Key Identifier:
                keyid:09:28:03:82:14:21:A9:9C:A8:43:E5:A3:00:37:47:84:D1:24:67:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:f740:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:a3:d3:96:b1:39:c4:6b:bd:11:e6:51:db:02:73:d2:3d:46:
         fb:4a:59:1d:f0:2e:ed:3d:18:92:4c:63:b2:70:33:31:79:d3:
         69:4a:0f:ed:02:64:80:37:81:e7:4f:5d:b1:19:86:f0:61:4c:
         53:55:31:df:fd:ef:05:b8:74:71:55:c9:84:02:3e:20:59:65:
         96:11:78:11:d8:de:1a:f1:70:67:28:37:53:7b:65:3f:3f:2b:
         25:e4:a4:10:d9:f4:a3:43:3a:37:1e:59:77:de:7e:5a:91:14:
         46:3b:28:28:ee:d6:25:d4:98:ec:f8:03:d9:99:41:56:4f:72:
         5a:05:06:a5:71:d2:15:14:35:17:3a:9f:12:ff:d9:26:2b:59:
         54:45:66:1a:6e:0e:8b:7e:02:d9:57:cf:ff:d5:b8:1b:91:bb:
         39:94:7e:85:6d:5f:34:a1:bf:c1:91:f3:5c:2b:ab:b0:af:0b:
         ef:96:3f:ec:fb:c1:41:51:e6:dd:47:bc:f5:06:cb:c5:dd:96:
         dd:5f:43:fd:63:9d:c7:d9:d8:28:06:de:3f:ad:93:09:d7:80:
         ff:85:00:40:c9:bf:cd:1d:76:c7:45:20:73:74:d1:6c:9f:9c:
         ca:36:b3:c9:2f:9b:90:4b:ea:ce:c6:5b:73:98:d8:b7:14:a7:
         fd:a1:2f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----